Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
File: J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft (raw, json)
Hash identifier: 4SnQBku+oj4nmNboLJxpimnKyQispTY5ZJW7GDtJ6Yo=
Subject key identifier: D2:F1:9C:44:1B:BE:A1:C6:43:3A:9E:76:F6:61:A1:24:BA:71:CA:06
Authority key identifier: 27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
Certificate issuer: /CN=27d028470604336fdb9308e51ba53e951ae2e098
Certificate serial: 0196C2024296C6FE3D424CA7B3C44C93CE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
Manifest number: 08CC
Signing time: Mon 12 May 2025 01:00:50 +0000
Manifest this update: Mon 12 May 2025 01:00:50 +0000
Manifest next update: Tue 13 May 2025 01:00:50 +0000
Files and hashes: 1: 8lytrNRAlkzl2XNEuoqT9hqGeHI.roa (hash: bsiOs3LeZM/7MgOmaqSi5ylqvDA5KYlcRdJP7/Y5e7k=)
2: J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl (hash: iMkIvryb+MKVK+5+3NX0mGyjfoGJwzqnvw8dh4nnrzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:42:96:c6:fe:3d:42:4c:a7:b3:c4:4c:93:ce:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d028470604336fdb9308e51ba53e951ae2e098
Validity
Not Before: May 12 01:00:50 2025 GMT
Not After : May 13 01:00:50 2025 GMT
Subject: CN=d2f19c441bbea1c6433a9e76f661a124ba71ca06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:a6:18:9a:77:7b:25:c6:c0:7d:97:fe:d3:
c4:16:ff:2a:2b:db:b4:ba:3e:71:01:38:0d:5f:56:
fd:d7:8a:76:5f:ef:0f:36:6d:06:77:c0:db:38:de:
f9:81:59:57:e9:0b:9f:14:b1:45:77:b3:10:45:37:
5e:51:0e:ed:d6:14:ca:d8:4b:40:a5:b5:46:f2:c7:
eb:7d:15:96:e0:75:a4:78:20:5e:13:ab:93:3a:a1:
99:a6:8f:96:83:30:b8:3c:0e:63:81:69:f0:84:ae:
a2:63:24:be:24:3c:49:af:f4:1c:3c:bd:ae:95:16:
22:d8:3a:35:79:f3:90:9c:56:42:23:a9:09:01:54:
98:43:1e:1b:3b:5b:55:a3:83:c2:62:2e:66:6d:05:
af:7e:db:22:ed:72:df:fc:0b:d9:3c:2d:dd:f2:b2:
24:29:f5:7d:76:de:1c:8a:77:b6:fc:c3:7f:58:91:
72:16:68:2a:cf:f8:74:d9:69:4e:a0:d1:d6:ce:ce:
81:64:d0:45:82:61:49:56:6c:97:d0:e4:93:ec:b2:
0a:8f:b0:1a:29:41:fe:ce:ba:46:75:75:26:25:28:
b7:5c:82:c7:99:69:35:ba:06:34:30:ed:31:cb:93:
48:75:6f:2c:e1:2f:b9:f2:b1:41:c2:17:da:7f:2b:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F1:9C:44:1B:BE:A1:C6:43:3A:9E:76:F6:61:A1:24:BA:71:CA:06
X509v3 Authority Key Identifier:
keyid:27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:36:5b:4b:1a:17:6c:65:98:fc:4e:c1:95:ee:2e:b5:b3:77:
28:ae:f2:82:bb:96:6a:9a:5b:a6:82:cb:9b:d6:b2:9e:41:9f:
5d:73:ed:dd:d6:53:94:f7:60:18:b1:48:81:b7:f6:4a:57:55:
f2:ca:d8:5d:4e:ea:4d:ff:0f:5a:5d:59:bd:d3:0e:2f:76:21:
9a:7d:62:52:dc:97:29:e0:3d:39:84:25:15:54:67:ef:d4:c2:
53:42:31:c7:bb:80:4f:bb:db:dc:60:3f:69:56:c5:4f:9b:72:
67:2c:af:8d:53:72:7c:0e:32:a5:f4:5f:8c:30:bd:7e:16:1c:
68:c5:96:b7:03:e9:74:37:95:0a:db:69:5c:3e:b2:30:3d:96:
a6:52:43:d6:66:3d:4c:58:50:44:ae:a0:f3:2e:c1:70:f9:8f:
e3:41:68:b9:4f:69:2b:e1:28:7b:7d:ce:fe:6a:11:a7:86:37:
42:bf:ab:7d:62:8e:e1:ce:16:47:dc:46:b5:84:d2:ea:3d:35:
bc:11:1f:98:90:b9:0e:7e:e5:7f:4c:22:fe:a9:91:c2:8b:30:
6e:fa:d2:5c:58:6e:4d:cf:c0:92:2a:22:e0:16:c7:8e:ec:7f:
07:23:17:f1:23:8f:a2:bd:4c:ca:a2:20:a3:d9:7a:9f:45:8f:
77:03:86:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:09:45 2025 by rpki-client