Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
File: J49i86X4RyKFL8cPBSzxPeojdNA.mft (raw, json)
Hash identifier: YkhVBTrSgNKm9oqFyOn3FBkFRxUl05nX5pSUCAdYebE=
Subject key identifier: 60:AD:D7:49:3D:D6:6A:12:5A:24:06:74:89:00:BD:74:19:AE:C9:4C
Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
Certificate issuer: /CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Certificate serial: 019654C9E7D313F94C14E62622F6EC491E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
Manifest number: 07DE
Signing time: Sun 20 Apr 2025 20:00:40 +0000
Manifest this update: Sun 20 Apr 2025 20:00:40 +0000
Manifest next update: Mon 21 Apr 2025 20:00:40 +0000
Files and hashes: 1: B0B4Y6WmKTSsGtgiy_GaSYzTEw4.roa (hash: fz9V9BUWuOk2Mh3Jcg5jFOYmVDkKnHhcxn1Jkrdsy98=)
2: J49i86X4RyKFL8cPBSzxPeojdNA.crl (hash: z6TMO08fcLOu2L2UE0iIrZuzWfHNYQ/x82DRPMqO/+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:e7:d3:13:f9:4c:14:e6:26:22:f6:ec:49:1e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Validity
Not Before: Apr 20 20:00:40 2025 GMT
Not After : Apr 21 20:00:40 2025 GMT
Subject: CN=60add7493dd66a125a2406748900bd7419aec94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:a9:d9:78:48:42:b3:f8:29:4d:12:68:02:
8a:8d:eb:9f:99:36:45:27:81:ac:69:e8:b5:08:71:
f9:b3:ef:84:a4:f9:7f:19:4f:29:30:ce:fa:29:af:
cc:6c:5c:c3:9e:5e:59:81:ea:e5:79:6a:b8:64:0c:
89:b3:3a:df:ee:f1:17:0b:4d:32:48:91:d1:17:f0:
40:c4:c1:6b:02:04:cc:d3:db:2d:c3:e0:aa:13:d5:
b9:6c:44:e0:56:ca:78:50:84:ce:5e:bd:c6:ba:3d:
95:57:47:47:20:64:9e:16:3c:b1:38:cc:22:8e:8d:
8d:af:22:d1:05:72:c8:67:c9:5e:61:00:df:59:50:
76:df:52:36:d9:0e:59:e3:a4:17:f2:9e:fb:1c:c2:
d5:9e:40:70:f4:90:fa:b7:ff:e7:ac:d1:78:8b:4a:
ec:c9:6b:74:61:e7:f4:e8:81:8f:92:15:66:f2:9b:
f6:49:7d:00:08:e0:37:8f:d2:dd:ea:d1:f8:74:37:
80:03:8f:44:61:3c:25:dd:93:26:0a:98:fc:f9:fa:
34:bb:fd:6d:54:18:c2:33:e4:be:43:34:ce:f8:eb:
93:f2:c0:2e:46:6e:5e:bf:47:5f:57:17:b5:a7:30:
3f:aa:ba:7f:61:29:b9:a2:af:07:4d:4d:16:a2:63:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AD:D7:49:3D:D6:6A:12:5A:24:06:74:89:00:BD:74:19:AE:C9:4C
X509v3 Authority Key Identifier:
keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:17:59:9d:ab:3e:b4:d6:b8:49:f2:e5:e3:ef:16:eb:43:a8:
55:9a:e5:d1:7b:02:62:84:54:e1:7c:b2:88:28:88:b7:23:80:
49:a8:51:10:01:fc:fd:64:f8:40:4b:44:75:9b:14:a2:47:c1:
7e:8e:77:19:45:e0:03:ef:5a:83:af:a9:a8:15:7e:93:28:de:
3c:22:34:fa:67:78:ec:b6:9f:82:cb:14:ea:b6:a6:0a:b8:f1:
e5:76:2d:ce:f2:cf:64:59:7f:4e:f4:0c:e7:5d:66:2d:e8:7f:
8b:89:a3:c2:0b:70:7d:f3:4a:4a:c0:b2:4e:c2:1b:47:68:bb:
30:6f:65:c4:ec:a9:a5:87:7f:ea:f4:ed:b5:e7:6f:b8:28:de:
8a:6e:df:0b:9e:9f:18:85:f5:06:87:b5:ce:87:bc:5c:35:34:
6e:40:ac:45:b3:e7:50:7d:29:89:9f:c4:dd:cf:70:41:96:e8:
e6:e7:49:e1:1e:6b:33:57:28:2e:6c:15:21:4e:9c:a0:b6:7c:
70:60:09:d4:2e:fa:9b:6d:f4:ca:c5:4d:45:a5:d4:23:82:f5:
a0:6b:39:6a:f6:6d:55:46:fa:4e:6d:d1:c7:6a:df:09:d6:96:
f9:2c:63:5e:8b:bd:95:41:d8:f0:af:47:0d:b6:5c:64:2b:c0:
78:97:4e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:09:09 2025 by rpki-client