Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: XKpaIzkiigCOnxbdaxMtDGIhwQnRCDSXq4mW7yfS8DE=
Subject key identifier: 29:91:99:35:27:8A:82:07:F9:54:65:7F:B7:BD:8D:78:86:2C:84:DC
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 019675D4EF5767F4C79A27CB503D74C0C785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 06:00:11 +0000
Manifest this update: Sun 27 Apr 2025 06:00:11 +0000
Manifest next update: Mon 28 Apr 2025 06:00:11 +0000
Files and hashes: 1: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: nQ8IX9AXPbxeF1E4TWR9+uoLhrMNbbiOLraNXXfEKzk=)
2: aaN-bs2N1cRQu6wVRlnpd2mwkBQ.roa (hash: /bC3V57krNUgmm/Cc9N1e1boJHyImaptM9rUrHdc9Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d4:ef:57:67:f4:c7:9a:27:cb:50:3d:74:c0:c7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Apr 27 06:00:11 2025 GMT
Not After : Apr 28 06:00:11 2025 GMT
Subject: CN=29919935278a8207f954657fb7bd8d78862c84dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:29:33:51:d3:37:ce:fd:61:96:39:1c:3c:
36:28:6a:23:0f:e2:3b:c7:98:2b:a5:a6:a6:c6:88:
6b:56:d9:6f:e9:02:94:12:41:63:a5:b9:a3:43:d1:
5a:a3:a6:da:15:cc:ca:b6:3b:1a:d7:35:4d:5d:71:
1c:82:22:43:e1:0b:2d:3b:ca:00:0b:d1:44:b1:4c:
72:8a:06:b1:9c:32:48:0c:89:56:7c:a6:82:e2:b4:
cf:c5:5b:bf:53:4f:c5:42:27:8c:7a:88:35:fb:53:
ac:19:2f:1b:cc:a8:2e:bf:03:92:f6:a5:44:4e:b8:
bf:d5:14:d7:cb:f9:47:38:91:88:93:35:94:94:ae:
5d:68:91:05:db:93:af:b8:45:ab:8f:c3:43:8d:39:
41:67:42:ab:51:80:b3:53:20:0b:e2:0a:a2:5b:6c:
e7:8b:fa:37:9c:c5:82:9b:cb:9a:89:1b:55:51:d3:
b4:4d:6b:cf:3b:21:c9:f3:d7:19:33:80:5c:e8:e8:
39:e9:d6:e2:ff:d9:67:b4:91:4b:d9:ff:82:a9:4e:
61:61:8f:03:ac:56:86:4b:6f:18:08:00:fe:0b:91:
74:25:c6:eb:0e:54:f1:d9:ed:2b:5f:f9:90:86:e2:
04:5f:4b:38:bf:e7:6e:3c:ef:d5:b1:ed:d6:0d:c5:
48:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:91:99:35:27:8A:82:07:F9:54:65:7F:B7:BD:8D:78:86:2C:84:DC
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8b:41:73:f0:f5:70:d8:5c:6d:31:39:c9:c5:97:d9:6e:aa:
9d:f9:e2:db:ce:bf:82:0e:b3:f2:a1:60:f8:10:28:65:df:36:
62:b8:26:2b:84:a0:90:70:49:02:e9:df:59:b9:0f:f8:d8:16:
29:f0:d4:a1:1d:71:a3:15:48:38:94:56:ca:ab:69:89:9e:df:
38:1b:6a:19:2a:80:f6:df:81:f1:f2:95:bf:5e:81:0a:a1:af:
5e:22:37:df:a7:09:24:ba:22:bb:48:6e:c7:c4:75:5e:7b:81:
31:c5:4b:07:73:1b:41:1f:0b:8a:eb:ea:73:82:a1:71:03:e7:
ea:5a:e8:63:cc:d0:3c:19:ee:bc:25:a9:9b:a7:6c:e4:5a:0e:
d7:d5:98:9a:fc:85:aa:05:70:f6:8b:37:cc:ee:1b:f6:4d:98:
09:ca:bf:d5:74:ea:92:34:33:1f:75:df:f0:c9:55:7a:59:60:
a1:13:3c:bd:ac:0a:51:15:67:9c:a7:8b:ab:5a:93:28:c4:9a:
8b:d3:12:fd:01:22:86:25:de:77:53:9f:0d:b0:9e:8b:b8:d6:
6c:78:d2:c6:cc:9f:96:94:1d:e0:8f:9d:69:37:e0:c1:35:38:
73:57:2b:fc:71:e5:45:29:37:33:73:91:53:64:d3:08:35:d4:
17:66:2b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:33:05 2025 by rpki-client