Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
File: j6mutCbCijSAh3b5Vok107nsngg.mft (raw, json)
Hash identifier: 3B+Ov7oYhIa1fB7nZZOcYDJ8NxhBx9YHnOzQRyzchkM=
Subject key identifier: 53:56:66:1E:BF:74:7A:A8:F9:09:E3:04:60:A9:FA:32:94:29:D7:AC
Authority key identifier: 8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
Certificate issuer: /CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Certificate serial: 0196556E6CC22C218F612F09B4A6279E6C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
Manifest number: 0F8D
Signing time: Sun 20 Apr 2025 23:00:22 +0000
Manifest this update: Sun 20 Apr 2025 23:00:22 +0000
Manifest next update: Mon 21 Apr 2025 23:00:22 +0000
Files and hashes: 1: j6mutCbCijSAh3b5Vok107nsngg.crl (hash: dtsGj+zdU5Wn+ITs7kWgazeEJ7WWK7h5wRDHttPZvNE=)
2: pqaKQ_TLLBYikhcnNcdXTfV_Qqg.roa (hash: hN1kuDdul6eCFSiEm2Z9+yxnk4jIcJ1yoCv4DPl4iuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:6c:c2:2c:21:8f:61:2f:09:b4:a6:27:9e:6c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Validity
Not Before: Apr 20 23:00:22 2025 GMT
Not After : Apr 21 23:00:22 2025 GMT
Subject: CN=5356661ebf747aa8f909e30460a9fa329429d7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:34:b3:3c:94:64:24:62:d6:e2:10:c4:01:
e8:d1:15:37:79:61:36:67:73:cf:1d:5a:89:db:fe:
7f:97:44:6c:91:67:6a:ab:86:da:31:4f:77:4d:3d:
2b:27:d8:d7:33:96:5f:de:c5:2f:af:02:4a:81:73:
6b:8a:6f:75:d2:a5:bd:bc:1b:e2:ef:3e:18:89:31:
92:e0:fc:01:85:f3:57:c7:12:35:99:32:83:61:b2:
c9:fa:f9:d5:39:da:4f:9d:90:5a:71:f9:24:4d:3b:
1e:ba:b5:6a:70:c3:e6:f3:39:85:a7:c1:96:99:bd:
c3:e9:99:5a:f8:b1:6a:f4:98:56:29:20:d0:a7:95:
69:99:4c:65:98:84:b5:7a:fa:d5:8c:34:5a:3a:79:
ba:2a:06:fd:61:97:7e:3c:64:74:a9:e7:8c:22:20:
88:17:b2:92:bc:64:28:32:a8:6b:8e:10:30:0d:99:
91:c2:60:d1:42:15:2c:ae:69:76:5a:0b:66:de:a6:
bb:d2:fe:9b:23:ec:14:66:08:21:2e:53:8f:87:d9:
1c:fa:5a:23:0c:d7:ac:0f:ae:62:2c:ad:8a:4c:a1:
d3:2e:8f:d0:99:7d:a6:39:00:82:55:9e:f9:58:3a:
80:38:c5:a4:ab:47:84:d7:52:74:c1:9f:a2:c2:59:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:56:66:1E:BF:74:7A:A8:F9:09:E3:04:60:A9:FA:32:94:29:D7:AC
X509v3 Authority Key Identifier:
keyid:8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9f:b6:4a:cd:74:1d:81:81:0b:3c:7e:7a:b9:4e:df:ff:f1:
3d:8b:5e:f9:48:dc:05:40:69:9e:b3:81:eb:c0:d2:a9:a3:38:
da:f6:ca:f1:7a:0e:c1:91:d1:3f:b8:77:38:29:12:eb:29:a2:
7a:31:02:4e:fe:92:07:fa:c5:97:08:9a:1d:4f:33:ba:2c:ff:
4d:6b:06:c9:dd:17:13:4f:00:ec:82:f7:21:68:a2:13:83:18:
41:88:19:a6:3b:a1:a6:90:14:e6:d8:93:1e:be:d1:35:86:d2:
17:08:ec:cd:23:07:cf:a9:a0:a4:a2:41:ff:1d:1a:fb:fc:66:
ac:bb:bf:ed:49:4a:2b:4a:9d:c9:b3:07:6e:fd:f3:d7:1c:40:
72:aa:b5:bc:9a:9b:48:52:23:0a:ca:75:2e:28:35:dd:41:83:
02:63:be:85:c6:95:a4:19:b6:81:58:4a:bc:b4:7e:5b:54:c3:
0d:63:f4:25:6c:56:66:f8:97:b9:a7:cf:32:50:98:6f:c7:2e:
b7:d1:69:e3:eb:04:80:6e:27:dd:1f:5c:d8:74:3a:cb:db:b5:
de:15:51:48:d5:2a:92:19:6c:9e:f5:21:d8:79:3c:ad:02:66:
18:5e:73:87:9e:e1:38:ca:e9:33:7c:fc:9a:05:de:ef:44:4c:
ef:a9:e3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:08:59 2025 by rpki-client