Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft
File: J_g-VravdgCD61S7W24Z3bQd2Io.mft (raw, json)
Hash identifier: yQMbtyAVrFsLLCqSMwGcQEregqD1hNKeNqxDtHRpxZo=
Subject key identifier: C3:18:18:6C:11:AA:BE:0E:DE:81:D2:3E:D9:AA:04:12:BD:01:27:6D
Authority key identifier: 27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A
Certificate issuer: /CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
Certificate serial: 0196550099D47384963EEC7E72977AA3E451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft
Manifest number: 114F
Signing time: Sun 20 Apr 2025 21:00:24 +0000
Manifest this update: Sun 20 Apr 2025 21:00:24 +0000
Manifest next update: Mon 21 Apr 2025 21:00:24 +0000
Files and hashes: 1: J_g-VravdgCD61S7W24Z3bQd2Io.crl (hash: XN+n3J7X6TET+KCG4Z3otYwjqMGSzEUTrYN80DiO9JU=)
2: tqiyhAwG9vZGTuCBcB3Ep8Bsk0k.roa (hash: ViHxSsFsnpASXarlQUAHnVHJN7UM7cJ/sEWxYKdVpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:99:d4:73:84:96:3e:ec:7e:72:97:7a:a3:e4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
Validity
Not Before: Apr 20 21:00:24 2025 GMT
Not After : Apr 21 21:00:24 2025 GMT
Subject: CN=c318186c11aabe0ede81d23ed9aa0412bd01276d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:7b:a8:03:47:1c:b3:4d:38:87:ee:6b:8b:
a8:0c:6b:70:a9:a0:d6:de:1a:3b:5e:fa:a0:34:ee:
f4:17:35:99:c2:79:37:c7:70:95:f5:ad:2a:53:1c:
1b:b6:ce:de:ea:cc:ee:e0:b7:ed:d9:05:a1:5f:e3:
4d:00:8e:e8:70:f0:d1:7b:36:19:84:d1:33:f1:f2:
6c:05:4d:3e:0d:99:1a:52:3a:e4:5f:8e:d0:8b:2f:
c5:f1:5e:c9:19:b0:80:3f:fa:02:c1:85:3e:08:d1:
bb:61:69:36:6d:e7:30:91:43:92:37:7e:da:37:91:
ed:e3:90:a8:77:0b:57:bf:6b:bb:78:f3:97:72:93:
a0:2f:96:21:9d:e5:bf:30:18:c3:cd:3b:67:94:4f:
09:ee:3e:0c:aa:6a:ac:e0:14:33:05:89:b4:9c:12:
aa:d8:06:ea:42:98:73:b7:8c:1d:38:ff:8d:b9:79:
0e:81:66:30:33:c7:d4:50:88:41:4e:70:1d:17:fe:
e3:62:9f:76:f6:40:0f:a2:c1:80:4c:bd:ae:cc:84:
92:4d:34:a2:c8:a2:27:fa:82:b4:7d:29:53:64:98:
92:43:70:70:88:ad:b6:50:70:bc:64:29:b7:f0:f1:
27:4e:a9:df:68:b9:1c:b8:5a:95:9b:0e:0f:d6:10:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:18:18:6C:11:AA:BE:0E:DE:81:D2:3E:D9:AA:04:12:BD:01:27:6D
X509v3 Authority Key Identifier:
keyid:27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6b:e6:98:71:26:a9:9c:9f:b5:bb:97:12:b0:2a:35:47:a0:
57:3b:4c:12:1f:d4:a9:1a:ff:29:62:dc:c5:3e:29:d6:20:c2:
9e:a7:74:41:e3:db:53:bb:b4:e5:71:53:07:d8:07:72:08:8d:
bd:76:c0:ec:ab:33:91:ae:76:c1:3b:8f:0e:b2:c3:cc:a6:d1:
63:51:29:11:ca:8f:64:21:52:d2:09:0e:94:fc:9f:bc:f6:e1:
23:35:ef:b1:08:9f:bd:70:90:81:f7:0d:1c:b0:a5:13:7a:1d:
38:3e:9c:34:37:21:bf:d1:8b:2c:5e:f8:cd:aa:1a:ba:f3:d2:
f1:1e:63:37:70:e2:b5:12:65:33:b4:47:18:86:53:c8:55:b8:
4e:67:09:e7:de:85:08:94:17:d4:1b:e1:b1:8a:46:74:a1:dd:
a2:e1:29:84:b2:be:77:d6:ed:ae:d2:63:f6:b5:a7:85:10:dc:
24:07:7a:ef:0e:b9:8a:1e:da:be:be:76:ea:30:14:be:14:92:
e9:c5:41:cb:3f:d2:34:26:cd:67:fb:d9:ce:f7:42:99:10:91:
2d:4f:0f:01:85:95:53:42:5e:81:c7:9d:b2:78:f5:7b:57:0a:
67:65:54:30:3a:d1:b0:fa:13:3c:bb:66:97:25:00:2d:a2:9c:
8b:10:3a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:45 2025 by rpki-client