Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
File: J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json)
Hash identifier: tcDWJHI+VdX5vyxrjFoThdtlw+MGkGoHJSoJGRw5+gY=
Subject key identifier: 0D:49:16:7A:07:B2:C8:9E:70:C4:64:80:B9:CE:EA:6C:D2:1E:17:90
Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
Certificate issuer: /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Certificate serial: 0196A0899C78D74AEE4366CCC8C42097F831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
Manifest number: 0EB1
Signing time: Mon 05 May 2025 13:01:35 +0000
Manifest this update: Mon 05 May 2025 13:01:35 +0000
Manifest next update: Tue 06 May 2025 13:01:35 +0000
Files and hashes: 1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: 8/IfYPdgmsjcNEWuf88HvMgKVzQTOBSr1rkCm/GA6jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:9c:78:d7:4a:ee:43:66:cc:c8:c4:20:97:f8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Validity
Not Before: May 5 13:01:35 2025 GMT
Not After : May 6 13:01:35 2025 GMT
Subject: CN=0d49167a07b2c89e70c46480b9ceea6cd21e1790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:6f:80:f3:b0:58:40:db:91:47:25:6b:ec:
04:29:31:fb:31:a4:9a:c2:e4:5d:77:15:c8:94:11:
ae:9d:6f:cd:02:d8:93:2c:ce:80:b4:fd:6e:67:2f:
e2:56:ef:20:c3:29:c2:3f:2a:00:80:fa:84:ec:58:
0f:01:c7:60:a0:85:ac:af:72:67:7d:e3:24:a5:60:
b7:6f:19:cd:73:7f:74:d2:bf:09:c5:3e:fd:c5:9c:
36:57:5d:85:75:3f:4f:2d:89:60:39:bc:46:8d:e0:
f4:3e:2d:4e:0e:40:2e:1a:11:22:12:bb:5e:23:73:
1e:a7:d2:f9:de:9b:5f:54:8f:4c:19:aa:e6:d3:a9:
f9:3e:81:f4:e8:c1:8a:b7:91:2c:f4:d0:59:e3:ce:
01:1d:c3:d5:01:8c:7a:94:3b:65:41:51:95:41:5f:
df:f7:29:73:71:84:7b:fa:fc:d2:73:27:60:30:5b:
47:97:f1:72:93:62:55:a9:ae:ad:ae:d9:80:ef:e7:
26:d1:80:0c:88:e6:74:c9:61:a4:1a:c9:dd:c9:0d:
63:da:e6:bd:1e:0e:3e:d7:7e:4d:3b:b2:f0:53:fd:
6c:1e:e6:c9:83:cf:fd:7c:bf:7c:42:5e:c0:0d:e3:
0e:2f:27:63:2b:f9:69:83:7f:11:0f:82:57:45:88:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:49:16:7A:07:B2:C8:9E:70:C4:64:80:B9:CE:EA:6C:D2:1E:17:90
X509v3 Authority Key Identifier:
keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6b:df:57:70:35:0b:35:07:c8:55:ff:34:ec:e2:02:9a:77:
76:5b:56:3f:87:3f:2a:d5:6f:92:c3:57:06:53:64:a2:7f:d4:
0b:b9:1f:9d:48:77:fc:e5:7f:fb:39:36:d7:ca:de:92:66:4a:
ce:ea:7d:7f:a4:ed:22:d4:a9:90:db:ef:07:47:59:4d:7b:0b:
61:9e:76:01:a5:d8:8b:00:b6:a3:50:79:c4:3c:03:df:31:ed:
c0:7f:4d:d7:ce:96:39:0f:f9:4e:5c:a8:da:ba:4b:39:37:6a:
bc:ea:fb:67:f5:f5:71:44:51:ef:f4:ff:8c:22:1e:b8:71:91:
74:98:9f:da:b2:84:00:94:df:ab:f2:2a:42:e5:aa:9b:af:48:
05:09:f0:06:13:c0:67:66:dc:59:a9:5e:6b:73:c5:7d:7d:2a:
bd:ee:10:9d:29:fe:7e:35:0d:18:d5:d5:04:99:60:77:ee:43:
21:2c:a3:65:7e:03:f1:24:86:6a:fc:60:3d:63:1b:3b:24:0f:
d1:4d:d5:00:03:b6:29:df:db:31:96:0e:56:11:5b:3e:21:9e:
71:46:b1:ca:20:7d:fa:ce:ff:c9:1f:c0:8a:3d:eb:9e:66:ed:
b9:56:04:ec:a1:7a:01:2c:c7:12:b7:e8:30:27:54:1a:29:2f:
5b:69:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:07:48 2025 by rpki-client