Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
File: J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json)
Hash identifier: QUmQ+1vmhLrCzSxp0pvCcN4Px+/GhXxuQnHpunoWT58=
Subject key identifier: C3:B2:43:28:ED:65:18:E3:32:0D:23:BB:67:27:0D:7F:03:1C:5F:8C
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 019673B00B5AA3CC4CAA257E7BF4DF73B0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
Manifest number: 0A62
Signing time: Sat 26 Apr 2025 20:00:39 +0000
Manifest this update: Sat 26 Apr 2025 20:00:39 +0000
Manifest next update: Sun 27 Apr 2025 20:00:39 +0000
Files and hashes: 1: 69H9nuaYzzRi_7MRSIl6AwfMEZ8.roa (hash: AKZV5AcjjaPBsRFuJ1owk+1YCbQLVZHHRJVdcXrDf9Q=)
2: Eqz6HqbOHRxUsIdz-CIFT589G8w.roa (hash: NYwF+vNi32nyXeOdW5n0mZaZ/W25jWq6A2FW0FtVszo=)
3: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: jl6nPRQkmZl2opXU5n6MfoegUPO2kqW+m7n1FJm4FOg=)
4: QMgP50QUErIVfe6bHrHbEcBqS0o.roa (hash: SzUA4iffOvayoUI6Lybdi08Ue69lvJ7eeJxQaa9p+NY=)
5: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (hash: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=)
6: Tw_Tm39J15PuLnPwr2dqvdn-Dh4.roa (hash: a0LH5SVtRHj2tzuff6IHJP/0pDujnltOOGwLPXcyclc=)
7: UbhKTUtkHjo_ZsDZsH9chOAS5Pk.roa (hash: t5m+joa43DrACa1COVuvlEQZ8bumjEYK0AXo1j3w3vs=)
8: luLxlcgh627v0OkdM0129_I_xLE.roa (hash: 0IA00NfTMeZkBm2M+KVm/0zXxqax1M++emDllDikDHM=)
9: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (hash: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:0b:5a:a3:cc:4c:aa:25:7e:7b:f4:df:73:b0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Apr 26 20:00:39 2025 GMT
Not After : Apr 27 20:00:39 2025 GMT
Subject: CN=c3b24328ed6518e3320d23bb67270d7f031c5f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:df:1c:c5:37:b4:6d:d1:fa:99:a2:be:ce:
7f:f2:cc:9e:6e:7d:2f:07:1d:53:d6:1b:c7:d8:10:
b7:f8:b1:87:a7:c3:87:79:6e:90:bb:02:b0:d3:73:
bb:fe:fe:0a:65:1a:42:9a:86:f6:5f:88:30:0c:48:
d9:2b:d7:de:f9:09:27:cc:98:c9:25:40:36:57:df:
f9:49:42:4e:e9:70:1f:1f:96:02:df:43:2b:38:c1:
41:62:11:c4:30:c7:3a:ea:b4:f8:2d:b1:b4:76:7c:
47:32:46:3b:6c:60:8e:36:a4:47:20:50:aa:a2:d7:
e7:53:79:39:b3:b2:c1:4a:1d:05:59:ae:e7:99:11:
62:13:54:e8:8f:ff:b3:54:e1:9a:b8:f8:2b:ba:94:
75:62:5a:c9:73:46:53:44:b8:0f:d4:8e:c3:83:52:
d1:bd:17:d8:bc:16:eb:6d:50:6e:3e:a3:c1:b2:71:
d9:a1:ba:34:e0:b6:c3:6a:e3:35:1c:84:90:54:2f:
56:fa:a7:77:48:72:17:97:47:67:83:89:15:13:8a:
d1:3c:cc:7b:92:ac:24:0e:75:d2:ca:a0:92:e4:9c:
fd:65:65:8c:f2:97:3e:35:a4:00:79:53:49:3b:40:
e3:00:24:85:a7:90:ea:91:0b:65:bd:b0:d1:28:52:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B2:43:28:ED:65:18:E3:32:0D:23:BB:67:27:0D:7F:03:1C:5F:8C
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:da:33:94:da:b6:86:bb:f5:60:8c:b0:5b:a7:aa:3d:64:bf:
52:f9:79:98:8c:cc:f5:89:24:aa:a5:76:13:9f:24:7e:24:bd:
55:e8:bf:61:8f:04:40:a9:c2:f6:e3:b6:db:2b:f9:5c:1c:3f:
25:d3:04:02:e6:6e:89:fc:1e:fd:8a:0a:4f:3d:f7:e2:9b:71:
1d:e2:cc:1e:52:7e:4d:d6:ab:05:ee:8a:da:cf:76:4b:6e:42:
60:9b:3c:a6:79:38:38:6c:0d:6c:5c:cf:09:c5:9e:e0:68:06:
5c:5d:b8:98:8e:be:f5:39:a1:67:3a:e9:cc:ca:1b:d5:a9:fc:
a4:b6:35:3d:a5:78:44:24:5d:86:c5:d0:3e:0a:33:e9:03:cf:
d3:db:4d:47:92:56:5d:1a:9a:18:3e:44:ee:ad:db:3f:c8:24:
88:a8:7c:6c:a1:98:9b:2d:06:d8:29:0c:05:50:04:66:e7:ea:
21:a7:f4:d9:de:09:09:8c:7e:29:e4:e3:33:91:e9:1c:21:0c:
b3:ce:fe:93:1a:a4:4a:9e:65:08:c3:9b:70:11:ee:4c:1d:c7:
df:d9:d1:9d:74:03:73:a4:19:2a:aa:13:4d:66:f4:16:90:89:
69:d3:f1:93:e2:36:e1:7a:a8:6f:51:73:32:27:67:5d:28:87:
22:17:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:36:15 2025 by rpki-client