
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
File: J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft (raw, json)
Hash identifier: /PJ59004C/tWC8KDAg9eI/7Uwp/rHscq8ZjiGrNkOLs=
Subject key identifier: 20:71:C7:C5:03:9C:B0:70:39:83:F4:8F:B8:3E:17:02:5E:C6:EC:2A
Authority key identifier: 27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E
Certificate issuer: /CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
Certificate serial: 0196ABE7F7B4882708C002DEBDDB177A11F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
Manifest number: 1209
Signing time: Wed 07 May 2025 18:00:28 +0000
Manifest this update: Wed 07 May 2025 18:00:28 +0000
Manifest next update: Thu 08 May 2025 18:00:28 +0000
Files and hashes: 1: J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl (hash: sNZRCDy3a16UP91ZL/CZEUWkN4OA1YhXf+VNY/opJUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:e7:f7:b4:88:27:08:c0:02:de:bd:db:17:7a:11:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
Validity
Not Before: May 7 18:00:28 2025 GMT
Not After : May 8 18:00:28 2025 GMT
Subject: CN=2071c7c5039cb0703983f48fb83e17025ec6ec2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:ee:40:ad:5b:7e:6f:06:79:cb:77:11:24:
54:42:99:90:cc:01:e5:42:12:e7:7e:e1:65:c7:fd:
e5:fe:25:8a:d4:e4:d3:78:11:42:29:ed:cd:85:71:
bf:9c:8f:76:c1:27:5d:74:63:6e:63:41:19:0f:3b:
5e:af:18:83:8d:ea:2e:5b:c4:4d:00:78:b7:7d:ce:
7e:1d:06:31:01:6c:53:df:4b:d3:58:b2:b5:75:8e:
9c:0f:84:c6:a2:90:49:40:25:cd:6f:f5:99:17:93:
98:47:9f:4d:09:b4:53:64:8b:60:db:ff:01:8e:d1:
c8:46:ef:b6:b4:78:ce:64:a7:a6:e7:4e:08:2b:de:
43:90:46:a7:79:58:16:fd:35:13:34:f0:be:5e:b2:
64:ef:17:dd:ff:09:bd:5c:84:ea:45:dd:3c:07:f1:
18:f7:fd:75:05:44:bb:31:c2:87:c1:00:8b:9f:fc:
cd:23:b7:74:11:0e:25:67:b4:77:a5:75:07:31:45:
8d:55:b3:6e:c0:89:13:f0:4f:10:06:4f:b5:84:36:
87:21:75:ba:35:52:fd:af:b2:e0:7f:e4:9a:d3:fb:
5b:e0:21:08:24:cc:58:81:42:a6:fc:ec:0a:6c:c3:
ce:c3:7d:fb:96:89:44:16:89:69:45:8b:68:c2:f7:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:71:C7:C5:03:9C:B0:70:39:83:F4:8F:B8:3E:17:02:5E:C6:EC:2A
X509v3 Authority Key Identifier:
keyid:27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:40:3d:18:30:a9:14:fb:30:8a:f2:f4:7a:16:b3:9a:d3:19:
31:dc:7b:e4:bd:4d:42:9b:bd:88:d7:8e:c8:b5:ef:2e:f7:4d:
55:0f:43:7b:a4:a2:bf:c6:a0:73:ce:e7:8e:54:ab:8d:2c:71:
73:c8:61:40:97:56:a3:16:20:c8:c9:91:81:f9:41:5c:99:4d:
c1:31:9f:fe:db:30:85:54:01:85:50:26:ac:81:47:17:98:b1:
c6:01:1e:74:9a:bc:3d:b4:5c:5b:20:22:a4:f4:f4:a4:17:b1:
fc:3f:54:31:39:ae:8a:94:25:39:5d:a3:03:26:c0:01:41:f7:
bb:f3:0a:44:e8:40:58:c5:9b:56:3f:a0:f9:6c:d6:9b:09:96:
57:99:bd:a9:a4:72:79:f4:38:a9:50:b3:5b:a8:c7:8a:14:80:
41:89:9f:ef:00:d1:20:25:5f:d7:4b:34:ae:bd:18:59:ff:76:
db:66:96:76:76:50:fc:58:38:d9:f1:fd:cb:4d:37:96:66:18:
d8:2d:db:ab:a6:ff:01:ef:7a:0e:80:8e:7f:bb:30:61:a7:27:
ed:02:15:f8:d6:ff:dc:02:9d:25:e8:5a:91:e4:ad:58:45:b2:
77:19:ca:b7:a5:05:7f:7c:bb:c2:a7:3a:ed:71:dc:b0:29:c4:
57:cb:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:49:34 2025 by rpki-client