Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
File: JwBs1Oq8VbNskwifFND6bg-gzG0.mft (raw, json)
Hash identifier: t9bsfyA1lZ4MLAMUH2jzc2KjCLMN0jSgGDipF42gedE=
Subject key identifier: D7:84:BA:45:D0:92:EC:5C:EC:08:AC:C9:35:D8:FE:27:42:3E:17:FD
Authority key identifier: 27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
Certificate issuer: /CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Certificate serial: 0196C803EDFB5FD395A7C1AE050D2AEC625B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
Manifest number: 103A
Signing time: Tue 13 May 2025 05:00:22 +0000
Manifest this update: Tue 13 May 2025 05:00:22 +0000
Manifest next update: Wed 14 May 2025 05:00:22 +0000
Files and hashes: 1: JwBs1Oq8VbNskwifFND6bg-gzG0.crl (hash: mi05C5dKYf8VL26FwYvqKXiQblDaVvq7F2G2gLZut6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:03:ed:fb:5f:d3:95:a7:c1:ae:05:0d:2a:ec:62:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Validity
Not Before: May 13 05:00:22 2025 GMT
Not After : May 14 05:00:22 2025 GMT
Subject: CN=d784ba45d092ec5cec08acc935d8fe27423e17fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:37:bf:53:e3:9f:a7:ae:aa:28:f9:65:38:
df:a9:0d:54:84:60:e6:7d:1d:3b:2d:44:1f:60:f9:
64:09:a2:ec:eb:7b:15:1d:d3:89:0e:c5:62:29:09:
01:36:e1:8a:22:a9:43:ed:35:a4:73:7a:b8:23:64:
72:47:08:18:f1:f7:ec:ad:74:a6:90:4a:22:94:41:
21:be:8e:22:f7:ac:59:1c:de:83:c1:bd:49:22:06:
15:c7:de:b0:61:01:55:af:d3:66:95:79:b8:0b:f0:
de:46:42:a5:5b:29:90:04:c9:d5:4d:5b:de:7b:0b:
dd:f0:2e:f0:03:f1:d3:30:c2:1c:b8:30:70:7f:53:
50:3e:95:a2:62:12:eb:f5:c4:f4:f5:3a:63:93:e8:
47:c7:ab:e0:ac:44:d5:12:ef:72:b5:8a:3a:19:e8:
ec:9a:34:b7:32:56:b3:ca:97:48:41:d4:fd:0a:50:
e7:af:3d:a4:b0:45:02:3a:fb:c7:e6:24:10:64:ff:
d3:57:a5:c7:7f:56:b7:d3:d3:ec:ab:b0:87:01:ba:
ad:18:73:59:3a:cb:d6:0f:cd:e4:e6:7a:5d:64:21:
f1:b9:2f:c0:9b:da:63:cc:e7:6e:32:e5:63:a8:d1:
1f:ec:dc:e7:75:f7:e0:c4:29:52:8b:00:01:2c:c5:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:84:BA:45:D0:92:EC:5C:EC:08:AC:C9:35:D8:FE:27:42:3E:17:FD
X509v3 Authority Key Identifier:
keyid:27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:da:10:dc:a4:29:ef:d7:eb:e7:b9:0f:2a:96:78:c4:16:7e:
df:c3:39:d7:02:10:3d:f6:2a:d3:04:51:d0:8f:64:1b:72:f1:
c4:1d:71:dd:21:a2:60:21:57:ef:87:0d:d1:5a:39:78:e8:bc:
7c:85:05:99:9d:6c:5d:d9:e0:89:3c:56:5b:94:de:03:06:19:
21:a5:2a:39:70:45:27:3f:13:26:f1:ef:5f:30:df:7b:e4:b6:
b7:2f:ea:6d:24:b2:e1:c2:a4:78:3e:fe:18:d0:dd:23:0f:ed:
ce:8a:04:25:97:fe:47:33:66:c9:67:52:0a:f0:2a:17:7c:0b:
6d:a9:26:ec:d3:55:32:72:55:2d:9c:16:7f:d1:6a:96:f8:a1:
74:44:54:54:31:39:39:5d:22:53:30:cc:5d:90:fe:45:04:c3:
ad:0a:f4:05:7b:13:0b:03:59:0c:1c:2b:7d:6b:c2:a8:75:e0:
50:06:a5:88:90:7c:15:64:c5:b5:25:8c:7c:dd:9c:dc:a0:9a:
27:ec:e4:42:90:28:78:0b:19:e3:76:1a:80:6e:d9:73:ed:69:
b8:03:5e:55:8d:0b:31:2f:cb:e9:7c:1c:59:43:b1:ff:c7:46:
f9:03:ae:ee:4b:12:6f:e3:f3:ed:22:c9:06:82:39:94:0b:7c:
2b:2a:fb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:22:02 2025 by rpki-client