Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File: J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier: K4axRSIwHXt+VZVVdgpXcK+Nc0CiJ8t12IX7aC4NBaU=
Subject key identifier: BA:D4:84:AE:AB:AA:DB:3A:34:55:49:C3:44:F4:C6:BA:10:58:D4:E3
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial: 0196824709166B19C40FADD852E410CF8FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number: 0B34
Signing time: Tue 29 Apr 2025 16:00:15 +0000
Manifest this update: Tue 29 Apr 2025 16:00:15 +0000
Manifest next update: Wed 30 Apr 2025 16:00:15 +0000
Files and hashes: 1: CeCGyRgJTvMcLvc6bqV_Qp6eGCU.roa (hash: vD/F/679cA73k7OkjDpOttD102xB/cx2AgMSLChmbBA=)
2: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: iS2bG+oUOGgkn+C1W9kORGuxsbcRNoUtiuTxpQc6DPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:09:16:6b:19:c4:0f:ad:d8:52:e4:10:cf:8f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Validity
Not Before: Apr 29 16:00:15 2025 GMT
Not After : Apr 30 16:00:15 2025 GMT
Subject: CN=bad484aeabaadb3a345549c344f4c6ba1058d4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:ee:86:a1:69:6a:a6:d2:0d:2d:fc:13:8b:
46:51:7d:64:f3:19:5e:1a:e8:40:3f:2e:28:b3:29:
bf:3b:8f:ed:af:42:5e:94:c1:64:e2:ad:7c:6d:96:
d8:05:85:9e:7a:ad:5a:8f:63:02:14:6d:16:e3:a8:
32:67:63:59:82:62:e5:62:6f:00:26:f8:74:1c:89:
7c:82:04:36:2f:eb:d5:be:d2:ef:c7:c3:40:9e:10:
e3:9f:74:82:d4:64:fc:82:20:fe:66:c0:4a:e7:cf:
e4:a2:79:e5:1a:9f:ef:4c:3a:68:d1:3c:6c:4d:08:
fd:44:93:93:f1:a0:6b:fe:a9:67:2a:7b:fd:e1:b7:
dd:a4:44:a3:ee:6f:be:40:e8:c1:37:45:cc:e7:87:
45:42:8b:f5:da:e9:f2:5c:d0:0a:f8:6a:23:76:6e:
08:5e:fb:6d:48:95:04:c0:5a:2a:18:51:6b:d0:56:
a2:c1:72:90:fd:64:9a:bf:64:59:2c:72:49:92:c2:
a4:db:14:fb:c9:32:20:bc:e6:7b:78:02:0a:fb:7b:
41:63:8d:c6:7c:b4:c8:8d:af:7d:40:36:7a:58:62:
aa:e4:47:42:c8:8f:84:28:be:4d:5b:6f:ed:15:be:
24:4f:59:b6:c2:87:70:2a:ee:b3:8d:23:98:7a:e9:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D4:84:AE:AB:AA:DB:3A:34:55:49:C3:44:F4:C6:BA:10:58:D4:E3
X509v3 Authority Key Identifier:
keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f5:e6:4d:a6:df:60:2d:61:68:63:a6:c0:50:69:3f:94:0c:
69:13:6e:b0:83:07:df:16:c4:59:0c:4e:2b:5b:45:95:f1:98:
15:63:bc:ef:de:b8:cc:2c:7d:2e:b6:58:2a:71:70:20:75:67:
53:44:48:a4:51:4e:5b:23:d9:0f:ed:0f:c3:84:ab:19:66:5f:
53:87:fb:63:86:90:44:f5:22:18:dd:04:2f:24:22:79:d9:2d:
4c:27:e3:c5:7d:1c:e1:8a:dc:42:13:3d:27:ac:d4:a4:95:38:
17:fc:c4:69:5b:1f:23:ff:49:f1:29:7b:e1:2c:9e:8f:8b:14:
d4:22:8b:2b:16:98:d7:05:9d:53:83:1e:07:9e:71:9a:01:2a:
15:aa:2d:f2:7a:14:58:50:e1:07:74:77:68:80:f0:83:62:f6:
47:a2:10:e5:5b:71:95:19:1f:0a:54:f1:dd:ed:6a:61:b5:40:
2b:7b:a4:1b:ae:4a:4b:b2:db:0c:99:60:4e:ef:2a:b9:6e:ef:
fa:1b:a4:98:bd:e3:91:09:bb:52:2d:6a:3e:70:b2:51:8f:bd:
40:e3:89:eb:00:fc:91:c7:d3:f5:be:dd:aa:f6:04:8a:68:74:
75:09:08:7f:33:6f:4f:03:34:2c:65:40:4e:6d:68:ac:4e:54:
35:50:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:55:48 2025 by rpki-client