Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
File: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft (raw, json)
Hash identifier: FyE5fZyBfT61PZUy92+V1ZJjmx9IJFgF+tLB+/242kQ=
Subject key identifier: B7:B0:63:7A:10:C8:4F:BE:55:52:6E:C8:04:BE:31:8A:70:09:84:C1
Authority key identifier: 27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
Certificate issuer: /CN=27e367d8decf7d626e54780f80e57360d2c078cd
Certificate serial: 0196A2095C83269219D26513944C2ED73180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
Manifest number: 0C11
Signing time: Mon 05 May 2025 20:00:44 +0000
Manifest this update: Mon 05 May 2025 20:00:44 +0000
Manifest next update: Tue 06 May 2025 20:00:44 +0000
Files and hashes: 1: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl (hash: msf8QJ4bsqtTtPEXb12rYehyT+X5zGkdk9eb7wb4D1o=)
2: kH84XjWCF3YsEupBc9_NB-UJ1LE.roa (hash: vFi6ltA+YLY/2jEI7t4T0lx3r1xW2YaGJ9YVTzgeHZA=)
3: m8b-nSkJNQaQc9Ko3VmUYZ_aR5k.roa (hash: x/jmnJNzCw/+lpmfHMz6HsStw+fWqWLA6QrXjLJpCDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:09:5c:83:26:92:19:d2:65:13:94:4c:2e:d7:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e367d8decf7d626e54780f80e57360d2c078cd
Validity
Not Before: May 5 20:00:44 2025 GMT
Not After : May 6 20:00:44 2025 GMT
Subject: CN=b7b0637a10c84fbe55526ec804be318a700984c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:89:1c:a2:00:47:6d:d8:f4:68:43:0b:82:
06:cb:be:85:c2:00:59:50:24:fb:1f:05:04:6e:fc:
43:5f:58:68:05:c0:10:22:57:23:c3:e9:76:7b:c8:
ef:3a:d4:ba:dd:7d:ce:d0:76:3b:ce:b3:4a:35:4b:
91:cd:c6:8f:68:43:a1:fd:e0:70:25:60:32:5e:b6:
2f:c5:58:c3:b3:62:86:2b:c8:25:1b:e5:76:5a:63:
c4:c9:54:56:58:17:83:be:43:59:08:1b:dd:1a:b4:
ae:ad:59:a0:00:81:97:25:70:8f:00:08:6d:e2:a8:
55:98:aa:30:99:55:f0:d3:f6:09:00:31:99:0c:02:
bd:04:ef:ef:44:a2:7d:8d:c6:15:1b:3b:cc:8b:38:
2b:5e:a5:ba:8c:66:fa:54:25:5b:1e:60:fc:01:19:
12:4d:87:b7:01:18:d8:59:4d:45:24:b8:96:d3:d8:
bc:44:9f:65:56:2d:9b:9e:2f:28:7b:b3:09:fd:23:
b4:24:12:c8:73:d3:c7:f9:6f:9b:f2:85:a9:d3:72:
a8:31:69:67:df:b7:51:f0:d7:ea:dd:78:07:56:b3:
29:1d:92:fd:c0:9a:c9:43:fc:b1:68:cf:c0:42:52:
fd:1b:03:64:6d:5e:d2:33:dd:0a:d4:63:16:ec:9d:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:63:7A:10:C8:4F:BE:55:52:6E:C8:04:BE:31:8A:70:09:84:C1
X509v3 Authority Key Identifier:
keyid:27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c2:fb:5b:38:15:19:0b:89:4b:c4:3d:53:f1:b1:f3:db:a6:
a9:e7:7c:bd:1d:a4:e1:e3:4f:60:c8:84:e1:a4:f7:95:77:3f:
24:e1:7b:61:75:dc:d9:d8:7c:80:38:99:f0:64:dd:19:ae:fa:
10:cc:0b:1f:26:fc:30:b5:3e:a7:e1:1f:3e:0f:a4:c4:88:8f:
67:e0:20:a9:8f:a3:0d:5a:31:d8:fd:14:b7:55:c7:90:6f:2e:
45:7b:5f:bd:cf:84:c4:50:20:0d:17:5b:8b:09:76:f0:b7:4e:
52:53:a8:5e:0e:f5:b2:d3:9a:c9:f6:fa:d3:40:94:df:1f:a8:
30:c3:ff:a7:a7:02:06:65:28:73:c0:81:eb:10:0a:23:c8:dd:
8c:da:2b:9a:b8:0c:45:e0:01:20:1b:43:bd:c7:0d:57:b3:5c:
2d:1b:c3:d7:75:17:f0:63:65:bd:8d:d1:49:a7:dd:4b:1e:b0:
d7:4d:1c:b5:49:ac:a9:95:81:b9:32:3b:f2:ab:1b:89:02:b9:
c8:8c:ba:a7:d3:af:f5:5a:bf:92:ae:16:59:5b:f1:7c:8c:b4:
91:d5:49:b7:30:fd:95:b0:48:84:7f:e8:ea:ae:a2:41:9f:76:
0d:31:41:a6:c8:63:21:c2:02:bf:14:b4:26:f4:a2:64:98:a9:
e4:71:1f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:43:50 2025 by rpki-client