Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
File: J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft (raw, json)
Hash identifier: D/MNFiEhLSHDCZtu07ZaG/veirI5IzKjwqBJbnPxCPI=
Subject key identifier: 8C:D8:04:9C:72:EF:9D:22:C5:84:FD:DB:0C:70:F3:FF:9A:41:B3:63
Authority key identifier: 27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
Certificate issuer: /CN=27d028470604336fdb9308e51ba53e951ae2e098
Certificate serial: 01963EAFDA3B3B12DF35E16BB7C1883F66B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
Manifest number: 0888
Signing time: Wed 16 Apr 2025 13:00:34 +0000
Manifest this update: Wed 16 Apr 2025 13:00:34 +0000
Manifest next update: Thu 17 Apr 2025 13:00:34 +0000
Files and hashes: 1: 8lytrNRAlkzl2XNEuoqT9hqGeHI.roa (hash: bsiOs3LeZM/7MgOmaqSi5ylqvDA5KYlcRdJP7/Y5e7k=)
2: J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl (hash: ENocEVuyzlI7hQQP2AB5RIu4Cn762LVfQ7lYoQhOYpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:da:3b:3b:12:df:35:e1:6b:b7:c1:88:3f:66:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d028470604336fdb9308e51ba53e951ae2e098
Validity
Not Before: Apr 16 13:00:34 2025 GMT
Not After : Apr 17 13:00:34 2025 GMT
Subject: CN=8cd8049c72ef9d22c584fddb0c70f3ff9a41b363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:eb:d3:e8:5a:e7:e5:6b:2e:2a:c5:30:b0:
5a:2d:25:c3:53:02:ef:fe:55:64:bc:48:a9:b1:c3:
72:df:60:54:81:e2:b6:65:42:2e:fb:85:eb:9f:a9:
dc:23:dd:31:0d:6f:a7:94:4d:65:54:f0:11:70:6a:
5d:73:06:01:fe:4f:60:c7:15:58:36:82:72:89:4b:
39:be:c2:20:40:03:a9:f1:54:a0:28:94:ca:14:cd:
dd:d4:e8:ad:e7:ce:cc:2e:ba:27:70:1c:1c:35:29:
30:3a:98:d4:6f:2e:fd:1a:12:02:90:b0:cb:12:80:
73:ac:f5:c2:9f:05:12:e9:36:42:12:3b:6b:67:3f:
af:a0:f1:d0:2d:21:41:45:e5:7b:49:ac:e4:29:16:
b4:f1:fd:1d:92:22:06:16:e3:34:00:5f:27:87:32:
e2:b5:e7:79:9a:5b:f9:4e:09:7a:59:11:4f:c7:63:
39:4e:a5:2b:6b:06:18:b5:be:f6:f2:8a:a6:81:9f:
62:cb:30:92:e1:52:fa:7f:4e:7e:24:83:be:3b:b2:
5f:18:f9:fc:27:78:7d:aa:ce:97:ed:7c:0a:30:05:
72:f5:d7:a2:a3:c4:a8:68:3a:fd:05:75:f7:5a:d2:
1e:5f:5e:66:fe:25:a1:0e:fc:31:88:53:53:26:72:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D8:04:9C:72:EF:9D:22:C5:84:FD:DB:0C:70:F3:FF:9A:41:B3:63
X509v3 Authority Key Identifier:
keyid:27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c9:45:c3:62:eb:53:65:7a:8e:b9:97:cc:f0:b0:11:a9:e9:
69:6e:34:4d:e6:4e:04:4c:44:f9:30:c1:2c:3c:d0:2d:24:a8:
86:5c:19:b4:b5:47:1a:e9:7b:e0:f7:9c:06:aa:09:7d:22:76:
98:d1:67:7b:75:f6:3d:64:31:9b:ec:26:8e:1e:86:71:42:ea:
64:df:b9:ad:2b:00:7b:7f:13:4a:81:f2:84:06:b2:3d:6f:3b:
6a:0a:a2:e5:7b:ac:aa:9a:cb:26:b9:2d:d5:3c:a6:07:50:57:
ef:10:c2:a3:59:59:7e:a1:21:73:ac:0e:1a:13:0e:dc:e2:dc:
ee:8d:0b:ee:a1:3e:56:25:b1:2a:d7:bb:2b:4a:84:ec:8a:52:
00:d7:4d:2e:44:0b:af:37:86:0e:5c:0f:70:1c:e1:b5:24:08:
34:80:51:7f:42:82:be:6a:08:7b:6f:e5:cb:ca:c0:ec:c1:f0:
02:17:75:a3:32:76:96:87:f3:28:7a:7b:98:49:41:1f:77:be:
e1:ac:90:62:06:73:bf:18:11:29:79:97:2c:39:fd:87:dd:e7:
f4:5c:0c:8c:e8:57:33:ec:3e:d4:ce:2d:d2:ae:79:9f:9e:58:
5e:ca:a0:a4:fe:10:b7:dc:86:fa:40:14:72:22:c9:22:d2:72:
86:1e:2c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:07:13 2025 by rpki-client