Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
File: J7JQwAtGuhgF8v5fanfo_-X-J3g.mft (raw, json)
Hash identifier: IQ3GmsarQHBtr5nxSuq4cv9GS/QkaAboQbBPwiCR/XI=
Subject key identifier: C1:0D:1D:B1:74:80:49:9E:57:D5:CE:70:3C:70:86:08:FE:95:01:E1
Authority key identifier: 27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
Certificate issuer: /CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Certificate serial: 0196AC55B51E40B1087FE72B08A003991FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
Manifest number: 38
Signing time: Wed 07 May 2025 20:00:20 +0000
Manifest this update: Wed 07 May 2025 20:00:20 +0000
Manifest next update: Thu 08 May 2025 20:00:20 +0000
Files and hashes: 1: 2Xuz_XQe5kxj9Ta-txXKOZzo3-8.roa (hash: 4cAudEOa7B6QV2XVnZGGI65WlCpgsFSmPdilxFuHyN8=)
2: J7JQwAtGuhgF8v5fanfo_-X-J3g.crl (hash: yoizR2Zr+txZlVf78n7n1RCNKtb49KD6hsu7NxdI78I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:55:b5:1e:40:b1:08:7f:e7:2b:08:a0:03:99:1f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Validity
Not Before: May 7 20:00:20 2025 GMT
Not After : May 8 20:00:20 2025 GMT
Subject: CN=c10d1db17480499e57d5ce703c708608fe9501e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:5a:aa:22:9c:a3:56:ba:90:b6:05:f0:21:
37:94:98:af:ac:5d:44:83:63:03:45:cd:72:67:a2:
89:54:72:5b:30:33:88:a2:ad:38:7c:36:25:f2:e4:
9d:3b:97:a4:b6:9b:8c:34:97:2f:1c:df:19:0c:14:
e8:6b:76:dc:95:5c:3f:47:23:16:b9:64:f9:c4:1a:
d6:5b:89:e5:1a:6c:7a:98:51:e3:05:dc:25:65:c4:
de:ea:f3:98:b3:5b:05:a8:90:07:85:51:35:db:33:
7c:ee:15:2d:39:f9:a5:40:2a:64:8c:c9:90:30:5f:
34:8f:db:db:13:bc:ff:54:7c:c2:4f:9b:c2:14:9f:
d8:48:08:63:28:64:f7:52:99:d3:f9:f0:d8:ad:3e:
4b:9d:0a:52:0e:cc:61:64:29:6b:ea:2f:40:d7:f5:
0a:e5:08:ef:31:ec:40:91:c9:a2:f4:ee:94:51:c4:
b1:22:8b:f1:46:5f:0d:69:64:d4:e3:01:e3:59:b6:
13:d4:ed:b8:b8:d4:45:6e:ba:c0:df:a1:d7:18:d9:
80:12:a5:61:6f:4d:bc:64:3c:07:4b:c1:0f:7c:bf:
91:c3:13:f4:78:4f:3b:90:3b:91:2e:fc:f8:35:34:
19:36:71:2e:c4:9e:a0:c5:cc:04:a4:87:c4:56:00:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0D:1D:B1:74:80:49:9E:57:D5:CE:70:3C:70:86:08:FE:95:01:E1
X509v3 Authority Key Identifier:
keyid:27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:45:de:78:57:da:fa:c3:e5:80:b3:59:96:0e:eb:7d:cf:23:
1a:37:09:03:01:da:f2:a3:67:10:16:63:81:01:e9:d5:92:36:
78:46:fb:71:b4:a6:a3:02:74:f9:1b:16:db:a9:7c:d0:88:8b:
76:5f:7f:8f:b0:16:c4:d3:a0:50:37:e1:2a:bf:33:11:90:d4:
f7:35:67:6f:55:1f:ab:87:94:7f:74:62:c0:b4:10:17:d2:ba:
3b:fc:9c:a9:eb:cf:cf:76:4a:89:31:e5:e1:77:96:48:a7:d8:
ec:96:c8:a5:41:52:36:50:55:ac:13:74:f5:97:51:6e:d3:16:
5f:14:37:6b:01:bc:18:b2:82:b8:a0:2d:c3:39:a2:14:b8:e4:
82:ed:95:69:3c:60:e3:76:ad:cc:4e:5b:95:10:3f:12:f2:a4:
ea:ae:07:d1:41:44:c9:17:2f:a2:e6:8b:16:02:6e:75:90:6e:
86:0b:25:8f:a8:d9:f3:a7:ff:87:11:ab:09:9c:d4:e3:e4:69:
c8:05:63:74:37:1f:56:df:21:25:a7:93:ef:17:3f:97:db:52:
39:37:71:f6:e1:8d:8d:33:5e:0d:db:14:f4:cd:68:09:79:6e:
81:81:ac:30:0a:25:8c:43:7a:4b:14:77:ea:8d:27:0e:15:11:
f1:be:66:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:28:22 2025 by rpki-client