Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
File: J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json)
Hash identifier: U/h38+UhFaYGUK4Q0zvo2mAOhKqKJ36+MqBqVcEVBoI=
Subject key identifier: 9A:39:DF:B9:A6:6C:09:D9:10:F4:EC:A6:8F:D9:19:1A:CE:FE:48:95
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial: 01965914997E808382700ECBF7738F79871E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
Manifest number: 0AC1
Signing time: Mon 21 Apr 2025 16:00:44 +0000
Manifest this update: Mon 21 Apr 2025 16:00:44 +0000
Manifest next update: Tue 22 Apr 2025 16:00:44 +0000
Files and hashes: 1: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: 1Qv2rWDX6fEmZqJOOGhXgqYDq4/2+j6iQt94elpYNJI=)
2: X3QMt1fmV4wTFAQPHZ4zsROv8I0.roa (hash: Whnqs1Wwvsp0OIKAaEg9kGiqf108NquKFQHaJWKxLGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:99:7e:80:83:82:70:0e:cb:f7:73:8f:79:87:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Validity
Not Before: Apr 21 16:00:44 2025 GMT
Not After : Apr 22 16:00:44 2025 GMT
Subject: CN=9a39dfb9a66c09d910f4eca68fd9191acefe4895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:d1:e6:ef:3b:9f:6e:b2:99:84:5b:6d:3b:
75:28:30:65:0e:2e:47:7b:09:64:34:0e:bc:af:8b:
8d:21:34:fb:22:72:f6:e3:8d:d9:9f:5e:f1:df:eb:
8c:45:9d:18:e6:b2:26:ab:61:50:1d:1d:5b:00:20:
61:a5:62:ff:b6:d7:81:4b:be:30:56:9d:c5:ce:d5:
1f:f0:5c:5a:72:8d:a6:3f:0a:7b:0c:52:c2:38:7b:
e9:41:c3:c6:f8:32:cb:96:88:b4:23:ac:d2:ad:7a:
c7:24:f2:89:82:6a:3a:6a:a2:e7:05:8d:25:ad:d4:
f2:0b:f7:7b:37:fe:b1:04:8b:d5:f6:9c:ca:18:87:
36:f4:f6:2e:b7:d9:42:50:02:c0:64:3c:b6:c8:6f:
9f:c2:41:8d:d7:af:ae:52:0e:b3:f3:8e:e6:6e:74:
22:ae:87:b2:20:a3:50:62:a4:b9:a6:8a:70:38:6a:
76:f8:4f:f8:bd:4b:97:a3:fd:23:32:bf:9a:9c:d2:
78:45:6a:80:bf:9c:34:25:62:69:1e:96:29:42:e1:
86:77:19:13:33:1f:c1:f7:72:58:93:9e:19:fb:88:
9f:81:b0:ff:f5:29:0f:74:7c:2b:ed:bf:20:a1:c6:
77:d5:d1:73:e7:ff:7b:0c:54:ff:85:72:49:0f:70:
68:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:39:DF:B9:A6:6C:09:D9:10:F4:EC:A6:8F:D9:19:1A:CE:FE:48:95
X509v3 Authority Key Identifier:
keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7a:cf:6a:26:8e:ae:31:c3:04:84:7e:c4:8f:63:cb:b3:d5:
ed:10:16:f8:d7:c1:3b:21:c2:dc:4c:4f:41:98:0a:ca:aa:ae:
8b:ba:e0:8f:3b:16:e7:bf:9c:3b:85:8a:0e:eb:02:29:c2:75:
40:01:4f:e0:25:9b:cd:fd:ca:a3:2a:b7:7f:6e:d8:29:6a:50:
d5:bb:06:c1:4f:d6:f9:cc:ee:d4:d9:85:bf:35:e2:0d:aa:10:
25:2b:52:25:12:1e:91:ca:c0:7b:37:e1:49:e7:59:a3:43:50:
3e:73:2f:4b:a1:02:9b:97:7c:02:a1:b6:20:f6:99:01:bf:75:
32:0c:9b:c8:af:27:7b:ea:e2:34:9a:c4:8a:43:ed:95:e7:47:
c7:61:aa:c2:be:62:aa:f3:9f:17:83:fb:52:8d:5e:55:20:1f:
c5:d4:6a:d9:72:36:df:64:64:07:2b:e3:3f:42:2f:ee:c7:03:
33:e2:90:ad:16:a5:7e:4f:25:89:8f:fc:a4:69:82:a3:a3:e1:
5b:6e:3d:db:a1:22:9c:3c:cb:41:5d:d2:96:21:6c:61:3b:46:
1e:73:9e:ab:26:2e:aa:ec:51:52:92:52:00:1e:e4:12:e9:e6:
7c:2e:df:65:dd:b3:27:52:cf:59:04:26:57:37:ea:19:f7:23:
31:77:cb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:14 2025 by rpki-client