Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier: 6x5Cv9x6IlC/30tqG+MkkWZQ0r7fcqvEKZnqetCUJRo=
Subject key identifier: 4A:52:AA:EE:C3:9C:E7:5E:9E:19:2D:8A:AA:2B:31:6F:7F:0B:31:6E
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 019657264F97AD19E7C383F49D366A6E814C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number: 07BB
Signing time: Mon 21 Apr 2025 07:00:50 +0000
Manifest this update: Mon 21 Apr 2025 07:00:50 +0000
Manifest next update: Tue 22 Apr 2025 07:00:50 +0000
Files and hashes: 1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=)
2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: YbVCxaPi90eFRGu32ppWXvcZZxQAtYABZ2liOo3J2eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:4f:97:ad:19:e7:c3:83:f4:9d:36:6a:6e:81:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Apr 21 07:00:50 2025 GMT
Not After : Apr 22 07:00:50 2025 GMT
Subject: CN=4a52aaeec39ce75e9e192d8aaa2b316f7f0b316e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:37:dc:c6:3c:ac:b4:94:20:af:a2:3a:2d:
45:cc:7a:65:72:ca:27:73:bc:27:21:4e:98:c2:85:
70:75:37:91:c4:27:32:33:b3:34:62:5c:0b:b1:fa:
83:12:a2:e7:e6:01:d3:ee:31:cc:73:e0:55:ce:77:
bc:f3:e7:e9:c7:5e:4d:b0:09:ed:ee:d9:d7:d1:0e:
ac:56:46:42:53:3f:4c:d7:d8:1f:c5:da:97:ef:62:
24:80:c9:33:23:64:4c:34:3f:c4:81:4c:a0:9e:5b:
bf:fc:32:89:73:b4:5b:ec:f1:59:48:f9:9f:da:43:
bb:b8:75:81:a0:a6:c8:ec:f9:4c:1b:91:89:5e:2a:
91:7a:00:76:ab:6d:b7:f9:41:d4:96:33:4f:38:86:
b1:6a:4f:5c:4c:e4:38:79:97:ea:44:8b:d9:b1:66:
13:3e:ad:d6:4a:4b:5a:a3:4c:fb:4f:74:a7:d4:be:
8b:0e:ad:ad:65:87:5f:39:dd:a3:e1:b6:5d:75:6d:
dc:5b:9c:52:7a:4a:3a:64:e5:6d:99:f5:8d:95:f2:
6b:13:0c:b6:7a:e7:93:aa:cd:30:21:cc:68:3b:b0:
a5:91:4f:04:3e:ac:d6:33:c4:1f:98:2b:c7:93:90:
b1:22:42:41:ff:d0:61:fc:cf:f7:4b:8a:b8:29:76:
ef:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:52:AA:EE:C3:9C:E7:5E:9E:19:2D:8A:AA:2B:31:6F:7F:0B:31:6E
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a3:de:c1:ca:cd:e5:a2:38:83:fd:04:57:65:df:43:58:e9:
34:09:f0:00:4c:16:2f:cc:36:b6:97:90:ac:02:72:27:1f:68:
7f:fa:2a:49:2b:fa:10:9b:64:76:7e:15:48:19:c9:f2:97:c8:
99:8e:13:32:b7:6c:d4:b6:75:4d:c3:6e:7e:fc:54:02:16:7a:
92:e9:f0:0c:90:a8:30:b8:b1:a3:8e:5c:e0:34:0d:e4:21:85:
bf:b3:4b:39:9c:79:34:3c:d6:44:0b:fd:f5:8b:ee:99:de:ad:
57:83:9a:d0:72:9c:69:4c:eb:b9:62:4e:0b:41:c6:61:e0:4e:
d7:0c:91:9e:8a:f8:5d:15:f0:62:43:61:c6:0c:06:18:d3:ac:
2c:34:5f:59:a9:dd:46:44:a7:2a:1c:ba:3b:a3:8c:e2:e2:5f:
cd:58:d1:f8:41:4e:78:ed:6f:20:e1:c7:4d:bd:91:07:9b:08:
93:ac:fc:1d:1f:22:98:9b:0c:b5:33:5c:7c:95:1e:89:ee:3b:
ae:04:d5:98:c0:bd:2a:9d:15:6f:f4:c5:78:cf:ad:2f:0f:c4:
6c:f6:03:ff:c4:c2:b5:10:4c:1d:e0:cb:6d:66:53:f2:63:29:
9b:e8:48:67:f5:51:7a:1c:9e:89:45:5e:c3:4d:31:5a:2d:ad:
16:8c:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:00:40 2025 by rpki-client