Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
File: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft (raw, json)
Hash identifier: 4A+QJUc0rqYJE2H05tp2dv3ppU3nZL4/n0N6mIPjq/0=
Subject key identifier: BB:57:78:AE:5D:C2:1D:2E:42:0F:D0:35:1B:12:C9:B7:1F:8F:67:23
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 019674C26E485E900E3D8DA670AEC6B7F5AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
Manifest number: 121B
Signing time: Sun 27 Apr 2025 01:00:21 +0000
Manifest this update: Sun 27 Apr 2025 01:00:21 +0000
Manifest next update: Mon 28 Apr 2025 01:00:21 +0000
Files and hashes: 1: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl (hash: LcplzipBv3OOgXYrSneKAdVZyH4QKOSMpVUtsdF3lOU=)
2: qT62sQgJ7wYZrGkOwUrBAOZW36U.roa (hash: LRDn9R97dLgxGAtTPJOW62pBW4f3rWtLvCdfekL/e2M=)
3: u-G-BjNkzDN41_akwDoArPHas8I.roa (hash: 3oV8r7qGwqy7avjI+jDPXV4J2Rs9RBfex18bpzCreTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:6e:48:5e:90:0e:3d:8d:a6:70:ae:c6:b7:f5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Apr 27 01:00:21 2025 GMT
Not After : Apr 28 01:00:21 2025 GMT
Subject: CN=bb5778ae5dc21d2e420fd0351b12c9b71f8f6723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:fd:a7:48:61:c2:53:47:9c:8a:47:e4:a9:
ee:bb:03:5b:19:ee:b3:51:eb:ca:1a:a0:22:c8:b6:
c1:3b:77:8f:51:1f:5f:6d:06:4d:98:cd:25:73:8c:
ae:a4:b3:d1:56:1c:ba:58:08:17:3b:5a:ca:37:3f:
ae:68:3a:86:09:f7:5c:2e:87:6c:e3:58:d5:0c:0b:
98:dc:41:37:98:74:b8:ec:cd:98:00:68:58:c8:db:
aa:a4:07:87:54:35:e6:24:0d:85:14:53:60:bf:f4:
0b:8e:a3:d4:17:b3:fb:84:1a:ca:7f:9b:8b:86:92:
49:c5:fa:99:e9:67:77:49:39:55:6c:91:63:03:d7:
a7:51:ec:4f:8f:a8:6f:56:97:30:95:57:ec:52:d2:
b4:b6:fa:11:79:39:4c:f7:bd:68:01:60:5f:7a:d2:
7e:04:f4:46:7b:41:d9:5f:75:22:63:c1:b0:ff:ab:
cb:ae:ba:48:f4:59:17:a4:12:53:6f:58:13:77:8a:
c1:0b:79:3d:94:5c:eb:08:f5:a1:d4:3f:ed:1f:cd:
fa:9c:6e:76:da:65:8a:f6:f2:85:34:55:7e:ff:a8:
e9:c7:ff:48:99:fa:71:e5:d3:d3:6b:06:00:8d:b8:
7f:1e:f2:a5:81:01:d6:80:8f:cf:93:2e:1e:a0:98:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:78:AE:5D:C2:1D:2E:42:0F:D0:35:1B:12:C9:B7:1F:8F:67:23
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:61:57:05:cb:62:6e:02:04:f9:9a:52:e1:37:9b:8b:6f:d5:
79:f2:4c:ce:8f:e3:60:61:2d:b9:62:30:51:be:b9:c0:9c:f6:
08:25:67:b6:0d:79:02:e2:1b:71:64:d0:57:07:6c:ff:02:09:
ef:56:11:e6:5c:1a:78:09:2d:89:96:a5:4c:8f:87:f3:71:d7:
a8:9f:65:0e:10:0d:92:21:cc:51:81:d6:7a:a7:45:bb:0c:98:
02:e5:3c:07:cc:c6:6e:7e:d1:1c:54:ee:4e:13:1c:72:8f:12:
20:ba:b9:a2:6c:fd:d3:e0:bf:b0:0b:4c:52:ec:ec:4a:6b:f0:
0e:4d:2c:1d:1a:d4:cc:22:bc:b2:32:47:ea:80:d5:79:8e:7b:
28:c3:35:79:f6:d5:f7:5c:4a:79:8d:9f:fd:79:d3:e3:8f:5d:
22:47:26:0f:6f:9c:81:73:c8:f9:ae:88:3d:6e:88:a2:82:21:
8d:c3:85:52:71:07:9f:ea:39:a4:73:33:a8:03:e0:22:05:76:
30:c1:ac:26:48:c3:fa:19:d3:d6:b4:18:8a:60:db:4b:4f:a8:
00:04:e5:0a:3c:63:85:9c:df:1c:35:0b:7d:20:a3:0e:3c:0f:
3a:6c:2e:69:fb:74:69:7a:d9:93:f1:40:a6:09:0a:fc:72:3f:
7e:ca:f2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:07:47 2025 by rpki-client