Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File: J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier: ywiitMkcPhN59Hc1ymS4lb7/nzcG1pzvFtg9s4+b8w8=
Subject key identifier: 0C:21:AA:C2:7D:20:CB:9F:55:34:D8:C5:70:8D:89:C9:B6:19:20:DC
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: 01969E6355B7041232C28979A6CA3C8A04C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number: 0C1A
Signing time: Mon 05 May 2025 03:00:32 +0000
Manifest this update: Mon 05 May 2025 03:00:32 +0000
Manifest next update: Tue 06 May 2025 03:00:32 +0000
Files and hashes: 1: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: BNVd5TRR7LnNszsAQhrPRSnpnlis1IvczeKkk0+Q65o=)
2: dlmSMThgfzEt-EoGdzxxYyd6AvA.roa (hash: II2qv/R+riqTZycAWnh60efymgX6QJpKVeYxCLVnyks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:55:b7:04:12:32:c2:89:79:a6:ca:3c:8a:04:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: May 5 03:00:32 2025 GMT
Not After : May 6 03:00:32 2025 GMT
Subject: CN=0c21aac27d20cb9f5534d8c5708d89c9b61920dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:bc:5b:7d:ff:10:a2:d2:7c:a1:9f:ca:20:
46:c8:3e:1e:3f:f2:53:34:0e:9c:f6:37:b2:b9:8f:
30:8d:e8:fc:26:e3:b3:54:13:ee:6d:3e:a4:48:b9:
02:80:f3:96:a5:38:82:9a:d4:7b:a3:60:28:05:2f:
dc:8e:05:cc:f8:72:a9:6f:60:87:93:52:88:d1:ea:
75:94:7a:2d:19:c6:c6:e9:d3:bf:16:4a:e6:f3:39:
c0:9f:64:43:35:f4:24:bb:1e:69:33:1f:4c:0f:67:
3b:3c:77:71:2e:c3:a3:2d:68:6a:b5:96:9d:f1:01:
d4:f1:03:43:0f:22:e8:e2:54:d7:9d:b4:8b:04:ac:
cb:41:2f:0d:b4:ee:70:d0:9a:e1:39:bc:11:31:1c:
86:09:0b:18:20:87:46:e1:96:ee:fa:d0:62:a3:8c:
c1:b5:a6:a7:02:b8:f3:5a:10:9f:3d:a8:95:68:2b:
98:a6:1e:97:92:93:51:0b:a3:77:6a:07:2b:a5:a6:
26:70:10:1e:80:0a:cd:94:1f:5b:58:12:4a:b1:0b:
f8:3f:0c:92:e0:b6:56:ee:fc:93:cc:ee:69:0c:b4:
82:57:02:60:b0:dd:f1:26:03:4a:c3:13:d4:c5:05:
c0:da:b8:c1:17:ca:94:ee:80:22:e0:bf:34:b3:c8:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:21:AA:C2:7D:20:CB:9F:55:34:D8:C5:70:8D:89:C9:B6:19:20:DC
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3a:8e:c2:98:67:4f:2d:c0:c4:db:b6:89:82:fa:88:11:7a:
1d:f6:ac:9c:de:92:10:8f:64:30:34:63:6c:f1:55:62:bd:f2:
eb:01:7d:b2:5f:32:62:23:00:f9:e4:9c:20:35:52:05:09:dd:
5f:4c:8a:d6:25:f6:a5:51:3d:d7:0e:88:63:17:6f:18:23:9a:
d4:e6:64:4c:1a:33:a3:01:b1:ba:63:95:3b:5d:3d:fd:cd:60:
f1:6d:34:78:20:4f:db:43:47:c5:3b:17:4a:16:c4:8c:02:c9:
8b:e5:6f:02:9a:84:36:8b:f0:ef:3e:f2:ec:b5:95:e9:9e:83:
2e:95:83:d2:9f:94:a1:a9:f7:31:c2:58:f0:5e:2e:8b:c3:9c:
86:14:92:9a:ef:6e:b1:c0:35:0a:f5:b5:a9:a3:41:53:73:4f:
e9:52:9c:53:7a:85:0b:ed:ef:ba:77:db:ed:ad:82:83:ec:8c:
4f:84:83:59:e2:48:8c:fa:70:66:a5:99:38:ef:c6:a8:c6:ec:
8c:5f:8f:57:e3:2c:32:c0:81:3d:ee:19:3f:2f:26:80:a4:63:
e3:7c:2e:f5:37:61:60:fc:6c:11:a5:16:36:af:4b:03:4b:1f:
ad:de:00:38:a1:15:cc:6a:a8:bd:f4:98:f9:90:05:43:67:c4:
1a:8b:1c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:22:37 2025 by rpki-client