Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier: QSGkYkSbjCBEkvWkxAKahFu+hhO/H+obhU+5wgjAj8Y=
Subject key identifier: 6A:0A:0F:1A:AA:79:9A:4F:39:F1:CE:F8:74:E5:3A:B0:19:DD:EF:EB
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial: 0196CBE0E26E183574BC74204FAB213B9CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number: 14CA
Signing time: Tue 13 May 2025 23:00:34 +0000
Manifest this update: Tue 13 May 2025 23:00:34 +0000
Manifest next update: Wed 14 May 2025 23:00:34 +0000
Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: +kQ+P0OBjX0ayBMRZtEX+hTSIfnaPMOFebrgi7wo+C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e0:e2:6e:18:35:74:bc:74:20:4f:ab:21:3b:9c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Validity
Not Before: May 13 23:00:34 2025 GMT
Not After : May 14 23:00:34 2025 GMT
Subject: CN=6a0a0f1aaa799a4f39f1cef874e53ab019ddefeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:64:28:21:58:95:cf:83:4d:73:41:54:e9:
c9:36:17:5e:c1:9a:5c:e0:c8:aa:2b:dc:4a:53:f3:
6f:c5:c6:1d:1e:f7:ce:cf:02:3c:09:ef:07:19:80:
52:49:ad:14:61:88:a2:e3:b5:90:00:00:20:15:6c:
b6:5d:28:14:44:4b:33:1a:2c:2f:a5:ec:94:a2:99:
7a:36:97:7e:0d:e3:f9:c4:23:fb:21:9a:cc:ae:1f:
1d:19:b3:46:9e:50:67:1d:23:2d:28:46:b1:23:f0:
a1:79:8a:be:26:6d:bf:3c:a5:a8:7d:62:62:1a:9f:
7b:e1:31:1e:1a:d6:40:2a:3a:7a:00:4d:10:99:19:
e5:f0:80:cb:79:ae:01:38:72:1a:76:ef:0e:d1:fd:
59:9c:15:d9:e9:a3:15:8f:9c:ba:49:83:a2:21:65:
ae:76:1f:c6:40:0a:c0:78:78:f9:75:91:12:94:19:
f7:d6:f0:3f:78:d9:7c:39:ab:3e:83:10:8d:5d:2b:
94:85:8f:31:88:7f:17:c8:a9:e1:29:6f:75:8c:d9:
e7:ef:22:cb:6f:6f:f2:5f:01:a9:f2:2b:69:20:0f:
28:46:f8:cc:a3:1d:c1:b4:91:24:53:61:e7:8a:68:
60:6e:e0:ac:01:65:03:5f:0e:a6:ab:f6:90:71:35:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:0F:1A:AA:79:9A:4F:39:F1:CE:F8:74:E5:3A:B0:19:DD:EF:EB
X509v3 Authority Key Identifier:
keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:24:e6:3e:5e:5a:43:a5:97:48:21:96:2e:b8:2f:06:8f:6a:
a7:89:af:21:bc:d0:ab:b1:04:76:7e:30:1d:12:d7:96:e3:f0:
4a:eb:3d:35:ee:5b:64:ce:2f:9e:3a:8b:75:9d:d2:bd:c3:be:
f2:4a:b7:7c:de:dc:77:23:05:3b:09:4e:5d:17:de:b6:a2:d9:
6a:84:ba:77:83:1e:e5:23:7a:01:75:b0:33:c9:e6:a5:bd:80:
39:4a:20:42:14:7d:1f:be:d6:7d:d2:9d:3a:29:d5:3f:74:1f:
e3:d7:03:04:02:77:d6:68:1c:a8:de:f8:7b:21:28:06:fb:52:
f5:de:8a:28:2e:ff:5a:08:09:62:2e:15:7a:09:9f:f3:78:ed:
76:32:f2:0c:ab:d8:1c:08:28:d1:1b:a4:10:f7:df:85:da:f8:
e2:71:35:34:6d:96:9a:46:71:a7:97:64:9f:97:a1:bf:5f:14:
c3:fb:4c:dd:59:03:75:bb:f6:49:31:d9:2b:2c:36:86:9b:c0:
6d:1f:b0:42:a7:c3:b0:3a:94:37:da:16:2d:23:4f:d0:ea:91:
4b:3e:af:c5:ab:f2:7e:ff:b7:d4:f7:ed:76:bb:32:d6:25:6b:
a5:7f:46:3a:5f:2e:3c:54:38:0b:f2:74:3f:2f:ef:1b:86:86:
6b:1d:49:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:55:50 2025 by rpki-client