Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
File: J84emmUiYWqzCw8SPgnTBagjBK8.mft (raw, json)
Hash identifier: OctiOZfuPI35AR9+jZ7ZQt1xfMbLwBQobMdC3ob496Y=
Subject key identifier: 02:8B:46:44:99:EF:DE:AC:5B:86:C4:ED:BB:65:98:CB:AF:7A:30:BD
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Certificate issuer: /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial: 0196C0EF184F2E75D62BD15B70B9B621809A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
Manifest number: 153C
Signing time: Sun 11 May 2025 20:00:16 +0000
Manifest this update: Sun 11 May 2025 20:00:16 +0000
Manifest next update: Mon 12 May 2025 20:00:16 +0000
Files and hashes: 1: J84emmUiYWqzCw8SPgnTBagjBK8.crl (hash: pj+YZ4WSUF6yWrdkeWqL+yKX1vTkRDXZ8rE1mExn8cI=)
2: WgYDhL0i6U8cqNQpr57kES37q38.roa (hash: RKIGt1CKlAHIm7PDdsvYymoW20pcRCPFEmrAdn3vZno=)
3: xfeGCbXD-YF0qFrPXVL_VBgsViY.roa (hash: +QvSz3wl8pHqddA2o6rF3CbvD6JrTHLlFmQPhouhbbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:18:4f:2e:75:d6:2b:d1:5b:70:b9:b6:21:80:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Validity
Not Before: May 11 20:00:16 2025 GMT
Not After : May 12 20:00:16 2025 GMT
Subject: CN=028b464499efdeac5b86c4edbb6598cbaf7a30bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:c2:44:95:cf:4d:e4:bd:fc:12:23:7f:6a:
59:c5:a4:c8:a8:d9:c7:dc:69:2a:25:80:7f:bd:e5:
b3:f1:4a:f5:0a:db:d5:61:c6:57:e0:0b:ea:17:c1:
67:ee:9c:25:c5:ce:99:61:48:a7:e9:b6:56:c7:1d:
9a:ae:ec:39:21:a3:2c:ca:da:fe:c2:db:22:0e:2e:
2b:af:47:e5:6b:66:30:3f:b6:bc:57:b8:fc:f4:08:
7a:60:7f:2f:a1:6b:f6:74:3a:49:15:3b:b2:f4:e8:
e0:55:5e:9e:f2:5d:13:fb:4d:09:f6:11:ed:8f:85:
f9:1e:d0:66:97:f5:59:48:25:66:a5:90:5e:29:c8:
ad:b6:d3:d6:ba:71:ba:1a:d6:1f:1c:d5:83:f9:40:
d8:ce:b0:bf:7f:ae:07:c4:6d:cb:08:39:8c:e3:27:
2a:56:6b:cb:5f:aa:6e:75:54:0f:94:85:e5:25:3e:
0f:f6:d0:2e:02:e6:ea:f6:60:f4:61:36:f2:df:17:
4f:d8:01:4d:0d:13:67:21:06:9c:d1:6b:44:10:2d:
20:34:d2:d7:61:75:94:ce:e0:af:5f:2c:f9:44:3b:
e0:28:63:25:ad:d4:25:f6:8a:b7:5e:97:0a:5d:17:
25:dd:1a:3c:62:93:25:ea:94:9d:e0:26:eb:1b:56:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8B:46:44:99:EF:DE:AC:5B:86:C4:ED:BB:65:98:CB:AF:7A:30:BD
X509v3 Authority Key Identifier:
keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:98:5c:4d:bd:52:23:7c:af:16:73:57:a3:fa:1c:86:10:1d:
6b:22:0c:62:10:8e:b8:9b:da:a9:49:cc:1f:a3:9d:ee:05:3c:
a6:63:7a:4b:b6:f5:59:4d:f8:4e:4d:8e:da:eb:1c:b0:3a:ca:
d6:4f:2f:d0:a0:38:26:24:6b:57:fe:90:36:17:4a:a5:df:8c:
9b:49:57:21:66:7e:47:55:a2:db:23:6d:70:c2:56:77:73:bd:
a9:ed:2f:63:7c:69:f3:d1:33:54:70:49:61:de:6d:08:9d:ca:
3c:70:e8:dd:e5:82:e3:3d:c3:c9:3e:5d:a0:18:2d:a6:c8:ce:
08:9b:7b:3a:3b:aa:c8:f8:e1:bd:5f:28:99:a8:47:26:6d:61:
f2:7e:c1:ae:b9:77:fe:78:87:b0:d5:e6:2c:f9:5f:10:70:6e:
d0:bb:7a:15:c6:98:7b:1b:c9:41:b2:cd:de:8c:3a:0e:a5:72:
08:77:79:b5:4e:c6:82:54:dd:5b:6b:12:0c:35:52:f4:b0:cc:
74:32:3b:2e:3d:ad:36:f5:b8:0d:83:f6:dc:e9:73:1f:ed:2c:
46:76:90:a8:c0:fe:47:10:3e:35:9f:55:46:0b:2e:38:0f:0d:
c9:fa:9c:63:6f:4d:19:5b:c2:a3:4d:27:e9:e4:9a:5b:a4:07:
0c:78:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:10:20 2025 by rpki-client