Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: Mdtf0PllQeKXXmPmRBydmpsu9oKbtoLhN3f2vWlFiN0=
Subject key identifier: 4E:9D:B0:D3:95:94:4E:08:DC:0E:65:AD:89:35:16:A0:32:80:BF:5D
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 01967DFCF36FB9F7BB571C92D9F9CD1C3626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 20:00:51 +0000
Manifest this update: Mon 28 Apr 2025 20:00:51 +0000
Manifest next update: Tue 29 Apr 2025 20:00:51 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: jXEu2G2RvW8adyMJQ/59fsdZzcoZKdkGLi6fZaWZPXw=)
2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:f3:6f:b9:f7:bb:57:1c:92:d9:f9:cd:1c:36:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Apr 28 20:00:51 2025 GMT
Not After : Apr 29 20:00:51 2025 GMT
Subject: CN=4e9db0d395944e08dc0e65ad893516a03280bf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:8f:98:50:d0:98:5e:f7:b3:f1:04:58:40:
2a:06:ec:c9:c2:0c:b1:d8:b8:82:84:ae:36:fb:14:
10:c7:8a:23:5a:84:48:12:3b:7f:19:a6:de:c3:10:
e6:97:5a:d3:7a:02:aa:1d:8d:7b:80:c9:0f:70:27:
71:ed:85:31:36:4f:28:b8:9e:4e:66:ae:02:ee:27:
e7:1d:fa:25:66:b2:1f:eb:36:84:58:bc:cc:6c:ae:
91:64:26:d6:c8:4b:f0:b1:54:e2:7a:3b:eb:a3:f3:
4e:96:18:1c:4e:f9:2a:6e:6e:61:c5:6d:c3:42:d5:
88:03:26:d9:67:3d:ad:f8:d2:9f:40:fb:01:4f:a0:
c7:b7:0f:67:db:2e:55:3a:c6:20:80:e3:97:89:5d:
5c:d0:9e:f3:eb:6e:ac:e5:87:0b:77:b0:11:5a:91:
d3:47:f7:d2:96:a2:8c:eb:c0:f6:38:c2:1c:96:d0:
fd:cc:cc:c2:9f:82:95:95:84:ad:19:62:7a:5a:9d:
67:ad:19:5f:2c:23:1c:c9:15:74:a3:7d:63:e0:96:
94:38:d2:3f:de:00:ee:94:6f:6d:f6:b7:15:04:cc:
da:3a:84:80:aa:16:96:f6:ce:e9:57:b5:a1:85:b3:
3d:14:3c:e0:99:22:b5:b9:10:b5:03:fc:2e:a4:02:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9D:B0:D3:95:94:4E:08:DC:0E:65:AD:89:35:16:A0:32:80:BF:5D
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5e:7a:ee:81:bc:d8:1f:fc:27:69:21:d1:43:af:dc:65:c3:
ad:8c:52:65:9a:88:1d:b8:7f:b1:30:77:28:d7:8c:1c:a9:40:
45:90:77:6c:e6:2e:56:de:a3:06:3f:4f:ce:ea:2c:ca:fd:8a:
ee:16:ec:d9:e8:d6:1e:fe:a9:99:be:8f:11:34:74:09:3d:84:
39:8c:c5:96:95:a1:ba:ad:57:5d:63:ee:85:d9:09:cc:b1:15:
ff:a5:ad:05:cb:04:08:94:1b:de:b6:a7:96:87:e9:49:17:27:
09:bb:cd:f2:1f:e9:78:67:67:83:fe:23:50:6d:d5:34:1b:ae:
25:17:17:32:f9:45:be:33:9a:43:e4:2c:c7:8e:1a:e7:50:ef:
dc:63:4d:42:ec:76:83:04:56:f3:9f:de:d5:45:64:2b:eb:2e:
75:04:f4:91:17:7e:6c:db:4a:b7:f0:b6:ad:73:13:56:12:65:
11:2d:2a:ba:ea:54:dd:c9:c3:1c:b0:63:1f:d0:c8:2d:e6:f1:
82:1a:0b:da:1a:64:86:17:4b:70:5c:55:94:5e:d3:1b:ca:3f:
19:73:5c:a9:b2:8a:1c:a9:42:d6:33:54:4f:66:bf:3f:b8:ba:
47:fb:68:9a:04:7c:47:af:d6:85:4c:e4:95:ec:10:b6:1a:3c:
3d:18:74:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:27 2025 by rpki-client