Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: dClkfe0Yrzhomgwj5Xg+yv3jw0g1zT6pZMEFBYELrxc=
Subject key identifier: 63:27:91:63:3E:CD:CB:E6:2B:C6:9C:7E:BE:F0:2C:68:E7:3A:30:38
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 019677FB393ACB6A045E51A999E344EAAFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 136A
Signing time: Sun 27 Apr 2025 16:01:14 +0000
Manifest this update: Sun 27 Apr 2025 16:01:14 +0000
Manifest next update: Mon 28 Apr 2025 16:01:14 +0000
Files and hashes: 1: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: fgSWVt42pAkGSX01d3MZOPSjFyvn+kyYmByJfNrSsf8=)
2: omv1iA0sTwZqywTVYlUXXegJP1Q.roa (hash: lDFIRi5hNHf1aQj7xWQEmMDGw0C4yu9jECeYI1136N4=)
3: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (hash: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:39:3a:cb:6a:04:5e:51:a9:99:e3:44:ea:af:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Apr 27 16:01:14 2025 GMT
Not After : Apr 28 16:01:14 2025 GMT
Subject: CN=632791633ecdcbe62bc69c7ebef02c68e73a3038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d4:6b:92:ed:94:ee:a0:fd:3e:ca:9a:01:81:
ea:07:ca:d9:7f:f3:be:cf:cc:15:fe:32:ee:b4:36:
cc:a8:57:7e:ca:da:f4:53:d3:91:ec:76:4e:73:0d:
90:b6:32:00:48:ee:8d:e2:1a:69:0f:3b:4a:23:ee:
5a:cc:bc:59:e3:8e:3a:2e:d9:f3:53:0c:10:de:6a:
ce:fd:ea:89:7a:3b:48:98:6a:57:49:71:c0:4b:aa:
74:2d:62:d2:c9:c0:0c:f4:d1:75:54:71:b8:b3:a7:
19:0c:dd:a2:ef:b9:6d:cc:76:81:32:9f:a8:72:32:
c1:33:97:c2:7c:66:6b:92:db:21:7f:1e:0e:04:bd:
44:8c:c6:9a:b8:b5:97:37:ae:28:c9:2f:a0:26:a4:
5c:3e:58:9f:21:82:1c:00:79:16:13:a3:f6:70:d9:
89:7b:86:13:0a:b4:5f:c3:7f:6c:af:44:1f:4a:56:
27:34:bc:c5:a0:14:1f:2a:f3:d4:c8:4c:5f:d4:ea:
28:46:92:37:6f:11:eb:03:56:ce:8f:d8:fc:e7:81:
c9:07:b3:2d:b0:95:4e:ed:fc:63:ba:a0:ea:7b:61:
c7:be:02:4e:70:ac:b4:9f:a1:82:21:b9:c7:2d:cb:
b3:cf:70:ef:1c:fb:bc:0f:ac:9c:af:a3:ad:d8:1e:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:27:91:63:3E:CD:CB:E6:2B:C6:9C:7E:BE:F0:2C:68:E7:3A:30:38
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:41:78:fe:7a:69:81:26:3f:a4:f1:7e:e0:25:e7:76:33:ee:
c8:a2:c8:70:7e:ce:91:f4:17:a8:c5:2e:41:ba:51:02:bb:0d:
5e:f1:f5:a5:25:45:80:88:aa:1f:36:15:6b:5c:ef:38:a9:c3:
ff:e7:ab:07:f1:b7:3c:a4:c1:74:5c:eb:b6:d8:a2:91:d6:76:
9e:53:48:cd:82:ca:a7:a8:30:56:88:64:97:99:fe:bd:4d:2b:
a7:62:6f:e9:e6:fa:eb:f6:2e:4d:da:74:84:13:90:e5:79:db:
f5:0b:89:2c:67:36:4f:3c:ba:72:7a:07:5e:0d:71:42:59:b7:
7e:36:4c:3a:a8:dd:67:b0:95:7d:39:fa:64:56:29:23:2e:62:
59:d2:fa:32:d8:58:23:74:51:ea:7f:d6:f1:a3:63:c5:58:60:
33:e6:7b:d5:18:97:6d:26:c2:5f:84:60:57:39:69:33:cc:05:
26:24:14:59:16:00:7a:d0:7f:4a:99:b0:6a:42:45:b4:71:9e:
2a:5d:c6:4c:4d:1f:5d:f6:73:27:b2:b8:34:13:73:08:6e:a7:
a3:41:ff:dd:ce:0c:95:bf:13:4b:b5:11:5c:96:a0:2c:df:4f:
e8:34:c6:b4:00:2e:8e:aa:46:5d:8e:e8:1e:f0:ec:d5:82:16:
9a:b9:a6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:07:03 2025 by rpki-client