Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier: diZyZ9m+/h/I6flLJG0fJClgqfqc85ZrW/TKm0Ru2Gg=
Subject key identifier: CC:BB:B8:5B:3D:9F:46:4B:81:A4:F7:88:A0:24:4B:08:D8:DE:AF:33
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial: 019691F177A0A022EF135BB7E9351B2D505C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number: 14AC
Signing time: Fri 02 May 2025 17:00:43 +0000
Manifest this update: Fri 02 May 2025 17:00:43 +0000
Manifest next update: Sat 03 May 2025 17:00:43 +0000
Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: 6TCOleYgl/2zRPIcrTmZgeMBe0GqG9pz692ovsMrFBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:77:a0:a0:22:ef:13:5b:b7:e9:35:1b:2d:50:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Validity
Not Before: May 2 17:00:43 2025 GMT
Not After : May 3 17:00:43 2025 GMT
Subject: CN=ccbbb85b3d9f464b81a4f788a0244b08d8deaf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:a3:27:90:91:38:fb:d8:75:39:e3:43:2e:
9d:23:d9:65:4c:df:10:e0:fb:09:a9:53:f6:d4:84:
c5:fe:ce:c7:01:f6:7a:00:00:69:df:d3:fe:d2:0f:
2d:f7:db:7f:25:c0:5e:56:50:22:b6:8a:37:a0:9e:
89:a3:26:27:d3:23:f1:57:c1:e8:d4:4a:6c:67:9d:
3d:cc:cc:bd:21:b1:60:50:d8:33:95:3e:18:45:19:
07:53:cf:9e:a1:aa:cb:c4:11:bd:b3:ed:be:50:56:
42:bd:7d:95:92:34:75:ac:64:ee:78:ef:08:6b:12:
4a:88:be:ea:bb:25:be:92:f0:89:7b:8a:e5:aa:e9:
6d:ed:5c:27:97:db:b6:81:e9:9e:d2:0a:22:fc:0a:
ad:e3:6b:aa:1a:e1:e0:40:a1:50:3d:30:96:49:9a:
3f:4e:e2:0a:4a:62:69:f1:41:b5:2b:6f:15:03:be:
02:5f:fe:5e:43:2b:77:b8:62:ab:1f:ff:7d:01:b8:
0c:19:17:0a:df:83:e4:b5:ef:66:4e:45:3a:9f:a5:
9f:20:ff:81:d4:db:4b:c9:65:e7:a8:df:1a:fb:0a:
da:5d:bf:a9:1a:ea:0e:cc:30:23:1c:3a:2a:61:37:
12:09:3d:9d:86:e3:f7:f7:8a:65:6b:5d:f9:6a:e1:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BB:B8:5B:3D:9F:46:4B:81:A4:F7:88:A0:24:4B:08:D8:DE:AF:33
X509v3 Authority Key Identifier:
keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3e:e7:1c:28:81:3f:9d:41:14:a8:59:bd:99:82:c1:8f:b7:
81:44:e5:c4:ca:25:40:18:5d:cb:c6:c9:6d:be:6a:2d:4b:36:
b2:b4:43:43:42:57:a2:58:b6:e5:7e:27:3a:66:c5:44:b3:88:
ad:ca:78:5f:3e:2d:8c:23:b3:61:4f:3e:0f:43:66:d5:68:a5:
8c:5a:98:a0:2c:e1:88:43:fd:eb:56:fd:62:e1:5f:9c:63:85:
5b:11:ad:2c:09:21:05:40:94:a4:4a:e1:a6:8e:89:65:cd:79:
10:b9:23:b8:6a:1c:4d:46:c6:cb:d6:45:7a:97:23:33:df:a3:
b7:82:81:b9:5c:52:5f:6c:41:be:87:d4:57:02:70:4f:36:9d:
f7:75:ac:e3:ad:d6:68:84:aa:5f:4b:e7:a4:76:07:7f:ce:73:
bb:7b:e2:88:90:06:10:b1:e5:2c:ae:d9:9f:a2:fc:ab:ea:4a:
d2:a2:c3:2b:d3:96:91:3d:85:c5:cd:53:44:38:5f:1c:84:8e:
b7:9d:aa:fc:cb:69:25:23:d8:f9:cd:85:50:04:6c:2d:bd:3f:
10:88:50:0a:19:4d:52:70:40:cc:cc:ee:a8:49:ce:30:ab:61:
d5:0e:e8:04:bf:a5:02:e8:95:0a:ad:96:6d:aa:35:15:7a:ef:
ee:b1:00:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:21:25 2025 by rpki-client