Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File: J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier: pnFvuGbbY2sezQG+dskleZaZVwfncLukDekPlYRTrQo=
Subject key identifier: CB:60:BD:10:42:27:5B:EF:AF:3A:13:D7:F1:D4:BD:92:37:89:5E:0B
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 01976D3E7934D68220F49387CE6CEFAC8528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number: 0C70
Signing time: Sat 14 Jun 2025 07:01:40 +0000
Manifest this update: Sat 14 Jun 2025 07:01:40 +0000
Manifest next update: Sun 15 Jun 2025 07:01:40 +0000
Files and hashes: 1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: gWIqItJXWBDdbw8A5klUXozWrg7MzvTJMuYc0V8kQro=)
2: UEg2a8frOwQJ_ocv6mZt898VwKc.roa (hash: HhDZ6hinLTKa6qeDqW6QogtlJ6a4udPeZaa3rESZ/rM=)
3: zUk84pMkBH7qM-5eyE2RTVXesY8.roa (hash: 1Rye/GoMkKTXa8JBFflyaNlKfqeLYK+b0R1zK9MVT4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:79:34:d6:82:20:f4:93:87:ce:6c:ef:ac:85:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Jun 14 07:01:40 2025 GMT
Not After : Jun 15 07:01:40 2025 GMT
Subject: CN=cb60bd1042275befaf3a13d7f1d4bd9237895e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:8d:68:eb:5c:c8:ec:98:51:bc:a6:7c:f6:
52:e1:c4:87:26:96:c3:21:97:ea:98:31:86:8f:94:
3f:e8:63:83:37:cd:c6:c6:ba:30:71:19:82:86:e1:
4f:ac:d3:3f:39:1d:be:22:ae:ce:d4:f4:d1:eb:21:
f8:57:68:99:8a:91:85:4a:fc:7a:c4:38:89:c6:c1:
22:f4:0d:d8:7d:c4:d5:30:24:00:ef:27:8f:d6:ec:
ed:ed:2d:ae:5a:9e:ff:64:97:db:24:dc:7d:ac:1e:
55:a9:cf:47:b3:8b:49:46:4c:f7:df:7b:5a:97:95:
95:7c:19:8c:17:86:5b:00:65:2a:63:6d:67:41:1c:
a2:a0:3c:fd:76:b5:2e:0c:79:dd:22:06:81:f7:cc:
4b:7d:44:bf:84:b1:43:d4:e5:5e:26:dd:79:98:96:
e9:08:72:9a:1e:89:62:c1:8d:57:d1:54:e8:98:e6:
0a:2b:ba:16:ee:d9:bb:b0:15:bc:7d:1a:21:1f:66:
d5:fa:a8:6a:63:93:b9:fb:10:78:bb:00:bc:c7:d4:
82:43:a8:09:00:1b:fc:5a:97:6a:fb:ce:85:7d:85:
f2:31:c4:0a:2d:ba:f0:b6:8d:cc:d1:0f:84:95:9e:
62:fb:be:f0:65:d9:15:1a:37:a0:8a:ce:ed:bc:cc:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:60:BD:10:42:27:5B:EF:AF:3A:13:D7:F1:D4:BD:92:37:89:5E:0B
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0c:29:62:c8:b4:70:ff:37:c8:5b:b2:40:92:12:4f:bd:de:
84:e4:e5:b7:65:07:ae:d8:8a:40:21:45:1a:2c:59:6d:c0:06:
8f:47:ad:8b:b5:b9:43:fc:a7:5e:c0:87:eb:34:4e:cf:e7:53:
b0:c6:c6:5f:54:bf:02:46:85:94:6d:7d:64:9a:5a:78:e4:e8:
84:09:06:52:00:b9:a2:c7:cf:5b:6c:4d:65:15:48:50:cd:54:
95:18:50:4d:c3:22:ab:61:13:0a:3d:c5:6f:b6:87:59:13:88:
29:da:f3:e1:58:1c:d6:e2:95:d3:b0:9e:fe:b7:a3:91:7f:72:
a6:57:88:34:87:bb:a8:d1:d5:8e:9d:62:c9:55:c1:3d:44:a4:
6d:8c:6b:28:cf:0e:97:dd:59:76:7a:00:02:94:e9:e2:dc:c9:
98:4c:2e:55:1c:18:d9:93:8f:d6:5e:4c:db:61:03:50:04:54:
88:75:ca:1e:81:34:23:e3:ef:0d:a4:76:c1:b0:91:0a:f7:0e:
81:fd:f5:07:63:20:f1:b7:03:f8:2c:9f:d8:9e:f6:e4:60:a2:
a5:d1:f8:30:69:18:e0:a2:6a:bd:af:97:9a:97:54:ab:56:f0:
7f:ff:05:36:88:65:97:d2:c3:bf:81:d7:da:c7:c1:97:ba:9d:
85:4c:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:40:56 2025 by rpki-client