Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier: obDBvop3BzCCWM9tjW2P7ImOvPaNd3tXOCr0+N/p6EI=
Subject key identifier: 81:86:C9:19:17:94:17:81:8D:F2:30:55:F7:3D:4D:F9:77:B5:6B:DD
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 019688EE3AE37F8BF6858CFD0C3EFC8C74B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number: 0F7D
Signing time: Wed 30 Apr 2025 23:00:36 +0000
Manifest this update: Wed 30 Apr 2025 23:00:36 +0000
Manifest next update: Thu 01 May 2025 23:00:36 +0000
Files and hashes: 1: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: kLANAFWn0F88fRdkduJNOBTCXyjuaRPH/xzmVHBEXpQ=)
2: YmG5FcsW3S43XyijT62zmWMd610.roa (hash: Sh1sRBIDqrknsDPBNOeRI3CSuT41xnHIPduRy76n3aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:3a:e3:7f:8b:f6:85:8c:fd:0c:3e:fc:8c:74:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Apr 30 23:00:36 2025 GMT
Not After : May 1 23:00:36 2025 GMT
Subject: CN=8186c919179417818df23055f73d4df977b56bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:c9:d4:97:95:42:d9:9a:1d:66:62:6f:36:
04:57:32:a6:ee:7d:2a:20:4c:ca:92:5b:5c:4e:51:
33:5b:a9:96:06:b4:46:25:ee:b5:73:ec:3b:14:62:
24:6d:4a:47:f8:ea:2f:98:69:3d:fc:42:4b:b4:19:
a0:02:4c:d7:9f:2b:91:c8:00:0b:8f:ff:40:fd:dd:
b6:92:cf:44:65:9c:5c:69:9b:20:7b:1a:0d:09:c7:
b3:e6:4b:58:08:7f:16:34:17:4c:81:e3:45:9c:ff:
1f:dd:81:6a:47:4b:f0:83:0e:65:c4:4a:88:8a:c3:
dc:f3:99:87:4b:97:ac:c5:02:eb:2a:1d:6d:1c:0e:
d9:d5:10:db:ea:62:33:22:dd:64:c2:56:94:4b:8d:
7e:58:76:a4:aa:85:c7:d6:bb:71:71:d0:80:fb:7a:
2d:a2:36:d0:cc:45:be:d0:6c:02:fc:68:67:c9:0b:
24:80:3d:b9:51:41:3d:ad:2c:a3:2d:b8:30:b0:5b:
f7:fa:08:f0:2a:0b:10:f3:59:3d:bc:e9:d8:5c:89:
f7:a7:ae:f3:4a:17:aa:0b:d3:12:e7:aa:63:2c:22:
c3:81:3e:18:70:29:d6:b7:59:f5:53:86:82:62:fa:
b8:bd:ae:2f:48:3e:a2:a0:11:19:bf:b7:94:9d:94:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:86:C9:19:17:94:17:81:8D:F2:30:55:F7:3D:4D:F9:77:B5:6B:DD
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ec:53:f8:77:50:2e:13:2a:6e:d4:c0:7d:90:46:68:9f:d4:
a4:61:30:7a:26:e8:d4:e4:d8:83:04:c5:99:6e:6c:22:26:ae:
df:df:4b:86:a4:a2:4f:90:f2:fc:bb:3c:a9:01:ac:df:86:23:
d0:d2:99:26:24:56:ce:4a:95:51:99:e0:21:ac:4c:7c:3f:fd:
ce:40:c6:53:82:3c:28:be:fa:40:de:81:cc:74:21:47:76:cc:
81:33:61:b6:d3:90:d7:cd:fc:14:c1:a3:81:95:6a:9d:d6:6c:
a7:43:0d:08:01:a8:0f:4a:c9:01:11:4e:2b:6c:31:b6:41:6a:
9b:ad:dd:48:19:03:6c:6c:58:16:19:fc:9f:44:bf:f1:06:cc:
f9:a2:e9:41:54:6b:80:7a:63:5f:01:62:96:25:ad:f3:43:ec:
55:8d:68:b2:c6:10:3e:cd:82:50:c5:7d:bb:07:90:3d:8a:44:
90:7e:69:cf:f9:1c:d7:65:82:92:ec:61:c9:0f:1f:6e:62:f3:
55:31:d6:71:e3:8c:04:2c:e7:2a:ed:60:4a:9f:0e:01:ec:84:
8b:f3:51:3b:7a:43:ca:c7:e2:99:33:f8:3a:df:8e:92:f2:4d:
fe:45:92:48:07:dd:04:59:98:86:f7:18:99:3b:5a:72:0c:c4:
d4:cd:32:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:08:29 2025 by rpki-client