Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: 3nE/CFVr5825OVANvNmNvwbCIbdjL6o29hWnToroags=
Subject key identifier: 0A:8E:3C:F8:E1:37:17:14:64:59:CD:A6:F8:FF:A2:06:CD:F1:A8:90
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 0197B5FBD509921D2DAEB2958ED3B9CBE1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 0DE2
Signing time: Sat 28 Jun 2025 10:01:09 +0000
Manifest this update: Sat 28 Jun 2025 10:01:09 +0000
Manifest next update: Sun 29 Jun 2025 10:01:09 +0000
Files and hashes: 1: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: ytbAKIro9LmYQowWyRO3Zay35PiIpcb5rpxOhbgXOjI=)
2: U98Pywp0SW8RSqZF3Ge6Si9krK0.roa (hash: O0xR8BO72Q1293Dodh+ahx0zgwd8SQ9b7GDuhK6uN4w=)
3: fonqMENkUurdTSsmls1gVlg_WJ4.roa (hash: BkPWWaoPqGMFHcArMOr28SMuQJKUdO9RrrY9l2uEtM4=)
4: hRMqKbI5ZBKlaiDQw_wO9nw88a0.roa (hash: tQTOlSI2XH6rsXW1nhJPPPkXPxhSWEfkvDRnTJEB2Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:d5:09:92:1d:2d:ae:b2:95:8e:d3:b9:cb:e1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Jun 28 10:01:09 2025 GMT
Not After : Jun 29 10:01:09 2025 GMT
Subject: CN=0a8e3cf8e13717146459cda6f8ffa206cdf1a890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:20:ae:e7:3d:67:85:ff:dc:98:3f:79:67:
68:f9:f4:35:61:42:6c:c8:8f:4e:8a:cd:ad:e0:29:
cb:ba:83:b8:d5:9f:43:43:78:ac:0c:30:dc:cd:c7:
b5:13:c1:50:91:70:97:2e:73:6e:34:16:cb:0a:ae:
49:ac:58:ce:be:a1:49:34:fd:52:f8:a7:9f:23:b8:
ad:9c:99:41:28:cd:76:42:ea:df:b8:1e:85:1e:91:
f0:38:97:c3:bb:e4:e7:e8:bc:61:b4:64:1c:8d:58:
8f:28:62:aa:2d:d3:9c:15:36:20:18:4d:cc:12:b9:
72:02:88:36:9e:f3:6a:d1:f4:cd:d7:1a:96:5e:fe:
af:a5:0e:05:36:84:b2:47:b1:4c:dd:b8:2b:95:11:
db:99:50:32:51:c4:11:ed:6a:56:4c:c0:0c:68:e0:
b3:84:18:97:0d:a5:a5:ba:63:6e:ad:92:65:5a:01:
ea:aa:5c:d0:a6:f7:87:c1:dd:98:74:64:1f:ff:f1:
39:ae:3b:02:11:d2:43:b7:f4:ee:26:04:ea:af:ea:
98:9b:e4:0e:3a:ab:44:31:8a:d8:69:a9:e8:cc:15:
a2:92:a7:42:2e:0f:7c:d7:88:3f:e4:a9:43:de:e2:
96:4f:ee:9d:f9:06:c3:21:19:70:8c:db:d4:1e:8b:
5c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8E:3C:F8:E1:37:17:14:64:59:CD:A6:F8:FF:A2:06:CD:F1:A8:90
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:cf:3a:78:63:29:e2:6e:ed:59:ec:3d:45:2d:dd:17:12:2b:
7b:4e:b0:e7:7e:3e:f2:7a:b0:05:56:d5:68:5f:b2:e8:e2:b8:
b9:c6:1d:3d:06:b9:76:a3:a0:22:9f:73:c8:f5:5e:c9:07:9f:
7d:99:67:9f:16:83:e6:4d:e4:8f:23:64:06:53:2d:4a:b6:da:
64:66:0b:85:c3:03:fc:60:03:25:c1:d3:58:98:e2:e7:da:1c:
e0:97:c1:97:bb:c5:ea:87:6c:8b:d5:8e:b4:8e:77:3a:3b:73:
e6:d1:ad:6f:24:3e:3c:2f:00:82:49:cf:8d:d8:e4:ad:fc:f3:
3d:e0:72:37:b2:64:61:32:60:28:f2:e2:fb:bd:38:e8:79:b1:
fd:9e:56:fb:7f:3a:6e:92:a2:87:fb:1e:5e:b5:d5:65:b7:c9:
ae:44:0d:9f:9d:74:de:2e:20:c8:d2:0c:a9:0a:b6:9d:79:e0:
02:8c:5a:e4:20:71:36:ea:22:e4:53:f7:c1:81:9a:36:7c:dc:
f8:ce:1f:18:c4:93:d3:9d:5c:22:2b:30:5d:f1:8e:83:75:55:
9e:60:3d:67:75:63:8c:10:78:08:40:73:e7:db:9b:65:e4:a7:
24:9c:98:0b:72:ae:b3:12:bd:70:27:39:98:aa:c9:b2:18:39:
23:52:8d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:43 2025 by rpki-client