Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier: oecaJalXfCDrRoOUQHfBu9ZMlcjwUsCxAsZbRvny96k=
Subject key identifier: F6:BD:69:3A:B4:EC:22:57:64:B1:05:15:D9:07:34:8C:14:BF:1C:03
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 01976BF40E6266AC166C52B7E78DCEA74F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number: 12A7
Signing time: Sat 14 Jun 2025 01:00:45 +0000
Manifest this update: Sat 14 Jun 2025 01:00:45 +0000
Manifest next update: Sun 15 Jun 2025 01:00:45 +0000
Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: SZnm/JiZGL9EKx/X2E4/BjyvAaSidJNFYvEOUJZpomI=)
2: bMRktPBk3GJGItNskNyUqcrOWmw.roa (hash: oN+XpyM7329DMObxCObtViAvj7EaNMyaASixYhlQlxY=)
3: qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa (hash: tu6gozK2xpe2ojLmfpogjmMhCMxCaqiedX62p8ai78g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:0e:62:66:ac:16:6c:52:b7:e7:8d:ce:a7:4f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Jun 14 01:00:45 2025 GMT
Not After : Jun 15 01:00:45 2025 GMT
Subject: CN=f6bd693ab4ec225764b10515d907348c14bf1c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:e4:f6:c7:48:1c:0f:0a:09:38:39:5e:46:
c6:22:a2:67:97:42:e5:99:7f:61:4f:99:c4:fb:74:
6a:3d:fd:f7:91:58:4e:b3:46:c8:fa:83:16:0d:dc:
99:1f:a0:42:09:b5:4b:74:96:0e:08:d1:a6:85:97:
3c:09:a1:70:93:8c:3a:4f:76:e2:4e:ed:dd:bf:3a:
00:85:67:65:6f:69:de:1c:cd:56:9b:79:0a:b8:ab:
a4:4b:95:a3:d0:ba:01:72:3f:e6:02:ff:93:49:02:
ed:9a:61:b8:94:bd:df:d4:d2:57:6c:04:ef:c5:6f:
74:81:d1:dd:30:48:29:39:51:36:e2:ea:86:3d:e3:
6d:b8:d8:9f:e4:84:f7:69:28:81:a1:4f:a2:ff:a8:
85:9b:7c:99:cc:e5:34:cf:8a:3d:35:25:1b:e3:0e:
4a:c0:6f:94:46:99:1c:09:22:d5:ab:22:12:f3:a5:
f9:a9:d6:0a:e9:7e:1c:00:7a:68:31:3d:6e:18:b2:
95:7c:8f:91:f2:71:4b:a3:84:2d:95:47:50:51:25:
c7:0d:56:ff:f3:2d:60:4f:f0:3e:64:5c:6c:e9:e2:
ac:dd:6b:8f:d7:c2:6a:49:1d:08:94:3a:25:33:17:
3d:fe:da:2c:f9:44:28:3b:be:fb:6d:10:c0:65:63:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BD:69:3A:B4:EC:22:57:64:B1:05:15:D9:07:34:8C:14:BF:1C:03
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0e:cf:9d:b8:8a:fd:f7:7f:43:4c:c1:c0:1d:65:0f:9c:70:
6a:4d:85:00:23:fe:a1:de:78:4f:81:d5:1f:ad:5e:2d:5e:84:
e6:09:6f:8d:b1:92:2e:51:39:11:1f:9e:ce:ab:cd:90:34:04:
91:ad:c0:f5:bc:84:74:b7:68:64:41:11:43:83:56:d9:a0:ab:
b6:68:11:5c:b9:d0:17:4f:fa:32:9d:66:e7:94:f7:92:01:9b:
5a:89:73:81:1e:c3:e1:92:a8:fc:39:41:ff:be:1f:0c:f2:a9:
56:2b:2e:ba:76:d7:73:1b:88:f9:ad:be:61:dd:16:25:27:fa:
16:b3:2e:df:63:9c:71:ee:56:d4:10:7a:09:c5:36:ec:06:e8:
83:b2:46:51:6e:a7:67:19:fe:c6:c7:66:5e:c8:e2:d5:ae:d0:
0b:dc:10:29:79:35:4b:0c:f1:d9:c2:fb:58:b7:13:62:22:7b:
f9:9c:9f:14:25:be:0d:f4:30:7d:c3:d3:c5:5c:05:2e:ec:06:
43:52:0b:3d:63:c6:5b:f2:3e:8f:43:a5:e6:9c:2f:ac:ef:24:
21:9b:c9:ae:20:b7:42:36:cb:15:0c:c0:31:e3:f7:71:b3:5f:
d5:a2:29:0e:da:38:19:10:86:1b:09:4f:98:48:d0:72:da:ee:
bc:68:20:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:14:42 2025 by rpki-client