
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
File: J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json)
Hash identifier: BhquEQKjEbE3vM/hxZUCYa/Jtp+ZjyOuCkJhtWVMKlw=
Subject key identifier: CA:C4:2D:4F:5A:9B:F7:8C:2C:8D:29:CC:31:C5:74:7C:E3:75:00:D4
Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
Certificate issuer: /CN=277b3683307c6fcc32bed177232f1d474541fbae
Certificate serial: 0197402DD3FC56070679F6348F9BFB6CFA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
Manifest number: 1146
Signing time: Thu 05 Jun 2025 13:00:34 +0000
Manifest this update: Thu 05 Jun 2025 13:00:34 +0000
Manifest next update: Fri 06 Jun 2025 13:00:34 +0000
Files and hashes: 1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: QumeAK9ekvEzkGs0lM5klCWPJMmOwh+morNO6DHIoes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:2d:d3:fc:56:07:06:79:f6:34:8f:9b:fb:6c:fa:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae
Validity
Not Before: Jun 5 13:00:34 2025 GMT
Not After : Jun 6 13:00:34 2025 GMT
Subject: CN=cac42d4f5a9bf78c2c8d29cc31c5747ce37500d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:b0:e9:c0:09:fa:f2:b3:15:33:5e:5b:62:
5c:de:a3:e8:8f:4b:c5:6d:89:d2:84:83:1d:74:a2:
80:f6:dc:7d:de:7d:da:2c:9f:42:79:d3:d6:4a:38:
1f:5a:ea:42:2a:29:d6:94:a0:fa:ee:03:70:54:70:
99:13:20:82:87:27:24:45:02:0f:68:20:b0:04:e4:
43:0f:48:50:07:d4:01:7c:c0:f2:97:97:ac:3a:0a:
6e:6f:a0:1e:30:9d:e5:17:bd:04:73:85:f2:1c:44:
95:5f:96:1f:96:e3:43:2c:46:93:85:be:ea:a2:6b:
a2:d6:dd:30:da:df:36:c6:30:aa:fc:32:04:e5:7c:
46:75:8e:96:9b:26:61:d4:ff:08:0c:4c:c8:d2:2a:
d8:8d:ca:37:97:b2:1f:1c:8f:ab:d7:84:91:9a:4c:
64:0c:c4:c3:0b:78:ca:01:31:e4:bf:b0:b6:8b:5c:
25:ca:3c:c2:92:2a:0f:99:6d:e5:97:51:af:c7:26:
c4:aa:f8:e1:e5:a4:fc:ba:20:59:8a:da:15:c9:36:
5d:a5:7a:6e:72:97:66:cf:ff:27:0b:cc:1f:5f:a7:
4d:5e:43:cb:b9:51:c3:94:38:48:c9:76:c8:2e:6e:
76:5b:7c:72:b4:4b:7c:a5:16:4d:e9:ef:73:a1:91:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C4:2D:4F:5A:9B:F7:8C:2C:8D:29:CC:31:C5:74:7C:E3:75:00:D4
X509v3 Authority Key Identifier:
keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d4:80:d0:e9:37:a3:65:c5:2b:ac:22:95:5a:e6:7d:24:fb:
c4:52:c9:ef:c4:8c:0e:c5:79:82:1e:70:b1:35:24:f3:52:32:
b3:6b:ed:c9:4d:ed:58:db:89:43:94:c1:cc:91:53:e0:f2:16:
24:8c:6b:a3:58:22:a5:e4:4b:12:13:27:0d:82:8c:d1:af:da:
b1:5c:00:66:f0:e3:ec:cd:f8:03:89:96:d0:f5:ee:8e:61:cc:
23:0f:b1:c5:bb:b5:d1:21:3f:b5:af:ba:73:75:05:94:94:ea:
bd:94:88:73:f4:00:53:9d:8f:04:97:b0:49:82:a7:97:9d:a3:
6d:60:d2:4c:8e:a0:c8:45:06:b6:a8:aa:67:86:f3:62:e5:63:
c8:28:55:19:98:5e:19:b4:75:4b:0e:fc:ca:15:c0:66:2a:3a:
7e:92:57:93:fa:b2:ac:8e:69:e4:00:8e:bc:bf:a7:7b:e8:74:
c9:6f:76:cd:0c:a9:00:8f:78:37:03:83:97:03:f5:42:62:33:
72:38:06:c5:c9:39:6c:66:de:72:78:57:8e:4c:a6:cd:03:1c:
30:d9:c5:6a:2d:32:eb:3f:6f:69:de:09:4b:34:23:6c:8a:de:
29:67:c3:32:cb:7e:93:e0:ff:b4:bd:31:18:f9:08:f6:f5:3b:
07:9c:cb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:19:05 2025 by rpki-client