Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File: J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier: 2JFm5uTSnhgoqFUms/AtbxeTzcOqJ542g6jutRfbJ8E=
Subject key identifier: 1B:78:BF:A3:86:E8:3B:89:3A:4C:77:37:76:56:84:81:B7:B2:B0:59
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 0196458D7E286BCBF5C885E23EF2C047BBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number: 0A1E
Signing time: Thu 17 Apr 2025 21:00:22 +0000
Manifest this update: Thu 17 Apr 2025 21:00:22 +0000
Manifest next update: Fri 18 Apr 2025 21:00:22 +0000
Files and hashes: 1: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (hash: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=)
2: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: zQrmj4yCijSrKoJs3LdqH6NJrcZ2UxdIjV5CUHB2XNc=)
3: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (hash: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:7e:28:6b:cb:f5:c8:85:e2:3e:f2:c0:47:bb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Apr 17 21:00:22 2025 GMT
Not After : Apr 18 21:00:22 2025 GMT
Subject: CN=1b78bfa386e83b893a4c773776568481b7b2b059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:90:f9:17:8a:dc:85:be:62:69:d8:93:19:
04:f1:32:c0:04:0b:d6:c6:f9:1a:f5:c1:6c:af:54:
f6:7f:07:a1:c0:e4:c2:9e:5a:da:69:5e:b0:e8:40:
bd:e0:17:68:22:55:e1:52:d1:39:be:12:b4:d3:0c:
c0:be:4e:9c:01:a1:15:72:59:15:0b:a0:30:d2:4d:
dd:41:75:c2:59:ca:64:5d:15:1f:cd:c8:8c:66:a6:
97:18:4f:5e:be:19:27:0c:87:81:17:ad:2f:7a:de:
38:37:ff:fd:74:c0:6c:f4:40:20:44:7f:1a:d5:58:
4b:48:2c:bf:d2:b9:e6:4f:c2:04:ca:ad:e7:1c:3f:
d7:65:16:2e:52:a2:80:40:de:f7:31:65:01:14:9f:
ce:3d:b2:b4:3d:7a:13:a4:30:36:b3:ed:49:1f:21:
cc:47:c7:57:4e:07:54:17:8f:1a:c3:e6:b8:cc:4f:
97:54:eb:85:69:da:11:c3:14:35:43:9c:74:df:fb:
3c:7a:e3:aa:c6:52:d9:47:e3:43:8e:ff:69:f4:7f:
d7:c6:75:01:f6:76:1c:2e:78:68:c9:67:09:08:08:
dc:1c:91:03:ec:6a:1c:14:76:94:68:2d:a4:e5:f2:
bd:1a:f4:9e:8c:df:0a:b7:b5:a4:ea:3a:51:ef:5e:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:78:BF:A3:86:E8:3B:89:3A:4C:77:37:76:56:84:81:B7:B2:B0:59
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:aa:ba:15:e2:05:bf:98:60:e1:1f:1d:61:fa:de:0c:62:fc:
fc:c8:ad:65:c8:6e:74:05:a2:7e:18:79:53:74:ec:75:71:6c:
10:43:da:f7:fb:e6:91:d7:05:c8:27:7e:9a:9b:07:be:cd:b6:
c4:54:0a:55:ff:23:4a:40:59:1a:c7:a4:bd:f3:35:ea:4f:f2:
98:7f:81:11:fd:1a:13:23:6b:ba:b1:32:f9:a1:ab:ba:03:ce:
e0:31:ca:c2:85:79:8d:1c:8b:e8:5e:65:47:96:0a:3f:e4:d5:
90:dc:ce:aa:f5:6c:24:88:b5:5e:21:78:7e:dd:05:65:f1:be:
6a:01:d0:2e:83:44:db:62:d9:5d:fa:13:62:13:9d:f2:e7:cc:
23:59:3e:e6:bd:f7:37:7b:86:09:69:99:92:4e:03:ee:25:b5:
19:9e:52:b1:79:ac:28:c0:3b:03:28:07:e2:59:7d:af:50:50:
e6:c5:79:e6:08:ab:0b:1c:27:38:43:ff:bf:52:54:b3:9a:72:
56:86:62:3d:38:90:27:55:e7:7f:5d:9f:6a:37:8c:0c:b3:f2:
27:fc:f2:89:a9:5e:c2:85:41:e1:92:0f:8b:e7:f0:54:e8:7c:
26:d2:dc:4e:57:02:ae:c4:41:8c:81:6e:79:aa:94:15:c5:3b:
7c:07:f3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:28 2025 by rpki-client