Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
File: J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json)
Hash identifier: tvofWfq8VVPpPdKt+c+B9/9g2yhIBDGc8awX7T6KOzg=
Subject key identifier: 3B:75:17:AF:AA:48:C1:A3:C7:5B:83:D3:00:14:D5:50:EB:95:74:79
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 019602D2DF59BE903198BA2B87B29A70365B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
Manifest number: 0A27
Signing time: Fri 04 Apr 2025 22:01:36 +0000
Manifest this update: Fri 04 Apr 2025 22:01:36 +0000
Manifest next update: Sat 05 Apr 2025 22:01:36 +0000
Files and hashes: 1: 69H9nuaYzzRi_7MRSIl6AwfMEZ8.roa (hash: AKZV5AcjjaPBsRFuJ1owk+1YCbQLVZHHRJVdcXrDf9Q=)
2: Eqz6HqbOHRxUsIdz-CIFT589G8w.roa (hash: NYwF+vNi32nyXeOdW5n0mZaZ/W25jWq6A2FW0FtVszo=)
3: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: NtUML9jmdNMvXdBGxPIRzR8tXeF0pBXJtRT1un8U79o=)
4: QMgP50QUErIVfe6bHrHbEcBqS0o.roa (hash: SzUA4iffOvayoUI6Lybdi08Ue69lvJ7eeJxQaa9p+NY=)
5: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (hash: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=)
6: Tw_Tm39J15PuLnPwr2dqvdn-Dh4.roa (hash: a0LH5SVtRHj2tzuff6IHJP/0pDujnltOOGwLPXcyclc=)
7: nyvqaUD_bRXDtH3c7OYTpjxlOys.roa (hash: k9drrNKH0GhQKJ9+kAcGLCk8vj6djrK//GR8rC7ngYk=)
8: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (hash: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=)
9: xduoMOkUXzQ7Kdoh4zDKE9taGqM.roa (hash: v6JdlRVd2u7tIbRYZCLJ9Bn+UkQd4MO8kZwoWQAa+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:d2:df:59:be:90:31:98:ba:2b:87:b2:9a:70:36:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Apr 4 22:01:36 2025 GMT
Not After : Apr 5 22:01:36 2025 GMT
Subject: CN=3b7517afaa48c1a3c75b83d30014d550eb957479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:24:ea:b6:af:a3:af:fe:e3:b0:fe:e0:a2:
16:b6:d3:75:ec:72:e0:1a:da:e3:52:93:c8:12:69:
f7:13:96:ac:12:84:de:3a:ab:b2:64:86:07:a3:0d:
78:9d:c3:15:97:34:97:28:2d:61:31:80:60:71:86:
9f:4a:80:1e:a6:61:3e:33:68:b0:b1:8a:bd:f1:0e:
3b:a5:31:2e:4c:cc:78:7d:d4:24:bf:5f:b7:80:0e:
07:fa:17:5b:8f:61:6f:da:eb:9d:66:7e:7d:6d:61:
9c:f3:c5:5b:10:69:8d:d4:e4:ac:cc:b0:38:4d:3a:
69:f8:4b:1b:9a:05:6a:32:d3:33:e5:b8:ae:60:1b:
db:db:ff:f9:63:24:27:5c:d6:c5:01:6f:e4:f5:fc:
5d:f3:63:18:61:81:fc:24:b6:b5:9d:7f:86:f8:fb:
14:e9:7b:15:d5:ad:37:fb:e1:c3:58:2f:c8:42:16:
54:e8:12:f4:73:f6:b5:b6:79:21:45:9d:01:16:da:
7d:3e:7b:54:75:bf:92:9e:8c:b7:81:08:94:f0:e8:
e2:5c:eb:5f:86:9e:ea:35:24:fc:69:f1:15:f8:fa:
07:a1:d9:df:1b:3c:f7:e9:cf:cc:76:66:55:c6:95:
05:89:4f:ef:75:cd:6c:6b:90:81:68:09:ab:45:cb:
b4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:75:17:AF:AA:48:C1:A3:C7:5B:83:D3:00:14:D5:50:EB:95:74:79
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:81:15:18:13:27:ae:ac:83:af:cf:f2:cc:ca:45:0b:d7:e4:
d8:e6:53:31:b5:dd:54:79:9a:c2:1a:bc:9a:7c:90:1b:ce:45:
9f:9d:4e:c2:02:d2:9a:60:88:78:37:c7:31:10:3c:de:ca:d9:
cb:9b:86:54:cc:0c:43:40:d5:fd:48:7d:42:10:e5:21:28:c6:
d1:ce:9a:e9:84:e9:2a:b9:ae:d4:20:61:d8:68:84:95:0b:e4:
d5:2f:9a:e6:bb:83:ee:36:72:68:81:ce:d0:a8:93:7b:c2:ae:
22:dd:a2:ea:47:d4:0c:7f:73:7a:7e:aa:2a:e6:ba:b0:62:3a:
53:25:17:f9:26:11:28:b8:1d:21:2b:fc:42:a7:d9:ff:4b:06:
d8:3e:c3:fb:78:15:05:3d:8b:b2:94:ca:2d:11:3e:4c:b4:65:
be:dd:bf:f8:5a:17:44:c9:37:1e:8a:ba:97:db:26:d6:0f:4e:
46:92:34:8c:ef:72:9c:1f:9c:77:cf:70:56:0d:a0:f3:0c:95:
14:a0:2c:2d:81:3d:9a:46:86:fa:67:e4:69:c6:1c:4f:b7:1d:
36:5f:2a:c1:e5:68:73:c8:86:6d:b5:a2:b1:0b:f4:f5:15:9d:
89:34:e3:78:89:fd:8a:07:70:d7:96:fb:37:5c:fa:59:17:98:
2f:10:85:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:12 2025 by rpki-client