Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.mft
File: J6TlqssSnqUHOCsj25fKQgBwTWk.mft (raw, json)
Hash identifier: chU75LYZ7MuZkXyK2/v1UHIrWatHTFe+IHjRQQq0qjs=
Subject key identifier: 67:C1:7E:1C:7E:42:40:CA:CA:A2:94:57:8F:FC:49:B5:06:34:3C:23
Authority key identifier: 27:A4:E5:AA:CB:12:9E:A5:07:38:2B:23:DB:97:CA:42:00:70:4D:69
Certificate issuer: /CN=27a4e5aacb129ea507382b23db97ca4200704d69
Certificate serial: 019651C8E48E040913FF8FCCE14A55E314B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6TlqssSnqUHOCsj25fKQgBwTWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 06:00:42 +0000
Manifest this update: Sun 20 Apr 2025 06:00:42 +0000
Manifest next update: Mon 21 Apr 2025 06:00:42 +0000
Files and hashes: 1: J6TlqssSnqUHOCsj25fKQgBwTWk.crl (hash: ZRTC7k+UtP5kE4PGaYivUR9Z3CVj09wQWKl+2toWQqU=)
2: bzVsLijY3-nRPNP3h4rxl64PXKk.roa (hash: riS0R0mOdaXJPo4gzgYg5KC9rMRZjBjAip5TXiNX86Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6TlqssSnqUHOCsj25fKQgBwTWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:e4:8e:04:09:13:ff:8f:cc:e1:4a:55:e3:14:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a4e5aacb129ea507382b23db97ca4200704d69
Validity
Not Before: Apr 20 06:00:42 2025 GMT
Not After : Apr 21 06:00:42 2025 GMT
Subject: CN=67c17e1c7e4240cacaa294578ffc49b506343c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:c5:1b:a7:8c:36:85:f3:17:c8:05:91:8d:
75:51:4c:e4:9d:30:83:24:b5:86:43:e3:5e:ef:b1:
48:e5:47:73:50:94:f1:0b:a7:92:99:75:c7:2c:96:
d7:22:10:03:39:e5:83:be:02:e9:46:cc:00:e9:8a:
fd:0d:2f:83:9a:85:2b:69:a8:f5:de:ed:4e:2e:a8:
be:25:94:6c:ed:93:8b:3d:b4:a9:47:5f:29:35:b2:
c6:7a:5b:18:56:bf:a9:96:d0:03:22:db:d8:25:d6:
bf:89:b4:e5:bb:8a:2f:31:d2:1c:34:f2:9b:c7:ce:
22:b9:2d:e4:9b:4b:43:09:b8:52:3e:4a:47:f4:0c:
d9:97:c9:42:12:a6:88:66:90:e7:83:7a:d5:0d:00:
44:f4:e8:98:3e:b2:36:b1:cb:ad:9f:f0:f8:aa:ef:
1f:fd:13:e8:66:b9:5d:64:85:a7:1a:30:0c:4b:b9:
43:44:e5:37:b8:2b:87:0f:e3:60:a5:70:8e:8f:4c:
9d:26:1d:47:cd:29:8e:d2:82:3d:d7:d9:3b:9f:79:
a8:c0:3e:26:df:57:17:15:21:17:41:60:c8:2a:30:
95:e2:a4:91:57:12:8c:02:9f:98:9a:94:0c:3b:d6:
94:9a:83:b6:7c:28:5f:03:8c:03:d2:c3:5e:32:55:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C1:7E:1C:7E:42:40:CA:CA:A2:94:57:8F:FC:49:B5:06:34:3C:23
X509v3 Authority Key Identifier:
keyid:27:A4:E5:AA:CB:12:9E:A5:07:38:2B:23:DB:97:CA:42:00:70:4D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6TlqssSnqUHOCsj25fKQgBwTWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c8:5d:e5:28:3a:a8:e1:66:4b:d9:06:c0:ea:91:a0:ad:b8:
17:3c:4f:c0:17:4c:53:b4:ed:a1:df:c0:dc:ad:a7:de:60:82:
cc:4d:70:0b:31:53:cf:45:76:91:8e:60:e2:b6:56:19:4b:51:
f7:0f:64:65:86:de:74:f7:67:85:64:30:0b:ff:2e:2e:9a:bf:
80:eb:3a:ff:d2:b8:d1:36:30:31:c6:af:7e:ae:e1:aa:3a:51:
a3:3c:bf:b8:08:8e:80:1f:27:ed:92:fa:9a:42:9c:94:3f:c4:
09:82:65:39:0f:fb:a8:31:c8:6a:0e:ba:c4:da:d7:00:16:10:
4e:2f:0d:e3:1b:83:26:2e:59:5a:b2:3c:a5:02:59:d0:13:f1:
ec:8b:15:10:8f:4d:9e:35:4d:ea:c5:ea:0f:71:03:32:8a:67:
6d:1c:8b:7d:b8:bb:3c:97:fc:5e:1e:a3:f1:01:7e:c4:13:66:
8b:30:51:39:f3:75:d8:b1:30:fe:1b:22:1a:c9:da:a8:39:f0:
ba:7b:de:12:6e:d1:57:7b:12:4c:96:b9:59:75:12:61:0a:38:
31:11:32:fd:da:8a:42:72:e4:98:9e:bc:ea:93:1d:29:c8:e6:
fa:58:af:84:bb:98:54:5e:17:66:fc:e7:5c:01:49:ae:26:b8:
df:40:75:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:45 2025 by rpki-client