Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: AuozMWPlRj61aNKZoHmhrCzuGv0H6u9U8ZFpNABOtYI=
Subject key identifier: 33:87:3F:CE:D2:9E:BF:E9:79:54:02:13:3F:50:DD:FB:C2:E3:E5:19
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 019687DBBC33BAB3BB3483031BE7E08C70C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 0DF2
Signing time: Wed 30 Apr 2025 18:00:46 +0000
Manifest this update: Wed 30 Apr 2025 18:00:46 +0000
Manifest next update: Thu 01 May 2025 18:00:46 +0000
Files and hashes: 1: 7z6VwEslCL2FPJkLcnWBqsZx-Yc.roa (hash: 4HX05uMrwNGyncqNvEyr0SjiIMdyEc2AyvawA9NsEGo=)
2: H1ODV9W4buqhl3EqdtbJBcTx8bE.roa (hash: ACjxboSyCSfEn+fJ3xsL41v0ySwcobd1/VO5RHv6Sbs=)
3: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: WapwMatBqVplKkv/8WbLg2FwVhe4/tU3rgzDdY3rqQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:bc:33:ba:b3:bb:34:83:03:1b:e7:e0:8c:70:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Apr 30 18:00:46 2025 GMT
Not After : May 1 18:00:46 2025 GMT
Subject: CN=33873fced29ebfe9795402133f50ddfbc2e3e519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:13:e7:c3:28:7d:06:65:0b:63:0b:07:ee:
65:e7:d7:06:e4:6a:fc:81:52:15:f3:c6:8a:97:f2:
ba:95:0e:3b:36:01:c9:72:dd:d5:95:5e:f0:93:04:
f1:56:92:9f:fe:9d:5f:18:c4:b1:00:bc:ba:be:b4:
bf:cc:fa:46:ea:e3:fa:c6:66:35:4a:7d:40:58:95:
ce:84:81:47:94:da:1e:8c:c6:9b:e4:dc:e6:88:09:
66:43:7a:91:de:82:4b:5b:b7:78:5f:d4:e2:47:62:
4f:a9:8e:b4:39:c1:c1:b0:6f:2f:b2:bd:a6:b4:05:
5d:72:a4:72:df:b8:d9:37:20:3d:41:f1:50:0c:a5:
ec:ab:33:95:9a:ab:cd:4f:8c:aa:ba:2c:fc:05:3f:
5c:55:f4:d8:51:25:a7:b5:04:7d:71:93:d6:7f:dd:
17:e2:bf:89:9a:d3:e1:74:78:e1:1c:a1:75:3a:8f:
be:a8:4c:01:52:f1:ca:ea:d9:50:54:f2:30:c2:22:
91:f1:32:19:86:46:38:31:da:1e:68:be:f5:66:e5:
74:47:c7:7b:06:81:90:bc:2f:01:90:3a:a4:b3:4f:
cd:e9:e8:e2:4d:60:5d:64:86:60:94:7e:78:29:b9:
16:4a:13:3f:32:46:da:3a:16:e1:1b:08:4e:4e:e7:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:87:3F:CE:D2:9E:BF:E9:79:54:02:13:3F:50:DD:FB:C2:E3:E5:19
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c4:38:fb:f3:3e:52:4a:20:ae:22:34:43:f7:73:35:4e:80:
dd:b8:3a:08:cb:1a:cb:eb:cb:b3:19:ea:cf:ea:db:97:7e:3a:
1d:58:7e:cf:45:52:da:ce:9d:14:e8:61:a9:d2:9c:14:13:30:
3d:70:18:6a:67:c7:49:39:2e:c2:ce:9c:c1:2c:6a:0a:bf:63:
22:40:d5:5b:97:4f:f5:42:2b:d6:f4:cb:f7:59:cc:60:6a:69:
63:bf:2b:bf:76:b0:a5:18:20:2b:52:87:2e:8c:43:88:3e:c4:
59:88:22:dd:66:80:77:01:95:0c:c5:08:7d:af:46:17:f1:10:
63:58:26:1b:a4:c5:5d:8f:ca:93:61:3e:46:8f:f6:fc:de:fb:
1d:f1:96:7c:48:f2:e6:a6:38:66:93:80:c5:51:5f:b1:f5:53:
49:f0:db:f0:26:af:74:5a:bd:7e:3a:fe:e6:b2:cb:76:09:cd:
02:3f:56:c3:7a:fa:85:7c:1d:03:0a:e7:e9:3b:16:84:a4:7f:
ac:95:b4:68:da:a7:8a:f9:7e:96:3c:92:99:70:ca:f4:dc:3e:
b5:10:67:54:81:75:29:22:65:18:72:38:64:2e:f7:2e:45:3c:
9a:c7:95:3f:de:5d:25:64:8a:44:34:ac:d3:78:7b:63:b1:44:
00:7a:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:28:08 2025 by rpki-client