Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: a0486oqX+KHRVgmDquffNbg6fdHqwHIv61qbHURBzFs=
Subject key identifier: 77:71:59:40:59:D5:41:33:5F:E2:0F:AD:A1:23:45:F6:02:D5:46:4E
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 0196BF6F8FDBBB78788B9FCB71C02FC77BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 138F
Signing time: Sun 11 May 2025 13:01:21 +0000
Manifest this update: Sun 11 May 2025 13:01:21 +0000
Manifest next update: Mon 12 May 2025 13:01:21 +0000
Files and hashes: 1: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: RogLNUn5WwqCLOlFdI1I9/s/6JaEA8yhBgXVFqXZIFQ=)
2: omv1iA0sTwZqywTVYlUXXegJP1Q.roa (hash: lDFIRi5hNHf1aQj7xWQEmMDGw0C4yu9jECeYI1136N4=)
3: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (hash: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:8f:db:bb:78:78:8b:9f:cb:71:c0:2f:c7:7b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: May 11 13:01:21 2025 GMT
Not After : May 12 13:01:21 2025 GMT
Subject: CN=7771594059d541335fe20fada12345f602d5464e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:de:e5:4e:70:8c:aa:f6:dc:83:db:20:f1:
b1:7a:e1:df:d2:9c:b0:b5:36:da:f0:0f:7c:13:06:
51:be:4a:a4:04:b7:e0:19:0c:be:d3:93:9b:c9:92:
79:08:ae:d6:47:05:fa:be:2a:c0:6e:50:96:0a:26:
ba:02:98:4f:27:04:ad:36:27:c4:1f:7a:cb:b0:ef:
79:10:b4:ea:1b:1a:1a:5f:d6:18:d2:41:24:b0:d9:
74:fb:29:e2:90:15:ab:3c:28:f8:c6:a9:70:f0:64:
98:37:9c:42:95:79:53:4b:4f:eb:a0:35:c2:49:1f:
03:33:0a:8e:e7:2b:a5:02:ca:a0:b6:fa:0d:94:9a:
a4:5d:55:6d:8d:1c:eb:55:3f:df:8a:80:88:4d:96:
60:cd:10:5d:7a:f7:ae:a1:a9:1e:80:f5:5f:89:be:
8f:7c:4f:35:73:49:71:7c:58:5d:99:4d:0d:aa:eb:
e3:9b:c6:62:1e:1f:dc:9c:f9:ae:94:aa:18:b7:7c:
e9:08:14:ea:06:65:00:84:3b:9a:b0:4e:a4:0f:bc:
26:5b:95:99:b5:22:90:7e:fb:07:1d:c4:a5:b5:70:
42:02:11:24:5e:0c:71:10:89:ca:c4:d9:9b:a5:10:
e7:6d:56:66:e1:77:a9:3e:66:0c:da:14:ea:c8:90:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:71:59:40:59:D5:41:33:5F:E2:0F:AD:A1:23:45:F6:02:D5:46:4E
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:09:80:1e:ae:3a:92:c4:e8:63:bc:a9:12:d5:29:31:0c:a0:
e3:4f:8b:59:fe:1a:dd:93:dd:e7:eb:87:bc:21:9e:1d:5c:27:
62:3a:64:72:65:79:12:35:7c:61:d5:7a:87:f7:05:f9:d4:d9:
1b:75:24:b1:94:4c:e1:a8:0d:01:6f:46:bf:9a:ba:5a:2d:28:
d3:13:92:cd:f9:9d:70:d8:9a:d5:89:a5:cf:35:6f:6a:e9:cf:
b7:05:4b:b6:44:90:10:24:31:eb:13:d2:21:80:9d:2d:c7:29:
09:f3:5f:4b:95:ba:5b:8b:45:ce:3c:4c:72:d0:56:25:46:3e:
4c:6f:96:f7:89:3f:a8:e5:8c:42:57:1d:2b:0f:1c:91:6d:70:
a1:7e:95:14:e4:b9:ff:aa:6b:3c:a0:ea:a5:36:ee:47:60:a8:
b2:fe:fd:3d:0f:e6:4b:e8:91:7a:28:c0:4f:1a:b1:79:d6:c3:
ed:ab:2b:08:24:38:d0:b8:51:f4:ae:8c:40:0c:0f:a9:0c:65:
cb:eb:37:a3:cd:c1:6f:ce:d6:cf:be:e4:0e:81:0e:8b:fe:58:
10:5f:45:b8:cf:16:79:7f:31:3f:9a:9a:ab:6e:9f:2b:7d:93:
88:51:30:2d:2c:39:5b:b3:47:08:8c:3d:a3:ff:04:f6:ea:da:
ae:2a:d1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:07:36 2025 by rpki-client