Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: 3+W5NRMh1kHi8TSFhNZDoxKeMZ6945xC+Qz5OSU6wig=
Subject key identifier: DE:C3:09:6F:D1:A6:30:7D:70:AC:07:F3:37:A0:BA:38:97:D4:CA:62
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 0196AE44677767FC5624CC844C0C665B657F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 05:00:40 +0000
Manifest this update: Thu 08 May 2025 05:00:40 +0000
Manifest next update: Fri 09 May 2025 05:00:40 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: ELL26v93lfHmB/Th2SuvQWj2ILb9AmyTAKqRY4cdqf0=)
2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:44:67:77:67:fc:56:24:cc:84:4c:0c:66:5b:65:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: May 8 05:00:40 2025 GMT
Not After : May 9 05:00:40 2025 GMT
Subject: CN=dec3096fd1a6307d70ac07f337a0ba3897d4ca62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:b5:0b:8e:79:85:65:07:5c:ee:00:b3:ef:
0e:dd:ef:0f:e2:ec:c0:9c:81:ff:4d:ba:d1:2e:20:
7b:b7:e5:b9:23:f8:05:7b:71:2d:05:c6:16:4c:d9:
c8:98:4d:a8:de:bb:b3:f8:4c:19:10:e0:57:16:b3:
f9:80:e0:85:6a:61:23:f1:68:0c:38:f9:db:6c:0c:
19:04:f5:cb:17:0e:f9:8b:33:0d:e6:73:a8:43:d8:
f9:e9:50:44:37:fc:e1:b0:00:b3:82:e0:0e:b2:85:
a9:64:b7:e9:25:21:b2:85:d2:62:86:04:8f:2e:97:
1e:ef:a6:db:8c:fd:39:4f:a1:ff:24:ec:59:34:82:
07:54:44:cc:5e:62:82:2e:11:e9:b4:1a:84:a6:d2:
e0:2c:74:63:e2:ab:23:96:a4:30:24:1e:93:ea:4d:
3c:59:11:42:22:68:f3:30:38:4e:a2:d1:b2:72:b5:
27:bd:0a:3d:97:67:b8:e7:1e:c6:2a:d7:c9:3e:b9:
bc:70:b9:f5:bd:db:3b:44:3f:d8:2e:8c:42:e8:e1:
2a:99:ed:82:24:a2:03:3c:1d:09:a1:43:de:7a:38:
5b:e8:65:03:56:ca:ea:ad:a6:a6:8e:c3:bb:1d:aa:
7b:b3:da:ab:68:96:79:8c:27:92:0a:48:54:e3:1f:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C3:09:6F:D1:A6:30:7D:70:AC:07:F3:37:A0:BA:38:97:D4:CA:62
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:34:31:51:c4:41:cf:5a:77:16:d8:b1:4f:41:b8:7f:ac:47:
d1:7c:bc:e3:18:6c:1c:58:45:f7:c3:de:44:5e:ea:ea:24:a4:
e1:78:f6:db:49:42:e3:a6:cd:71:11:dd:31:a2:59:54:b0:a6:
6d:f7:e5:ef:fc:6b:f8:90:73:69:8d:12:05:56:46:f5:63:a9:
8d:5d:1b:71:fa:50:a4:d1:08:de:86:22:02:86:eb:32:b0:f4:
f4:c5:7d:a8:6e:bc:f6:98:9e:a7:b8:c6:8e:2b:4f:cf:de:b1:
75:82:1f:24:a6:86:40:53:6e:fb:ec:75:f7:29:94:fa:d0:bb:
82:7c:d7:36:09:23:ce:d3:09:bd:31:71:80:7c:73:aa:06:1e:
45:49:32:8e:41:25:8a:e7:2a:b0:e9:c4:93:1e:45:b8:b8:77:
f0:1c:0a:87:7f:dd:5c:2f:5d:ae:fa:c3:ef:4a:62:e6:6a:f5:
1f:ea:4b:61:2e:76:78:28:a2:59:6e:79:4e:c1:d1:1e:b8:8b:
1f:06:59:17:ac:82:f5:bc:e7:ac:99:e6:96:8a:01:7c:b0:ef:
12:f3:88:4a:09:40:55:e7:e0:9f:66:c4:b7:2e:70:cb:a2:93:
07:10:66:b2:9b:ac:da:e2:a6:61:2e:98:ba:2c:22:63:af:92:
6d:ea:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:25:11 2025 by rpki-client