Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
File: J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft (raw, json)
Hash identifier: HujEOL+EqFcrnsgisLLCPLIUozlIUfzRBYcWMdADNIY=
Subject key identifier: BB:0C:7C:AF:39:1C:54:A2:32:93:80:CC:9E:E4:2B:6A:94:18:BB:F1
Authority key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
Certificate issuer: /CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Certificate serial: 019760CBA8B430DD413266BF3805B220B340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
Manifest number: 0153
Signing time: Wed 11 Jun 2025 21:00:48 +0000
Manifest this update: Wed 11 Jun 2025 21:00:48 +0000
Manifest next update: Thu 12 Jun 2025 21:00:48 +0000
Files and hashes: 1: J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl (hash: s9sYwl+AhL8yDIb1sBCH/Nz1vjS/nxnXqrdTe3CozdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:cb:a8:b4:30:dd:41:32:66:bf:38:05:b2:20:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Validity
Not Before: Jun 11 21:00:48 2025 GMT
Not After : Jun 12 21:00:48 2025 GMT
Subject: CN=bb0c7caf391c54a2329380cc9ee42b6a9418bbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:d9:38:cf:2d:75:37:2d:e9:e6:a6:9a:71:
3d:2c:9e:5c:8a:df:bd:b4:d4:84:4c:10:57:89:cd:
db:09:33:31:f9:7b:e4:8e:18:e4:20:a5:0f:9b:89:
38:6c:6b:80:da:13:b6:e0:76:a2:51:48:fc:df:d1:
93:5a:1b:0b:42:d8:6b:21:74:a8:c8:2e:6d:01:da:
90:87:bc:82:a1:92:92:36:21:2e:de:0f:b2:ca:57:
e5:fc:7d:5d:e4:fd:9a:68:05:e7:cb:b4:f0:40:00:
2b:e5:79:89:35:2a:b6:3d:eb:a6:1c:18:ec:47:29:
22:77:2f:83:ef:03:a2:1e:da:b8:1d:cf:a9:d4:b9:
33:1f:58:0d:5e:c1:9b:48:4e:87:fa:3b:94:25:17:
1e:c7:2b:36:2e:e2:68:6a:4a:57:06:1b:3c:74:09:
67:d3:ba:ba:d5:92:73:5c:3c:7b:8f:7d:5c:90:01:
79:ab:d9:ff:00:fa:ba:3f:62:3f:b4:a8:62:27:70:
4a:88:8a:09:2a:49:53:7f:a0:b0:82:ce:b6:a0:c3:
86:05:b2:3d:c4:e9:12:36:e7:aa:ca:76:f4:fc:9e:
eb:02:92:cc:04:e7:66:31:0b:ee:da:32:bf:c7:31:
ba:8d:40:96:3a:72:d9:df:b2:65:67:c9:86:d6:58:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0C:7C:AF:39:1C:54:A2:32:93:80:CC:9E:E4:2B:6A:94:18:BB:F1
X509v3 Authority Key Identifier:
keyid:27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:55:23:3d:52:0f:95:79:ee:53:02:0c:1c:72:3a:df:8e:cd:
03:94:8b:b9:39:7f:e0:4c:5d:1e:47:13:cd:d3:fe:eb:5d:26:
71:09:06:56:57:1d:c2:2b:1d:e4:81:8b:06:af:e0:c0:ed:50:
ff:84:31:e4:b8:ca:1d:3f:ba:15:e3:ad:d9:5c:ad:c8:32:ef:
91:8f:bb:fe:55:b1:e9:a5:69:56:67:a9:8a:ef:b0:d3:fb:08:
c8:37:75:47:cc:7f:d6:2b:84:11:78:9d:c0:7a:0b:f1:8a:0c:
8f:58:84:61:2e:39:f8:02:e7:2f:99:f4:13:b7:67:c2:b6:34:
05:81:9c:fe:20:82:15:36:12:d7:7c:04:17:16:22:cf:60:3f:
2c:e7:78:c2:cf:27:1d:17:29:3e:40:08:e0:13:12:66:c3:6f:
f4:55:fd:5c:d2:ff:40:4c:cd:04:99:41:f3:08:b0:29:83:19:
64:0b:4d:25:12:2c:ed:b6:ca:b0:54:17:b4:ec:ca:19:c8:61:
7e:35:61:3e:e0:69:8d:a0:12:07:28:bd:25:2f:55:9c:f6:6c:
25:71:46:19:5b:c0:14:d0:42:37:1e:ad:a6:65:53:2e:da:27:
de:1e:1d:4e:65:5e:a5:14:0e:d9:32:04:af:87:14:f5:d2:eb:
14:3f:03:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:52:15 2025 by rpki-client