Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File: J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier: mB0TUgkM0k49eFlLWnagICWxAJkSE/NFS3ZvHry5xtY=
Subject key identifier: 13:AC:46:30:5B:64:EE:54:3A:31:CB:ED:CB:18:F8:23:20:98:CE:A5
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 0198D5157D7F2A71DBEA2CC2453F8BD290D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 04:00:11 +0000
Manifest this update: Sat 23 Aug 2025 04:00:11 +0000
Manifest next update: Sun 24 Aug 2025 04:00:11 +0000
Files and hashes: 1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: iWYLRfrbswfqfnXcVKGaXiuOMdffyhK5Ac0y7a3CcnA=)
2: cSxqzHQIFX03E67QT7FwyB0-2wc.roa (hash: ehpsqzEAcx4o5Hfss771kB3qGbR5m4ewO+AFeZ/9pUw=)
3: d1pbdA__eUq65yVNaUqfoJfF1gA.roa (hash: GBeDmf/sEIKh081o/6CjC+lT/hastrtkWuFWWekc6pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7d:7f:2a:71:db:ea:2c:c2:45:3f:8b:d2:90:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Aug 23 04:00:11 2025 GMT
Not After : Aug 24 04:00:11 2025 GMT
Subject: CN=13ac46305b64ee543a31cbedcb18f8232098cea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:83:3f:f7:07:1c:f1:38:d0:a1:e8:8d:41:
a1:83:72:09:40:fd:c6:94:82:13:0e:f2:b4:c4:65:
76:a1:19:c1:87:2c:16:e8:4e:e7:8e:c6:66:ec:0f:
2a:6e:f6:cc:28:d1:96:b3:21:69:b2:37:78:d5:6a:
8c:44:1b:3d:51:a8:e6:2a:46:c7:21:62:b8:8c:f3:
b5:83:5f:ea:c9:c6:9f:eb:25:9a:f9:16:29:85:19:
dd:b2:50:eb:81:f9:88:d0:50:71:51:bd:91:62:7b:
c8:8c:22:d7:6d:c4:6a:9b:d0:3b:91:bb:1b:95:4e:
49:97:25:cc:84:32:fe:2b:08:ac:11:db:fb:6c:e3:
ab:23:5c:b6:30:7a:8c:b6:83:a0:94:47:ab:60:90:
f0:49:2d:6d:56:f6:88:80:14:c9:e3:17:07:04:a2:
a5:24:d0:cf:6b:5e:fb:19:ab:ee:be:78:29:00:ae:
6a:8f:4d:ee:db:cb:88:a8:74:e5:6e:9e:05:23:8c:
08:0e:81:7c:e7:55:4a:3d:d6:6f:79:76:1b:61:73:
9f:65:87:29:cb:6d:ba:c1:70:7d:ca:0a:d3:e3:43:
f2:3c:27:75:71:0b:fb:83:de:f0:07:6a:ea:6f:e7:
1b:dd:71:83:14:1d:82:65:dc:bd:5d:79:5e:75:fb:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AC:46:30:5B:64:EE:54:3A:31:CB:ED:CB:18:F8:23:20:98:CE:A5
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:02:71:62:fe:de:cc:bd:27:94:7d:a0:2f:b8:72:83:9d:57:
79:27:0a:8f:eb:89:7d:42:a3:44:8a:44:c6:41:b3:0f:7a:ba:
9c:07:c9:66:25:d7:b0:56:67:85:6f:7e:4b:b0:5c:40:a8:6b:
24:b8:22:04:9c:d1:87:c6:00:f8:a3:88:46:62:9b:ea:1d:fa:
33:ed:c3:e5:61:03:6f:62:64:ec:04:65:b5:44:fa:07:a4:7c:
f2:27:77:8f:3b:ee:e5:fb:05:1e:78:63:1e:e6:6d:a6:97:66:
6f:ff:77:48:2c:a3:e3:7f:42:ee:30:f1:c3:b8:5b:70:7a:e6:
f2:28:2c:12:31:10:3b:69:aa:17:52:42:6a:6e:df:68:10:ad:
50:c1:e8:8b:5c:af:4f:37:fe:8e:1e:72:03:9b:09:86:50:86:
71:66:4b:33:d1:78:86:3e:dd:f9:65:fa:b3:dd:a9:d2:f1:97:
94:78:bc:5d:24:1f:70:b5:b2:ce:65:9d:27:e5:13:23:fc:f9:
bf:e2:8d:c8:12:67:c2:b3:06:39:a9:5a:45:a0:07:2f:40:78:
d6:e0:6e:4e:d9:ad:dc:87:9e:24:9f:be:3a:71:f2:dd:7a:86:
5d:7a:29:10:0e:f4:e6:2e:f1:6a:4c:07:ec:15:9c:15:f9:f3:
47:c3:27:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:17 2025 by rpki-client