Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
File: J83PK9CaINK63Tq2yMft-h_Vwsw.mft (raw, json)
Hash identifier: nNKn+amrIlMC0vhSelRSRsuVo2nT22GGF8JSXb24BkE=
Subject key identifier: 4C:06:C0:87:36:2D:4D:83:47:73:BA:56:00:6A:89:86:70:86:2D:28
Authority key identifier: 27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
Certificate issuer: /CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Certificate serial: 01967F45F0F14DF59BAA31D5D4863140D8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
Manifest number: 022D
Signing time: Tue 29 Apr 2025 02:00:12 +0000
Manifest this update: Tue 29 Apr 2025 02:00:12 +0000
Manifest next update: Wed 30 Apr 2025 02:00:12 +0000
Files and hashes: 1: J83PK9CaINK63Tq2yMft-h_Vwsw.crl (hash: myMATHq0bRPwFhd2oGBBCTP+Xa94bsezm+EeZRcTG8M=)
2: kxpaHhhuxaN-Jg9For9SY2Nccrk.roa (hash: Q31rgNDFAzRPHBiMS/f4s6A4eZqCkoNUT9MdgG2F6C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:45:f0:f1:4d:f5:9b:aa:31:d5:d4:86:31:40:d8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Validity
Not Before: Apr 29 02:00:12 2025 GMT
Not After : Apr 30 02:00:12 2025 GMT
Subject: CN=4c06c087362d4d834773ba56006a898670862d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:24:e4:b4:ce:e7:b4:f0:7e:75:3d:39:cd:
85:16:36:9e:3b:6f:75:d2:73:31:ac:40:31:31:7c:
d4:a2:a4:21:88:fa:e3:99:81:e5:d9:9b:c1:c2:a6:
2f:43:ed:f9:82:2d:40:3e:5b:67:f2:16:ae:0a:20:
e6:28:2b:63:7b:6a:7d:75:74:29:59:0c:88:95:a5:
79:3a:0a:1d:d4:52:fb:a7:5e:2f:2c:36:d8:96:c7:
98:56:76:13:ab:94:0b:89:c1:9c:8c:f7:4c:4b:7d:
ea:14:69:0f:e3:ba:8e:f3:cb:2f:ae:8f:70:0a:f9:
3d:8d:8b:8c:bd:7f:49:2d:2a:96:d8:41:fa:4d:3f:
fc:f0:c8:5d:33:6c:32:17:ea:e8:ae:a2:21:c9:0c:
c4:b8:27:45:89:00:66:6a:31:08:7b:eb:31:63:ec:
82:40:53:a4:5c:3c:be:08:b8:42:fb:dc:b8:89:02:
03:a0:96:10:0b:b8:71:83:ea:30:3d:77:38:79:12:
76:90:17:27:1d:1d:c2:2a:8e:a9:8a:b0:77:09:a6:
44:ae:57:a5:ca:03:d7:9e:cb:21:bb:04:ad:02:fb:
f1:6d:a4:73:05:30:a5:93:22:66:1a:e8:a3:f0:44:
ec:92:ef:1b:db:3c:8b:aa:22:8b:22:98:dc:a1:81:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:06:C0:87:36:2D:4D:83:47:73:BA:56:00:6A:89:86:70:86:2D:28
X509v3 Authority Key Identifier:
keyid:27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:94:a3:2b:11:2b:77:1c:80:aa:98:5b:f2:69:5d:c7:34:34:
13:a7:1b:59:1a:b7:d4:0a:2e:c0:0b:53:d6:88:1f:29:7c:5c:
5a:0d:1d:42:0b:f8:df:50:1d:e8:4f:01:9a:a6:e3:18:78:9c:
1e:e2:7b:d6:25:79:c9:cc:2f:dd:8a:0d:dd:6e:e3:e5:0e:35:
bd:8f:d6:6d:db:a8:bf:c8:06:f7:af:19:1d:36:94:04:1c:83:
3e:ec:50:27:bd:21:8a:2e:d1:d1:0d:2b:15:9b:e5:8a:d7:92:
02:a4:ff:76:9a:8c:be:19:5f:c4:4d:f9:0c:8d:e6:43:b2:c1:
53:cf:d4:40:c9:76:0d:f0:ca:23:a4:aa:27:6b:6b:e5:53:51:
09:7f:d7:b7:00:db:35:f5:8c:d3:eb:95:de:9d:70:b2:8a:74:
dd:ec:77:b8:bc:ae:48:66:4c:0a:11:bc:db:a4:f3:b6:41:44:
9d:12:a3:df:ab:00:5b:70:99:25:87:c7:2a:10:41:12:f5:e4:
73:be:25:ab:e6:cf:43:86:4b:08:9e:2b:24:8e:5e:ce:d0:6f:
9b:77:ea:4b:7c:4a:85:89:f0:b9:de:97:dc:58:c5:e9:66:0b:
d4:ff:72:f9:0c:66:e4:28:3f:47:39:11:e4:46:da:b3:3a:57:
28:47:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:33:09 2025 by rpki-client