Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
File: _J8k6-8Ri5Fl5S9hypk77kMGTsI.mft (raw, json)
Hash identifier: nCVBuQP3GvpDucNKv9omJ5YyQWdEijWurPhrKRACQbU=
Subject key identifier: 6B:38:80:0E:64:1E:90:25:AC:2A:8F:BE:A0:0C:B3:C0:D6:50:DB:55
Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
Certificate issuer: /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Certificate serial: 01967679CF8EA0EADB0E7A6FC23C2F965BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
Manifest number: 14A2
Signing time: Sun 27 Apr 2025 09:00:16 +0000
Manifest this update: Sun 27 Apr 2025 09:00:16 +0000
Manifest next update: Mon 28 Apr 2025 09:00:16 +0000
Files and hashes: 1: 0Z7zdgD4hEOFjj_4hKMVcy7j-3w.roa (hash: derKa6RxFEVM7g9Xe9HEgRdoNKySPR/cieLuP8cX31E=)
2: _J8k6-8Ri5Fl5S9hypk77kMGTsI.crl (hash: r5NnpFHaPsbwLb2N+tz63GOk+u/seBeCkoO2wj0oOKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:cf:8e:a0:ea:db:0e:7a:6f:c2:3c:2f:96:5b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Validity
Not Before: Apr 27 09:00:16 2025 GMT
Not After : Apr 28 09:00:16 2025 GMT
Subject: CN=6b38800e641e9025ac2a8fbea00cb3c0d650db55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:77:72:77:a2:e0:e2:5d:4d:ff:9b:8e:4f:
43:c2:e2:63:0a:4f:46:25:2e:6b:09:12:51:84:c6:
2f:70:17:78:c2:64:d4:2f:32:d3:00:a2:13:57:28:
b2:70:48:33:53:16:f5:d0:b6:f8:97:d8:87:97:2f:
4f:fc:92:38:66:90:88:3e:60:ab:4b:71:cd:d3:ef:
9c:8c:b6:64:cb:6f:e1:ec:63:09:be:e2:70:dd:ac:
51:9e:0a:06:44:cb:d4:91:45:32:e4:89:cd:6e:76:
27:c3:ee:36:39:6f:91:b3:be:c9:9f:95:28:5c:29:
fa:bf:08:74:6b:c9:e6:05:c5:b7:07:49:82:97:97:
8f:fa:be:77:f2:fc:2b:16:72:a8:f8:df:dd:8d:c1:
b8:22:ca:32:80:95:4d:4b:84:c4:63:ab:a7:53:35:
69:7a:f9:4f:93:c5:b4:04:53:d4:7d:6f:0b:a3:f3:
bf:40:02:4e:68:68:aa:c4:9c:4a:48:34:9e:2e:39:
18:9b:86:51:b9:ba:81:71:16:c5:80:a1:40:1a:a4:
91:77:c7:a3:47:99:e6:eb:46:94:8d:12:96:d5:40:
3b:81:d2:e5:fd:7a:10:d5:ba:0a:77:75:a1:3e:e6:
81:b4:9b:9d:19:d7:9e:f0:7e:d1:51:fd:40:18:4a:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:38:80:0E:64:1E:90:25:AC:2A:8F:BE:A0:0C:B3:C0:D6:50:DB:55
X509v3 Authority Key Identifier:
keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c5:0a:bb:08:5d:02:38:18:19:1c:5b:b1:e1:be:fa:3a:33:
cb:28:d6:6a:96:91:10:dc:98:3f:be:1f:df:05:06:2b:ce:36:
35:cd:31:d8:9f:d9:6f:da:6e:ee:53:09:10:2d:5b:9a:47:cc:
0f:ab:05:05:7d:c2:58:ff:a6:43:2c:03:d6:d8:f3:75:fd:97:
51:d3:96:b9:e1:2f:19:e7:25:8b:53:f9:ec:a2:5c:8c:80:8b:
84:92:7f:9a:8b:53:b5:1e:c2:aa:30:18:59:bc:11:df:88:da:
3d:1e:ac:0d:c6:48:61:6c:a6:4f:71:5e:1d:ab:11:50:eb:39:
2d:02:dc:dd:97:4c:c6:3e:21:e6:5b:4d:ea:95:1f:0a:84:31:
86:f1:aa:6f:59:26:0c:36:cc:0c:9e:08:a1:95:19:1b:95:d6:
2f:8e:b3:80:e9:06:3a:21:9e:a8:ef:3b:36:ad:f2:53:d0:55:
49:85:d2:cb:f3:0a:07:e5:4b:45:db:30:33:67:20:9c:32:f8:
b7:29:97:68:74:89:fb:63:ed:23:1e:37:2e:82:1c:f3:49:9f:
39:ec:c3:40:94:26:99:5b:0c:d9:35:50:21:ff:05:ba:31:aa:
d6:77:29:7b:94:21:56:3b:ec:74:c2:ad:f1:59:f6:0e:d0:2d:
8f:b7:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:13 2025 by rpki-client