Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: TtCs5GJFdIr3LJR/Kjlz6LnqLqDu4RQs2ei6a3RDktE=
Subject key identifier: 59:55:58:3F:07:A0:33:50:9D:DD:55:64:55:0D:73:FC:E6:24:C7:BF
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 0196BB5B02825ABA4E8C4620F38FBFAED02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 18:00:25 +0000
Manifest this update: Sat 10 May 2025 18:00:25 +0000
Manifest next update: Sun 11 May 2025 18:00:25 +0000
Files and hashes: 1: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: btXHja6RpRKCPB3RODmB9XW2j1a6ZtzTYHXaqeLJ51o=)
2: aaN-bs2N1cRQu6wVRlnpd2mwkBQ.roa (hash: /bC3V57krNUgmm/Cc9N1e1boJHyImaptM9rUrHdc9Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:02:82:5a:ba:4e:8c:46:20:f3:8f:bf:ae:d0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: May 10 18:00:25 2025 GMT
Not After : May 11 18:00:25 2025 GMT
Subject: CN=5955583f07a033509ddd5564550d73fce624c7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:81:ee:dc:63:6f:8e:b6:f7:de:aa:54:4e:
13:2e:72:80:cb:9b:03:88:b7:79:52:c8:c0:87:4f:
e9:82:5f:51:7c:0b:f5:09:10:60:01:79:0d:dc:1c:
50:a4:66:15:a2:75:79:36:40:b5:46:04:09:9f:f9:
16:66:e0:18:a4:bb:fe:76:c4:31:2e:76:a3:1b:48:
1d:10:4c:53:26:d9:5a:e2:e3:c7:af:fa:c1:0a:b7:
ad:79:00:3e:6f:2c:66:7c:bd:03:4b:2b:b1:f1:03:
62:a4:50:7b:82:e3:b3:e0:21:69:76:74:65:31:ac:
48:f2:7d:f4:10:2a:de:6f:72:3c:dd:a5:38:d3:58:
60:01:be:d2:63:df:8c:e6:a0:c2:0e:7c:4c:6d:e4:
66:79:f3:9a:f6:4b:5a:69:9f:54:e6:63:0e:c2:f9:
c3:3e:26:2c:0b:cf:5d:61:83:24:a9:fa:48:22:8d:
d7:91:94:c7:f4:6f:14:c4:a2:b9:b9:30:5e:e9:e7:
7a:01:41:56:56:73:4b:59:db:4e:93:97:25:b7:40:
57:d7:24:30:6f:4f:79:ff:76:93:21:98:9b:61:72:
4b:4a:cf:e0:58:51:c8:ed:79:e0:dd:64:da:d5:f0:
cf:3d:0f:36:7d:80:e1:7b:1e:51:0b:3a:04:40:94:
5a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:55:58:3F:07:A0:33:50:9D:DD:55:64:55:0D:73:FC:E6:24:C7:BF
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:a1:c8:4c:0e:fd:1c:74:09:7e:77:8e:69:4e:4a:4b:dd:83:
ef:e8:f4:9e:cd:0d:71:82:33:ae:cd:c5:8f:7b:41:25:bf:e4:
45:73:0f:82:d9:be:cc:1a:58:1e:27:32:45:72:44:c2:62:fc:
91:cd:3e:5a:59:12:c6:5d:d5:26:04:ca:87:15:8b:85:09:36:
90:ed:9e:4f:7e:cb:0d:5f:09:5e:55:18:29:dc:7d:67:9a:5e:
ab:2e:f1:54:c3:26:11:b2:34:ac:5c:db:0c:ae:f3:19:5a:59:
8f:40:d8:22:5f:47:7d:f5:7b:51:1c:7c:a4:6d:06:f5:0d:d9:
7d:4f:bd:04:43:b9:f4:d6:6c:5b:18:90:cb:26:5b:be:fc:c3:
30:b8:76:cd:c9:09:54:a9:8f:9d:1f:cd:73:c6:14:ba:bc:b7:
95:cb:f0:c0:1e:4e:62:93:57:d5:6c:0e:39:75:61:f9:0c:db:
1d:d1:3e:79:49:c9:79:b0:43:1e:4a:24:05:41:4f:cc:33:a1:
a8:08:dd:99:78:00:16:4d:bf:15:b7:aa:8e:b7:9c:ed:0d:11:
4e:55:bc:a5:56:ef:e4:db:d3:be:f4:0f:12:69:1f:71:9c:22:
1c:60:f7:70:01:00:d1:a5:2d:36:e7:33:87:1c:1c:78:e9:37:
97:01:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:36:44 2025 by rpki-client