Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
File: J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json)
Hash identifier: kb9hGCyuLk4V40Kj+mRqSFdWya8PcGVjIIr5eb6DZZ8=
Subject key identifier: 47:3E:73:11:64:AC:8F:E8:75:13:01:91:51:7B:89:72:BD:22:44:D6
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial: 0196556E6C838CDFC7F1F0E3E693694FCBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 23:00:22 +0000
Manifest this update: Sun 20 Apr 2025 23:00:22 +0000
Manifest next update: Mon 21 Apr 2025 23:00:22 +0000
Files and hashes: 1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: NCtj8nEhL1x59dfhm4pxKs/oCWWTe9zRNbO4A0TSbIY=)
2: hwA0UWKL_slMireOaLXKWCZKMxk.roa (hash: Cs+6QJ4Ir+A+/zhLEyGmKYQ1SWGWIXNvlkhllKogGis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:6c:83:8c:df:c7:f1:f0:e3:e6:93:69:4f:cb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Validity
Not Before: Apr 20 23:00:22 2025 GMT
Not After : Apr 21 23:00:22 2025 GMT
Subject: CN=473e731164ac8fe875130191517b8972bd2244d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:f8:7e:16:1b:d7:2b:20:cf:da:8c:93:67:
44:20:3a:07:a0:f3:d8:83:bc:dd:cb:e6:fc:6d:1f:
14:ab:f6:29:16:84:c8:30:1f:f1:bd:8d:77:ba:13:
80:fe:e1:82:ae:1b:e5:65:70:7b:ca:1a:2f:4e:4d:
90:66:73:27:93:3b:1d:ac:b9:22:25:72:36:d0:16:
b2:b0:b9:4e:c7:d3:b4:41:89:64:46:46:9a:fb:09:
87:b4:c5:00:49:1a:11:82:e4:8d:e3:55:ec:b5:f9:
28:ae:31:1a:6c:8f:c0:26:f0:f2:67:99:0d:00:7d:
12:47:b4:67:31:7c:0c:63:bc:cd:0d:fc:75:83:27:
62:6e:17:f5:ab:aa:3c:55:e0:85:1a:b9:50:d4:1e:
95:3e:15:b7:e8:38:2b:6a:a3:6d:7c:53:7c:43:26:
92:93:96:e1:32:93:6a:90:a0:59:d9:f2:09:62:14:
e1:d7:ad:33:05:e3:ca:18:f4:7d:2a:6a:b2:b7:86:
01:80:97:57:a0:41:99:f5:0a:50:19:b6:23:85:39:
62:7a:25:1f:5f:ba:4c:09:6e:61:ff:51:91:7d:63:
88:da:ae:72:5b:bf:5f:a0:70:4c:6f:af:26:bc:33:
e1:af:e3:04:ca:17:fb:de:d2:ef:48:1a:56:14:e7:
78:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3E:73:11:64:AC:8F:E8:75:13:01:91:51:7B:89:72:BD:22:44:D6
X509v3 Authority Key Identifier:
keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ce:8f:0e:cc:7e:a8:c1:fa:07:c8:81:11:3c:0f:13:19:fb:
da:50:13:f3:94:3b:ea:72:61:f9:c9:58:e7:06:a2:3e:09:19:
c7:be:47:ef:2c:f9:2a:a2:28:98:ef:ea:4a:1f:eb:8e:db:3f:
5a:ff:2b:82:1b:fc:40:e0:7b:81:c1:7c:ee:39:0e:c6:44:33:
e3:cb:03:18:4a:b5:bb:7e:73:f8:cf:ee:7e:97:aa:cb:48:e7:
34:e1:5e:05:e4:6d:6e:18:24:84:67:fe:20:ca:52:e6:53:50:
26:75:f5:69:da:96:56:f2:bd:7d:31:68:0e:84:dc:ee:7c:1f:
77:cf:5d:1f:59:80:ec:3f:7a:e8:80:98:a1:34:f7:6c:96:bd:
87:57:2d:4b:4d:47:ea:38:41:68:86:8e:41:41:8a:fd:51:47:
03:1f:0b:df:3a:8e:2e:96:ce:9d:6e:71:d3:7d:f4:ae:1b:a1:
b0:e1:51:37:8e:07:dc:49:8b:6c:72:1a:04:a8:1d:db:05:fa:
20:3e:11:f1:70:ff:02:76:57:07:31:d8:74:bd:70:96:8a:5b:
20:b0:e2:5a:99:7a:ce:64:ab:8e:bf:58:7c:48:19:6d:df:d5:
a8:2b:d8:67:b4:35:8a:a1:49:37:8a:4d:b6:6f:c1:f1:81:b4:
b7:b5:eb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:30:58 2025 by rpki-client