Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
File: J8XzZBPnr0coE_46cU4uzaoh8ug.mft (raw, json)
Hash identifier: pjrznBqzc0wYssYWTjH5GF0LcReqdUG3j3bEDfdUo1Y=
Subject key identifier: 9B:F7:87:09:EC:EA:42:6D:97:B4:E0:89:35:5D:F0:0B:57:C7:A6:57
Authority key identifier: 27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
Certificate issuer: /CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Certificate serial: 01968090165EB9378B54963C0C13283FBB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
Manifest number: 059B
Signing time: Tue 29 Apr 2025 08:00:48 +0000
Manifest this update: Tue 29 Apr 2025 08:00:48 +0000
Manifest next update: Wed 30 Apr 2025 08:00:48 +0000
Files and hashes: 1: EOZUjXctaYMkRcyyMQLguIWxilg.roa (hash: jYlCwqtOgmrWCQocWJbTWD5UljGXFXvAjEpukVvKrrM=)
2: J8XzZBPnr0coE_46cU4uzaoh8ug.crl (hash: F7UaPAjkwo1cW5kvX7NbuZsWnI87VZPuhgZCaEG9GbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:16:5e:b9:37:8b:54:96:3c:0c:13:28:3f:bb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Validity
Not Before: Apr 29 08:00:48 2025 GMT
Not After : Apr 30 08:00:48 2025 GMT
Subject: CN=9bf78709ecea426d97b4e089355df00b57c7a657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:18:9e:fe:d0:21:ec:eb:42:8e:c5:9b:17:
85:fe:d8:39:9e:7f:f4:ae:25:b1:91:ba:10:e6:91:
7d:49:99:7d:7b:87:1a:35:fe:12:59:17:23:c5:e3:
c2:51:e8:66:ba:ab:72:a3:b0:59:41:fd:87:b5:99:
af:5e:a5:3d:9e:8b:c5:40:92:7f:e2:72:57:e0:95:
00:83:5f:c4:d3:8e:00:de:24:16:2f:ca:ae:00:a3:
ac:a5:46:26:1c:34:b2:7b:b4:78:81:04:e7:91:2b:
47:92:78:44:7c:e3:9b:87:83:81:e1:2d:06:59:3b:
d8:44:1a:aa:09:84:2c:b9:d5:7e:d1:76:0a:50:c0:
6c:cd:c2:03:3a:08:57:2d:70:9a:d7:ed:78:be:58:
c6:7b:f9:82:3c:ac:cb:b8:9e:cc:4f:0a:20:4c:4e:
c0:1f:3e:bb:af:1f:20:77:af:ff:95:31:0c:ae:a2:
f9:f8:10:93:94:ae:7f:b5:4e:29:c3:82:63:06:0f:
8c:d0:1f:01:bf:72:cb:92:62:46:00:5c:f3:86:4a:
7e:8c:40:30:b6:62:98:86:48:69:d4:42:ff:af:9d:
99:c9:c9:08:78:09:30:62:f7:33:0f:f6:6d:d3:2d:
81:ab:e0:4b:91:47:bc:99:5f:63:6c:39:85:e6:c7:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F7:87:09:EC:EA:42:6D:97:B4:E0:89:35:5D:F0:0B:57:C7:A6:57
X509v3 Authority Key Identifier:
keyid:27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:01:04:6e:69:f3:b3:90:ba:3b:46:3a:be:a5:a5:19:f7:b6:
39:63:7a:d5:79:0e:ad:73:f2:2c:8f:9f:f0:a3:a8:97:c8:1f:
f1:e1:b1:25:cc:09:80:c3:ab:3f:9b:2e:9d:b8:91:bc:a1:7b:
83:0e:4f:14:b9:6c:17:5d:41:d4:78:45:fd:b7:23:d4:76:3e:
41:62:de:70:1c:94:47:35:8d:c3:11:60:05:e2:01:2c:31:f4:
58:68:92:9a:cb:dd:ca:90:83:f9:a3:3e:9e:ed:56:cc:91:0b:
cd:71:23:77:d2:77:65:51:21:18:ac:e3:f9:7a:be:f9:a5:46:
76:3b:db:f9:bb:8d:b1:ea:72:8a:a6:14:d4:54:1b:7e:9b:e3:
05:ae:91:b4:ad:78:70:67:28:e8:a3:a5:9d:62:10:4b:62:f5:
a0:e2:09:6b:75:0a:ab:df:4e:c3:06:c4:96:ee:bb:72:6a:c4:
a8:c9:eb:31:1d:e1:0e:42:bf:c5:f5:c0:f2:1b:78:51:cb:32:
13:e6:ee:a5:70:77:0d:a7:be:46:79:85:0a:25:77:a0:38:53:
c6:5a:8e:9a:d8:8e:bb:5c:f0:f7:c0:7a:a7:3a:b9:c2:9b:1c:
00:61:4f:6c:0d:cc:74:77:0b:51:79:2e:fb:93:e1:b4:f7:a1:
8f:88:25:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:52:56 2025 by rpki-client