Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
File: J84emmUiYWqzCw8SPgnTBagjBK8.mft (raw, json)
Hash identifier: yot8iRlztdbpMMFWp0+wm/tqdp4C1GyG20+zPE+eKZQ=
Subject key identifier: CF:95:0C:21:F9:21:74:BD:F0:77:88:22:90:1F:46:B0:5D:56:C2:BB
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Certificate issuer: /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial: 0198D5F19FF183A93D22AFED4ED7338AF489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 08:00:38 +0000
Manifest this update: Sat 23 Aug 2025 08:00:38 +0000
Manifest next update: Sun 24 Aug 2025 08:00:38 +0000
Files and hashes: 1: J84emmUiYWqzCw8SPgnTBagjBK8.crl (hash: Zv5pKvvjmrA/C14m97So/XWUUkwWfyakm4J8agl4bRs=)
2: WgYDhL0i6U8cqNQpr57kES37q38.roa (hash: RKIGt1CKlAHIm7PDdsvYymoW20pcRCPFEmrAdn3vZno=)
3: xfeGCbXD-YF0qFrPXVL_VBgsViY.roa (hash: +QvSz3wl8pHqddA2o6rF3CbvD6JrTHLlFmQPhouhbbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9f:f1:83:a9:3d:22:af:ed:4e:d7:33:8a:f4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Validity
Not Before: Aug 23 08:00:38 2025 GMT
Not After : Aug 24 08:00:38 2025 GMT
Subject: CN=cf950c21f92174bdf0778822901f46b05d56c2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:ca:f5:22:90:5e:e8:3b:b0:05:d1:2e:75:
ed:3e:b2:e2:46:fd:ef:74:b7:24:63:e9:75:61:90:
a6:42:cf:7c:8a:26:5b:d9:94:df:dd:ee:38:33:62:
37:e8:60:44:8b:21:2e:f0:e0:d8:c8:79:b6:04:cf:
7b:27:3c:1b:0a:67:9e:1a:0f:0b:13:2f:99:f7:c6:
c3:9b:f1:aa:bb:1e:ff:7f:a7:a6:2b:74:1a:83:46:
da:00:6a:d6:5b:0d:85:c2:41:da:82:6e:c7:f4:12:
47:03:39:9a:1d:97:b6:2f:14:40:b5:30:45:fd:7c:
6e:03:4f:7f:a6:c7:71:28:3d:f5:25:08:5f:a0:8a:
f7:64:ba:5e:b0:a2:77:89:61:b4:b9:0f:30:3e:0f:
b0:4f:83:08:77:97:c7:d1:c9:2b:cb:d5:b2:a9:54:
07:6f:2c:7a:04:48:4c:e2:a7:f7:69:fc:00:d6:a1:
93:16:9c:62:94:fe:44:ca:cd:30:3c:21:f7:8f:fe:
71:63:b4:94:62:50:ec:f6:e4:44:26:c5:93:e9:ae:
df:3a:a1:ad:15:07:b0:b2:20:1d:d8:87:ae:c4:7f:
d5:73:7c:e3:57:0b:26:4f:ed:2f:59:ae:91:7d:1c:
7e:48:6a:dd:45:f7:ca:ff:14:33:0c:f7:31:4e:0b:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:95:0C:21:F9:21:74:BD:F0:77:88:22:90:1F:46:B0:5D:56:C2:BB
X509v3 Authority Key Identifier:
keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4c:aa:57:59:2f:ec:d5:e3:3b:3d:ce:a1:ff:8f:1a:c3:0b:
d5:70:4a:ff:ad:3d:0d:4b:a3:75:c4:b8:fc:80:5d:64:fc:a5:
61:4f:44:b6:e8:ce:d5:05:60:d5:e2:74:d4:43:25:52:06:4e:
4f:e3:f6:0e:f0:a9:ba:4f:7d:ca:5e:82:be:e2:10:48:67:22:
c2:2e:3d:68:ea:7b:69:bc:44:29:2f:6e:eb:15:fa:60:d1:da:
79:cc:0c:52:f8:13:b3:d8:44:56:63:60:1d:c3:43:b0:2f:78:
c5:5b:88:8d:e4:74:de:b1:86:bd:8e:10:32:4c:96:0d:49:83:
3a:c8:ff:18:9e:d3:a5:09:d2:4c:b1:38:87:a1:a0:2c:41:71:
4e:dc:ba:4e:50:8b:81:ce:4b:7b:c5:19:4e:8e:89:95:6a:8b:
91:1f:ef:0b:e6:79:93:dd:b6:20:0a:57:85:85:47:04:fe:9e:
05:bd:0b:22:f8:25:30:0b:20:83:d6:52:bd:1c:b5:ca:d2:c6:
36:c0:d3:52:0b:74:a0:e9:88:55:f8:73:81:9a:85:9f:1c:d6:
a0:43:71:46:67:34:51:ce:3c:3f:e5:6c:41:7d:fc:59:fc:5b:
e3:61:5c:2d:59:be:0e:f6:d3:f6:64:37:5f:2b:16:51:b7:15:
83:74:1a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:16:50 2025 by rpki-client