Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: +j/iXu1H2Ajxl5UccEFtDPw2waMTos9nF6WJNzc6QrM=
Subject key identifier: 84:57:62:E7:B4:38:FB:32:2B:2A:67:35:C9:00:AD:6E:C0:92:1E:F7
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 01962CAA8E88A209C97D8BF4ACB9657B185D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 1343
Signing time: Sun 13 Apr 2025 01:01:37 +0000
Manifest this update: Sun 13 Apr 2025 01:01:37 +0000
Manifest next update: Mon 14 Apr 2025 01:01:37 +0000
Files and hashes: 1: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: 7yyIp/VuaVkd3z432uxulPDUnqz3Iw4GELKfq02Tj08=)
2: omv1iA0sTwZqywTVYlUXXegJP1Q.roa (hash: lDFIRi5hNHf1aQj7xWQEmMDGw0C4yu9jECeYI1136N4=)
3: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (hash: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:aa:8e:88:a2:09:c9:7d:8b:f4:ac:b9:65:7b:18:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Apr 13 01:01:37 2025 GMT
Not After : Apr 14 01:01:37 2025 GMT
Subject: CN=845762e7b438fb322b2a6735c900ad6ec0921ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:58:31:5f:fc:cc:a8:3b:d2:97:bb:fb:b0:
06:33:d1:66:95:8f:3d:a5:65:ef:e9:7f:13:f7:bb:
8a:51:9a:2d:56:5c:31:5a:ea:8a:97:af:21:53:fa:
f4:e5:2b:fb:b8:b4:8a:41:08:69:ab:dd:a1:b9:2d:
a4:eb:a6:5d:a4:da:72:26:35:2f:bd:69:24:c0:c2:
03:2d:cc:44:36:53:6c:14:d1:ec:5c:ff:b4:59:27:
eb:10:55:ae:01:79:a3:ec:90:bc:f5:69:ed:7d:e0:
a1:72:c2:a7:aa:c5:bc:a4:82:28:53:a8:76:e3:15:
39:ba:3c:8b:6a:92:95:e0:99:8f:fc:0c:95:ae:9e:
28:2b:3b:f2:58:54:c3:55:24:24:23:17:63:6a:bf:
05:97:71:bf:41:49:5f:e3:16:23:2f:57:94:93:85:
b3:37:59:e9:4a:99:3c:38:b8:c0:b9:73:2d:e8:f9:
bc:5b:22:b7:31:df:1f:02:37:17:e6:b7:df:8b:44:
20:2e:1b:46:c2:91:7f:7d:05:4e:ff:19:5a:96:57:
62:71:90:52:59:f0:76:a2:7f:9e:5e:7b:5f:17:80:
ab:e6:99:20:c5:9b:b0:0e:10:70:8b:7c:54:3d:84:
8b:fb:3b:7c:89:e9:80:83:28:95:a5:ce:70:4d:17:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:57:62:E7:B4:38:FB:32:2B:2A:67:35:C9:00:AD:6E:C0:92:1E:F7
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3d:e3:0f:ed:11:2a:c5:59:57:52:99:40:7e:cc:bf:a3:56:
77:a2:bc:42:c1:55:1c:c2:2f:81:c0:a0:b5:e9:ba:47:dd:74:
5f:9c:1f:9d:8f:ae:f3:a3:e9:95:40:60:d8:a3:4e:9f:c0:32:
c0:a1:d1:8e:9c:f4:d9:0d:c4:7b:fd:a3:f5:7a:7e:6f:a1:59:
ed:80:03:b8:f7:7e:7f:56:8f:c0:c1:1f:68:9c:a4:c3:a2:17:
34:0e:36:31:42:a3:cf:4b:30:d2:c0:5a:05:64:43:d9:40:65:
1b:ed:5c:47:72:45:88:cb:b0:ef:92:4e:80:ae:eb:ff:33:4c:
3f:39:8b:51:b8:25:eb:87:2b:c9:18:5a:13:5b:9d:17:b7:4b:
da:c0:0e:ed:2c:85:93:38:90:40:e4:36:a6:7d:1a:78:f8:41:
dc:0b:f5:e2:4d:3f:35:38:96:da:30:2f:7f:bd:d1:c3:9b:91:
8c:cc:a2:65:ab:b8:8f:d4:2b:35:15:53:b6:1a:33:13:59:25:
19:2d:68:2c:15:46:a5:3a:c1:83:f0:19:40:45:69:20:c1:76:
77:2c:29:58:7c:5f:c1:c9:ff:d8:69:54:4d:a5:83:f0:43:81:
a1:9d:02:59:2f:1f:e6:48:c5:0f:f8:85:51:1f:e1:ba:9e:2c:
cf:21:92:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:13:01 2025 by rpki-client