Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier: u0c0k91ciawu36E/Hb8akn/oHju1Qmhl2l7sPpDSAec=
Subject key identifier: B2:BC:A8:C8:8A:94:DB:BC:65:07:C5:6E:B3:28:AC:00:12:7A:E5:A9
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 01963FC25FA3C8F15B3B21672A9A8660534C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 18:00:24 +0000
Manifest this update: Wed 16 Apr 2025 18:00:24 +0000
Manifest next update: Thu 17 Apr 2025 18:00:24 +0000
Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: PBB636xTYEvHZSiq2yDmGfWH4pGXUNVEsuzwU4HqrDE=)
2: Kl_sSsnBSJGgCcK7zw2V9NmYKfk.roa (hash: KW6ns1JLYPOvHGE8JNv7Utb34UMVmmzeR921gIwdXX0=)
3: MlEemWyYy35iJO6wD7wsZ8DTDWg.roa (hash: Ph9JaIidCgAU3KXkR2aEKEUbBhF5IEXuxEbJMztoM20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:5f:a3:c8:f1:5b:3b:21:67:2a:9a:86:60:53:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Apr 16 18:00:24 2025 GMT
Not After : Apr 17 18:00:24 2025 GMT
Subject: CN=b2bca8c88a94dbbc6507c56eb328ac00127ae5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:8a:61:40:00:31:a4:cf:d0:f3:0e:c1:9c:
d3:4c:ec:0a:24:61:48:15:0f:4d:39:d3:98:9f:19:
3d:4b:7d:bc:2c:56:74:79:41:b6:9c:a6:d9:01:5e:
07:dc:6c:7c:26:6d:20:bb:f6:bf:ca:e5:a3:8c:ce:
4f:bc:2c:3c:c5:69:5d:31:1e:05:f5:49:9a:a7:ef:
51:a0:13:68:28:08:5b:78:39:ef:2d:64:71:ca:de:
79:b5:9f:2e:c9:f2:93:48:cd:a5:e3:3a:10:1d:66:
fb:e0:0a:db:7f:e4:fe:98:a4:33:e4:ab:6b:29:85:
fa:94:d5:a1:d3:e2:4a:b0:7c:81:fc:9e:96:bd:3c:
bf:1b:57:3c:02:54:fd:e6:ed:bf:2e:ff:b5:bd:b3:
cf:bb:03:be:e7:03:f1:4c:82:bf:8d:12:8b:69:70:
d5:50:86:88:02:3a:6d:14:6b:2b:7c:6b:68:ec:48:
75:a6:5d:d2:fb:26:57:cb:a0:a6:8a:29:61:8a:74:
74:01:89:a6:07:a4:5e:a5:db:db:f0:fb:2c:62:9c:
4d:38:40:b3:08:b0:9a:12:d3:41:39:2b:cc:4a:d0:
5a:ba:a2:0b:7b:d8:84:d5:fd:da:92:ac:53:bb:7b:
15:4b:43:9c:9a:2c:e4:77:b5:17:64:b1:21:34:c9:
40:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BC:A8:C8:8A:94:DB:BC:65:07:C5:6E:B3:28:AC:00:12:7A:E5:A9
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7e:de:0c:15:8b:43:0b:e1:3e:6a:5f:34:a5:76:93:97:da:
6d:64:20:26:72:f9:23:01:fd:35:bf:86:aa:ca:41:42:01:3d:
04:46:30:39:b0:aa:d3:ce:b4:f0:65:a8:04:2b:59:f2:bc:b8:
5b:3c:77:06:63:b5:65:ca:35:70:56:38:f7:9b:57:2c:b1:31:
43:0f:4a:e4:91:69:13:49:bb:7a:af:7d:1d:ad:4c:99:32:00:
45:76:8f:c9:8b:e0:1e:d7:fa:86:8f:99:d4:d7:57:59:64:74:
08:f6:1e:f4:eb:a7:4c:da:63:25:20:b2:a5:93:2e:47:01:11:
5a:a6:80:30:ff:ec:41:db:6a:17:dd:fe:de:ef:08:b3:d1:77:
86:4c:b8:29:ce:1a:d8:0a:c1:27:01:8b:90:53:c1:ac:2b:6f:
c3:d1:fc:2f:e3:8f:60:27:b3:70:d7:0a:9d:d1:d3:bd:cf:1b:
07:07:13:80:92:9a:e0:f4:56:1c:df:42:ea:91:b5:42:6e:43:
a2:ef:91:0a:b4:15:47:4f:1a:98:3f:fb:41:7f:0c:a2:af:03:
6b:31:e1:60:0c:93:74:2c:67:86:79:90:60:39:6d:d9:ac:aa:
c7:f6:d0:25:f4:e1:f2:1f:08:e0:79:4d:57:be:28:7a:b5:8b:
7b:5e:9f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:35 2025 by rpki-client