Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: idUSyZnZoHtORLNPr/GoZQzIw6u+V+nhZnPogZlT8So=
Subject key identifier: 8C:85:E8:2D:12:D0:47:BE:87:B5:B7:D5:43:BD:46:99:B0:CC:93:E5
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 019610FC0742A15DAF94B7F28EAFAC6526E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 0D08
Signing time: Mon 07 Apr 2025 16:01:14 +0000
Manifest this update: Mon 07 Apr 2025 16:01:14 +0000
Manifest next update: Tue 08 Apr 2025 16:01:14 +0000
Files and hashes: 1: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: URtyaCZ2j6sw2sdqWvYl/LpNwCK+h6nyxxvKV5/EnyU=)
2: U98Pywp0SW8RSqZF3Ge6Si9krK0.roa (hash: O0xR8BO72Q1293Dodh+ahx0zgwd8SQ9b7GDuhK6uN4w=)
3: fonqMENkUurdTSsmls1gVlg_WJ4.roa (hash: BkPWWaoPqGMFHcArMOr28SMuQJKUdO9RrrY9l2uEtM4=)
4: hRMqKbI5ZBKlaiDQw_wO9nw88a0.roa (hash: tQTOlSI2XH6rsXW1nhJPPPkXPxhSWEfkvDRnTJEB2Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fc:07:42:a1:5d:af:94:b7:f2:8e:af:ac:65:26:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Apr 7 16:01:14 2025 GMT
Not After : Apr 8 16:01:14 2025 GMT
Subject: CN=8c85e82d12d047be87b5b7d543bd4699b0cc93e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:fd:a8:8f:0a:3a:45:57:d0:48:0d:e7:af:
30:c0:48:f8:58:08:f8:ac:07:f0:aa:36:f4:ba:aa:
da:b4:41:a6:d4:15:18:e0:43:18:03:fd:fe:de:87:
e6:e0:c5:c1:36:c9:1a:37:ac:a1:60:35:2a:6c:f8:
9b:3d:13:24:44:fc:ae:c0:0b:b2:b8:6a:45:71:b8:
11:42:91:c0:ab:4c:e1:24:8b:7f:10:ff:b0:f7:14:
5b:8d:b8:ee:53:50:a7:72:7e:64:24:56:3d:24:52:
e7:64:1e:1a:29:d3:21:98:34:a8:13:bf:9c:f7:32:
af:0d:d6:44:18:9f:dc:c8:0f:98:ce:98:3b:e8:53:
71:b8:18:bd:52:53:4d:34:a9:39:48:0a:aa:30:ec:
31:31:96:55:1b:6e:77:38:1b:36:4c:d3:b5:67:42:
cc:53:0a:a2:f2:5d:b2:d2:b5:a5:36:3b:f4:a8:6e:
a4:24:04:10:d2:57:97:43:17:2a:3f:77:a0:d5:62:
30:08:06:93:7f:cc:44:67:cb:88:9c:45:f2:05:db:
df:f8:30:14:e5:4d:02:6d:c7:b4:b0:97:b6:36:50:
53:a2:ee:bf:07:88:15:e6:40:2e:a5:c3:10:a4:8d:
95:5e:29:9d:14:17:11:bc:3f:6b:1f:d9:63:a4:0b:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:85:E8:2D:12:D0:47:BE:87:B5:B7:D5:43:BD:46:99:B0:CC:93:E5
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:58:bb:e4:91:cd:9a:be:21:6c:20:93:0a:43:1c:74:65:ad:
7d:f9:fa:67:86:00:66:7b:b5:0e:a7:6d:ac:7f:21:dd:33:7e:
8b:52:ca:47:fd:ea:69:cc:e0:ba:4c:1a:41:f2:a6:5f:83:bd:
63:56:70:ec:3b:97:4c:b7:d9:3a:87:cd:ee:dd:04:2e:73:f8:
5c:c6:b6:4e:43:f3:56:75:53:8f:f3:eb:ac:5f:ce:4e:4e:51:
7e:6f:50:17:04:89:44:ae:c3:53:0c:ed:96:0f:a4:b4:d9:70:
65:e3:a5:fa:55:39:ae:6d:4e:9d:42:eb:b0:5c:1b:32:4a:2a:
64:1b:cd:1c:1a:7f:8e:0b:75:f9:d7:c7:81:b9:59:6d:18:51:
e6:89:99:ca:c4:57:0b:57:39:a6:74:55:84:a4:4f:99:1d:ae:
f0:18:46:d6:12:d6:8e:af:a9:00:74:24:7e:92:8e:3d:88:af:
69:fb:ec:1d:5a:be:85:eb:75:49:c4:9c:a5:cc:f4:28:9b:01:
e8:8c:51:7f:c5:94:cd:29:be:ef:cd:c9:d0:d3:fa:4e:b8:5f:
2d:df:a3:4b:35:0a:5b:ff:c9:a9:da:d4:47:45:f6:71:3f:c2:
04:1b:3e:56:d8:33:93:f8:60:ae:6b:a8:4f:3f:ce:d5:d6:23:
7e:69:26:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:01 2025 by rpki-client