Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
File: J8XzZBPnr0coE_46cU4uzaoh8ug.mft (raw, json)
Hash identifier: LgV30EI8bac+yUlwpW2hsLdLvcXfT/ltC/8KfBuXwAM=
Subject key identifier: 76:57:7A:44:04:6B:6A:6D:0B:FF:3A:DD:9C:CC:DE:6B:B9:F1:1B:7F
Authority key identifier: 27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
Certificate issuer: /CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Certificate serial: 0196BC6E756CA802E37493987F4FA8685575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
Manifest number: 05BA
Signing time: Sat 10 May 2025 23:01:17 +0000
Manifest this update: Sat 10 May 2025 23:01:17 +0000
Manifest next update: Sun 11 May 2025 23:01:17 +0000
Files and hashes: 1: EOZUjXctaYMkRcyyMQLguIWxilg.roa (hash: jYlCwqtOgmrWCQocWJbTWD5UljGXFXvAjEpukVvKrrM=)
2: J8XzZBPnr0coE_46cU4uzaoh8ug.crl (hash: DsDYEVjZe10/npaCg0oKECwpDAikFn/igypno4etShg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:75:6c:a8:02:e3:74:93:98:7f:4f:a8:68:55:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Validity
Not Before: May 10 23:01:17 2025 GMT
Not After : May 11 23:01:17 2025 GMT
Subject: CN=76577a44046b6a6d0bff3add9cccde6bb9f11b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:57:4d:49:4b:17:5b:d4:10:49:33:9b:14:
59:b6:6e:fd:0f:b3:82:55:33:a4:56:63:40:ce:26:
08:60:c6:6d:da:35:6f:72:b3:a1:f0:3c:72:92:4c:
1d:a3:88:70:bc:3d:00:35:fc:2a:9d:00:a5:d3:a8:
44:47:0c:6e:47:cb:ca:67:de:26:65:9c:b1:7f:c5:
15:e1:57:10:96:a7:46:b0:05:f0:3c:a4:af:7a:c1:
16:22:27:94:97:9b:82:13:ea:86:25:f9:7c:27:0a:
11:37:ca:35:f8:f4:3f:2b:5b:2f:9a:19:3f:da:c4:
93:f3:62:35:ba:94:ed:cf:64:82:46:9c:96:2c:7b:
e0:d5:be:4c:60:b0:36:bd:f6:27:76:7a:86:80:c1:
a6:7e:a8:7d:30:05:52:d9:73:23:ad:52:ea:9e:b1:
ec:04:0a:bf:c7:ef:4d:af:1a:5d:fd:c7:48:3f:5c:
f5:c4:ee:44:9d:2a:af:1e:01:be:7b:6f:4f:c2:ea:
a2:08:97:d4:19:9a:3d:f0:27:d6:a4:20:22:69:61:
61:0a:bf:ed:dc:1c:36:c1:e1:8e:fb:2d:aa:a8:c8:
b2:af:da:a2:cc:98:7b:ed:7c:6b:d8:37:17:6e:7d:
9e:69:1b:3c:33:a0:99:04:a3:37:1a:67:f8:7d:ac:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:57:7A:44:04:6B:6A:6D:0B:FF:3A:DD:9C:CC:DE:6B:B9:F1:1B:7F
X509v3 Authority Key Identifier:
keyid:27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9d:03:af:d0:06:d6:8e:e6:9c:ad:72:c9:8a:f9:32:75:2a:
a8:ba:06:cb:f7:4d:57:a5:c6:aa:ca:51:65:06:34:c6:3d:a9:
5c:7e:0e:56:d0:cf:e9:fe:0a:06:47:7d:b1:e3:10:80:9e:90:
9a:36:04:75:02:8a:05:6b:1c:b2:25:0e:d4:9a:95:33:6d:f3:
ca:27:90:49:83:13:c6:a0:6a:81:a9:a7:a3:e2:d0:82:3c:5e:
82:c4:23:18:52:ad:bf:f4:ea:32:2c:88:39:de:db:5a:60:3b:
3d:c4:7c:1e:e6:31:63:65:f1:63:b2:12:bd:5a:86:43:77:2b:
62:7f:43:ed:20:7b:85:2b:5f:04:27:d7:2e:a0:ac:ad:5f:0b:
b1:d9:cf:74:9b:ad:a2:2d:fb:bd:56:fb:b3:04:0c:f7:bc:d9:
25:48:4e:26:32:31:ac:96:04:64:3e:e5:24:c3:a2:ad:11:9b:
d3:e2:58:2e:20:eb:56:15:39:df:7e:18:27:ab:41:57:60:bb:
68:ad:6d:55:cf:ff:a2:56:a8:44:32:49:5a:aa:bd:58:36:d5:
0c:fd:ee:ab:90:33:f8:05:b2:b6:82:0c:59:ce:83:6c:b1:ee:
80:0f:1e:38:92:40:b9:a8:0e:67:a0:93:bd:14:2f:d6:66:fa:
f0:23:a2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:40:58 2025 by rpki-client