Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
File: J84emmUiYWqzCw8SPgnTBagjBK8.mft (raw, json)
Hash identifier: v+TkNXV+Trwpm0n8Na35SLMwnBAg8h3OMqXptU+SYuM=
Subject key identifier: F9:8A:A4:A8:58:AD:8F:53:7D:8D:70:6D:C0:DD:F4:B8:9C:75:CB:F4
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Certificate issuer: /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial: 01968322DD6048224877AE722E7A4F2AD21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
Manifest number: 151C
Signing time: Tue 29 Apr 2025 20:00:22 +0000
Manifest this update: Tue 29 Apr 2025 20:00:22 +0000
Manifest next update: Wed 30 Apr 2025 20:00:22 +0000
Files and hashes: 1: J84emmUiYWqzCw8SPgnTBagjBK8.crl (hash: pCSPfqFjL7vnCRw3zFlUFhFpgqkyxNTvMPqWt2CQNvU=)
2: WgYDhL0i6U8cqNQpr57kES37q38.roa (hash: RKIGt1CKlAHIm7PDdsvYymoW20pcRCPFEmrAdn3vZno=)
3: xfeGCbXD-YF0qFrPXVL_VBgsViY.roa (hash: +QvSz3wl8pHqddA2o6rF3CbvD6JrTHLlFmQPhouhbbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:dd:60:48:22:48:77:ae:72:2e:7a:4f:2a:d2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Validity
Not Before: Apr 29 20:00:22 2025 GMT
Not After : Apr 30 20:00:22 2025 GMT
Subject: CN=f98aa4a858ad8f537d8d706dc0ddf4b89c75cbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:6f:8b:65:88:1e:63:f4:ef:a3:29:d7:f7:
d1:f2:58:44:ed:ec:c8:57:b4:09:6f:0b:2c:af:33:
50:35:88:da:af:ae:74:19:7a:17:12:33:4b:1e:61:
f5:e7:75:78:17:82:a7:f7:ae:b0:a8:63:3c:bf:5b:
44:b0:7c:5f:99:9a:a4:4e:92:89:50:fd:18:a4:b0:
33:fe:22:7b:10:02:d5:db:1a:50:68:4c:d0:31:de:
9b:43:40:79:fd:73:96:d7:df:4c:fb:8b:75:8f:2c:
9f:ae:fd:1d:72:53:91:75:c1:e0:2d:69:1b:97:a9:
ce:ac:2c:5e:ad:8c:54:36:65:55:03:c8:ac:d4:cc:
49:15:34:ff:1d:46:ad:2b:d5:0b:36:ac:b3:ea:cb:
59:b7:d1:3e:81:e8:14:07:6f:ef:5c:0a:49:68:c8:
d4:2a:48:8d:66:d1:95:19:2c:c3:cd:b3:6e:12:0d:
cf:8c:c4:29:c7:0e:0f:8b:90:bd:3e:7b:17:7e:59:
49:4e:e9:96:1b:bf:f0:cd:17:71:12:d9:a4:51:88:
86:89:25:85:37:58:7b:0e:79:51:4f:e1:f5:53:0a:
34:26:b9:c5:61:d1:ca:1f:62:8c:09:55:0c:a4:cb:
15:77:b4:4c:00:3f:17:c1:af:96:62:4b:cb:13:42:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8A:A4:A8:58:AD:8F:53:7D:8D:70:6D:C0:DD:F4:B8:9C:75:CB:F4
X509v3 Authority Key Identifier:
keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fb:6d:ff:aa:a8:e8:1f:e6:de:9a:75:53:14:50:96:da:16:
d9:3f:af:63:d5:69:6a:a2:da:c2:e6:df:32:a7:92:37:3f:4b:
fa:43:48:e3:7f:15:47:37:31:db:a4:d6:56:15:39:52:cf:86:
b1:f2:cd:df:5c:db:ef:03:69:ca:0a:2b:df:35:21:5d:91:73:
05:10:02:b2:47:a1:63:69:73:77:70:a6:f9:db:54:b1:ec:a1:
c9:76:e8:d9:f3:af:fc:aa:3b:e8:55:57:bf:52:f8:30:24:cb:
71:c3:6e:85:86:87:86:12:e0:f6:32:6e:e8:b9:88:0a:15:34:
20:44:1a:a7:9c:5a:72:5b:15:af:3d:31:8a:bd:8b:e7:ff:91:
13:2c:29:36:aa:4f:1c:42:85:17:03:66:a5:e9:36:69:55:8f:
03:4c:cb:08:0e:93:c7:62:c4:8d:e5:13:bd:a8:c9:09:8b:65:
19:a8:49:da:6a:e4:bf:db:99:3f:f5:6c:ab:68:ac:44:f8:14:
b8:53:7c:bf:f6:e6:2d:d3:e2:e1:e7:86:88:b7:32:65:af:f4:
2a:a5:a9:cf:69:f3:b3:5e:de:e6:a6:76:d0:b7:ad:96:1e:fe:
65:ba:9b:83:77:88:19:d7:2e:a5:10:70:e0:5d:8f:e8:75:3f:
29:55:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:41:25 2025 by rpki-client