Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: lyDmWXC7qYcCeXfZHtQxVaC4CpVmHL1YU4WnoPl5UXE=
Subject key identifier: 4D:F5:A5:4E:4E:16:99:77:5D:F2:00:17:FC:1F:41:66:DC:8C:91:44
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 01964FDA0F48C3374A5C59F7FC26FFD566ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 21:00:12 +0000
Manifest this update: Sat 19 Apr 2025 21:00:12 +0000
Manifest next update: Sun 20 Apr 2025 21:00:12 +0000
Files and hashes: 1: IjluqbVdM5zm7wvPSgQZOmXQjag.roa (hash: QKwqMUOeWOJatNvuP/XT/XSpsSd9RiOppxhqX3P9KPo=)
2: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: vKSny2GwvDH7216sxAtsJZccZ5ssUwdqgWSX2e5PyrI=)
3: YY-hoyGXDDo8SiePezL_ZO2nNOw.roa (hash: A3j7uoljgavovkzwgqN6nFVhnXRD4UmTm39D3QvLFO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:0f:48:c3:37:4a:5c:59:f7:fc:26:ff:d5:66:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Apr 19 21:00:12 2025 GMT
Not After : Apr 20 21:00:12 2025 GMT
Subject: CN=4df5a54e4e1699775df20017fc1f4166dc8c9144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:05:b0:5b:50:1d:82:3f:c2:ae:31:aa:29:
84:9a:a1:3d:0f:fd:a1:40:ab:12:94:eb:7d:00:48:
6d:e2:ec:f4:76:c4:b9:82:e1:df:77:f0:fb:21:64:
4a:98:cf:5d:2e:b2:21:49:07:ff:4d:55:9d:c8:87:
30:3e:3e:2e:4e:1b:21:38:c6:68:ca:cb:a0:5d:91:
b4:e6:27:f8:78:de:47:a6:c4:5c:64:06:81:02:b6:
80:17:bc:64:71:81:f3:42:3f:40:e5:07:1d:73:0a:
f0:f9:a3:0c:2f:c0:09:9a:c4:72:27:a5:20:0f:93:
12:49:87:21:e1:c1:76:06:8f:5e:d5:0f:95:a6:f2:
d4:60:5b:d2:61:6f:d0:c7:db:6a:ba:32:54:2e:56:
85:2d:10:d1:db:1d:13:2c:8c:c6:09:c5:5e:ba:df:
4b:e6:3f:13:42:92:79:39:6c:ce:76:94:d5:75:6c:
50:45:59:34:e9:d3:30:ad:96:cd:55:b4:38:62:99:
f8:54:c1:35:f3:f5:7b:c4:6d:ad:d7:9a:72:80:72:
4d:78:76:9a:01:85:e5:5f:84:1c:41:38:c2:ca:58:
f8:cb:85:0e:89:03:f1:da:1b:43:83:65:96:86:78:
80:2c:59:4f:94:b7:7e:a7:e3:b8:28:2f:f7:75:88:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F5:A5:4E:4E:16:99:77:5D:F2:00:17:FC:1F:41:66:DC:8C:91:44
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c6:60:cf:cf:69:10:84:13:62:03:dc:a2:b1:7c:91:a6:fd:
ca:55:5a:96:2f:87:f2:a6:9c:2b:b5:d0:3b:f2:02:71:89:87:
86:90:9b:c5:ea:32:c7:a1:2d:87:f4:16:35:12:9b:84:f8:5e:
d9:b9:1b:ea:71:fe:37:e9:72:39:ba:76:4c:52:4b:f5:02:3b:
f1:33:3c:a8:bf:e2:4a:79:3c:5b:a9:cf:6a:53:b9:f6:fa:e2:
ff:50:38:3d:c0:99:95:b2:76:09:03:03:92:cc:b6:41:85:d8:
0d:95:e0:a8:ad:81:f5:20:55:17:a9:24:ee:3e:e1:71:44:52:
a6:94:90:32:2b:bf:d8:83:19:b2:c2:77:cd:06:a1:47:3b:6d:
83:55:33:9d:79:d1:31:19:2b:41:4f:92:30:28:02:34:c1:85:
d1:38:65:bf:b7:db:ec:f7:e5:09:69:7a:32:dd:27:d3:06:67:
b5:2a:3a:c3:13:fd:32:2b:3a:38:9f:f9:f1:f9:1b:1a:b9:ac:
34:18:cb:38:6f:96:e7:81:ec:9f:57:01:b4:58:a9:d4:f0:7e:
ed:a7:69:08:45:c4:58:d7:ee:ff:99:68:8f:b2:5d:f1:3e:0a:
eb:04:ff:e7:6c:c1:1f:8c:ab:bb:e8:40:ad:f6:65:82:ed:f6:
de:5b:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:39 2025 by rpki-client