Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
File: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json)
Hash identifier: 5tG4K7QmD+zn73plVYQ1qO9OSkQEvFMxWLJxPTDI/Os=
Subject key identifier: E9:00:C4:E0:C6:9F:B4:B1:19:D7:6E:93:81:28:0F:92:11:15:8C:54
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 01962AF2C311342012D0B1216CB6AE03FC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
Manifest number: 14FD
Signing time: Sat 12 Apr 2025 17:01:14 +0000
Manifest this update: Sat 12 Apr 2025 17:01:14 +0000
Manifest next update: Sun 13 Apr 2025 17:01:14 +0000
Files and hashes: 1: 64rEanXhDA2OJWgNqMgPZ5FM7ec.roa (hash: 8qJk7sdPmgd5qyBKhZltol3z/GSxNSlFaZ8AUoHL904=)
2: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: qWgZwwIp74lt0Hx34S74uHV3Re3xmGO6RpsYpW/yVAE=)
3: J_FW6C53GNA1eZgfBxqmfj1GnHk.roa (hash: 2FVTaWaI6Pa7rkvw9aYDp7sxlvCorspj3xme17atTXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:f2:c3:11:34:20:12:d0:b1:21:6c:b6:ae:03:fc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Apr 12 17:01:14 2025 GMT
Not After : Apr 13 17:01:14 2025 GMT
Subject: CN=e900c4e0c69fb4b119d76e9381280f9211158c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5e:2c:2a:02:91:8c:bc:eb:a9:2e:9e:38:f3:
fd:e8:7e:e4:44:5c:17:3d:c7:e8:4e:e2:93:8b:4c:
c6:79:84:d7:19:d6:53:79:63:39:db:04:3e:97:ce:
85:a0:93:b4:e8:2d:10:e4:f6:70:80:bc:39:fa:a1:
df:f3:36:c1:22:29:eb:9e:3f:e9:72:00:a2:70:6a:
41:4d:69:16:cc:5c:fb:8f:a5:8d:e2:2b:45:4e:c3:
4b:88:36:22:cf:e1:16:03:47:40:e9:84:5c:ec:1e:
e7:e0:b7:32:e2:09:6c:ca:2a:f6:63:27:84:da:eb:
f6:69:91:08:17:83:05:3d:be:a7:8a:93:4a:71:aa:
ee:f2:41:eb:8d:8e:07:00:68:c1:07:de:4f:e4:55:
eb:72:8d:7c:af:15:c6:23:eb:c1:bd:12:8c:d6:25:
4c:15:eb:20:87:1b:ed:57:4c:0c:85:9f:3f:0e:51:
79:fd:a5:9d:c6:8f:57:a8:74:08:03:8f:dd:bd:74:
79:b8:27:e6:68:a2:8b:2f:65:f7:c2:08:c8:0d:91:
b3:57:9e:7f:0b:b3:12:d8:b3:c4:fd:8c:9b:48:6f:
c7:45:d2:71:12:56:4b:1a:21:44:2a:a2:c1:cb:1c:
f2:5e:b9:36:5a:a6:20:fd:b7:a4:8a:3c:9a:ad:23:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:C4:E0:C6:9F:B4:B1:19:D7:6E:93:81:28:0F:92:11:15:8C:54
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e6:cd:ce:17:94:1b:2c:04:87:af:65:18:1f:f3:70:2b:41:
f7:44:4c:b7:50:82:0e:49:0c:91:21:d6:da:d2:8b:7f:8b:22:
5c:52:05:a5:c8:bf:41:c6:7e:9b:8c:5b:d1:25:b7:9c:49:21:
65:67:9a:cc:8e:31:bd:18:50:72:2c:9d:2b:b8:b9:ee:29:d9:
fb:a8:4c:e4:6b:07:00:23:f7:79:aa:b5:68:77:fd:67:c0:82:
26:a6:ad:3b:ac:7b:71:fa:29:d9:3b:16:1c:50:f0:80:ae:7f:
3c:de:a9:81:83:0c:90:15:69:3e:b1:13:f7:72:3d:39:be:96:
d3:39:30:f2:35:a6:25:e5:19:22:40:2d:8e:16:c8:63:ff:2b:
23:9c:bb:bd:29:db:b4:99:43:21:9d:80:f4:ab:8e:7e:45:78:
24:23:d1:b4:0e:65:79:26:71:d3:70:75:42:35:c5:66:0b:87:
cf:b3:80:fd:81:62:8f:af:14:f6:52:33:aa:ae:38:4a:14:7d:
36:43:fc:35:bd:07:7d:dc:e3:99:92:58:f3:d4:8d:b9:62:aa:
48:80:17:07:27:6e:95:33:b2:99:21:74:44:b3:a5:94:aa:49:
3b:e1:b3:48:48:84:1a:54:c1:94:e0:38:a5:b7:70:7e:93:0a:
9f:68:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:07:30 2025 by rpki-client