Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
File: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft (raw, json)
Hash identifier: 9onKTgeBfcJmpZTEZr9Q84hOyDPNpTZAA0HbLSA71hA=
Subject key identifier: A9:88:3C:6C:32:B3:A0:CD:CD:1D:57:1A:AC:25:2D:C2:E7:9E:E5:C2
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial: 019687A4D0253EC41F1F67337DB7754C6396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
Manifest number: 1356
Signing time: Wed 30 Apr 2025 17:00:47 +0000
Manifest this update: Wed 30 Apr 2025 17:00:47 +0000
Manifest next update: Thu 01 May 2025 17:00:47 +0000
Files and hashes: 1: 32DmFG6eckwT_cmIA6P2GvExV8o.roa (hash: QAbNn1NoMo9kTBTTYBudg/heTTEApB1Axs6m2LEO3wM=)
2: 8mfWKUaTIk1RDd44sNUtQ4HsM2s.roa (hash: GuIpyglmMkqHqRdMJ131I6La+nXiqbtWAj+MwrMR+Yc=)
3: Ht6FsCIGKxXaA3P0oIyjphKEPpk.roa (hash: jQWJMmY8DgPGrpE2GgmGMr1+l/UtziWDhgw2WyC6x2Q=)
4: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl (hash: PQLEM6FfC4Y4FgSVU7cKA727QYF1snNSF8GOM7l7PqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:a4:d0:25:3e:c4:1f:1f:67:33:7d:b7:75:4c:63:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Validity
Not Before: Apr 30 17:00:47 2025 GMT
Not After : May 1 17:00:47 2025 GMT
Subject: CN=a9883c6c32b3a0cdcd1d571aac252dc2e79ee5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:e8:78:33:44:c5:50:94:14:c2:4a:c3:f5:
af:9b:a1:79:08:7a:d9:25:b3:14:d0:7a:47:65:4d:
1d:21:f7:d5:6c:30:16:aa:36:75:77:1e:1d:bc:ae:
f9:ac:57:01:a8:78:2b:1a:9f:dd:88:39:6e:39:04:
69:03:1b:6f:1b:3f:6f:86:ac:bb:3b:77:f8:8e:9b:
80:ee:ad:f5:8c:69:50:f7:b3:8e:e2:86:e9:5f:bc:
57:9b:cb:74:5a:f7:7f:2f:7b:51:63:70:ed:cf:5f:
db:5b:89:e0:0c:35:d9:80:0a:c1:bd:01:fe:53:80:
86:4a:69:2d:49:a8:d8:41:2b:c4:fa:0d:87:b5:6c:
4e:83:d8:eb:0a:80:bc:6a:5f:1d:68:f1:8a:3e:b3:
c9:4d:69:da:4e:ab:24:10:c4:1f:3f:da:aa:2a:1e:
f4:f3:ea:43:82:fe:a1:72:73:62:73:f0:20:52:c5:
eb:8e:15:7b:6a:b7:ec:1e:9c:db:6b:92:8c:aa:80:
ce:02:6d:e4:bc:5e:09:0c:2e:30:fc:23:3f:f3:c3:
a5:02:f8:16:37:1b:57:d5:b9:4d:bb:ac:49:e0:35:
e7:64:f1:70:37:c1:a9:6f:6f:11:40:59:22:05:87:
f7:08:5a:2c:94:5b:a3:ef:e1:ef:7f:9d:59:70:91:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:88:3C:6C:32:B3:A0:CD:CD:1D:57:1A:AC:25:2D:C2:E7:9E:E5:C2
X509v3 Authority Key Identifier:
keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1a:6e:a0:a6:b1:fc:c8:6c:1f:75:9e:92:75:5d:59:d1:1f:
f3:89:d6:1a:fe:75:89:28:7b:30:61:85:4a:37:ce:26:cf:7d:
69:5d:5c:0b:7d:ab:b8:ec:cd:02:67:96:cb:83:73:1f:27:76:
74:98:fe:60:7a:5d:22:ec:9c:82:0b:28:e3:28:a4:20:01:ee:
04:a5:81:4e:84:e7:4d:ce:b1:45:35:67:d4:99:e3:31:fd:df:
6f:43:8a:8c:d5:f4:b8:26:c1:4b:3b:6d:60:32:23:82:7f:fb:
a3:eb:b6:3b:71:59:1c:8d:dc:b4:a0:37:b1:7d:40:de:d9:38:
00:b2:4a:e7:ed:ae:7c:50:70:1b:75:af:dd:30:8d:59:35:2c:
d5:9e:94:21:dd:82:50:ce:d7:5a:1b:6e:b1:d6:b3:1b:ad:ab:
2c:35:71:59:85:a7:df:d9:65:a3:b5:2d:45:71:78:68:4b:de:
54:dd:d4:c8:df:f9:7f:ec:bc:86:4c:b8:d1:85:15:84:09:e1:
26:92:7f:f1:24:dc:50:6c:53:3e:3d:df:20:ed:54:4d:0b:05:
30:77:cc:5f:a8:8b:d4:c5:de:3f:ba:97:7c:32:3a:83:fe:7d:
2e:07:d5:93:57:30:db:74:57:3a:f1:cf:4a:7e:7e:49:07:e0:
58:33:92:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:24 2025 by rpki-client