Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier: xisP/F8y6RFzvmRv0mMNJP+KSc0G9VzUcG7Ofn4lKME=
Subject key identifier: B3:0C:53:C7:7A:E6:48:B2:D6:98:03:C0:3B:38:A2:73:11:56:9D:CB
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial: 019659141C7F91E08D30DA1FCA4C5BC533E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 16:00:12 +0000
Manifest this update: Mon 21 Apr 2025 16:00:12 +0000
Manifest next update: Tue 22 Apr 2025 16:00:12 +0000
Files and hashes: 1: gWFI607GT4diptK6z6klQ2oZYkU.roa (hash: H46kA3fqfVNyrqG30wfIQclN0fJfVoNQ86D8lIAtPgI=)
2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: 8jEznsxzmwPJxJciiH4UtB4wq8zMhlCB3dCSlXZs7w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:1c:7f:91:e0:8d:30:da:1f:ca:4c:5b:c5:33:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Validity
Not Before: Apr 21 16:00:12 2025 GMT
Not After : Apr 22 16:00:12 2025 GMT
Subject: CN=b30c53c77ae648b2d69803c03b38a27311569dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:4c:b0:9a:94:71:2a:90:77:cc:09:0d:01:
40:21:b0:9d:1c:df:90:8c:79:15:89:f1:cd:1e:a0:
db:06:0e:c0:2a:d7:09:bd:35:8c:a4:ae:bd:17:4c:
48:8f:6f:7f:26:7f:c2:a8:d8:21:00:24:f5:b4:62:
2c:e0:51:54:59:7f:b8:e1:1a:ae:e5:48:69:da:7f:
74:33:58:9b:25:19:38:d9:9b:40:ca:f3:12:a7:27:
df:99:0c:f9:90:0f:e8:c0:4e:09:bc:0f:66:ff:4b:
3a:0b:bf:45:c3:ce:7a:3d:72:00:6c:6a:da:52:a9:
61:94:e0:aa:05:97:bd:6c:92:1e:bd:4a:d9:a6:52:
0b:2d:e4:93:c9:54:06:f3:fb:f9:11:da:d0:65:bb:
7f:a6:eb:c9:71:40:6f:3a:ba:f5:94:74:15:e7:b4:
16:6c:87:9b:48:ac:78:9d:63:18:3f:85:75:35:7f:
7c:8c:22:33:bc:07:5d:98:8f:5b:32:18:c7:ea:0b:
06:43:d3:6e:e1:3e:4c:4c:5b:6d:43:ed:c9:20:30:
a6:57:b5:62:bf:29:fa:d2:a3:f7:23:17:78:22:7f:
ec:be:29:d4:5d:19:1f:fb:1a:a8:56:82:85:91:f4:
e2:75:97:aa:02:dc:dc:46:51:fd:16:a0:ac:91:e7:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0C:53:C7:7A:E6:48:B2:D6:98:03:C0:3B:38:A2:73:11:56:9D:CB
X509v3 Authority Key Identifier:
keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:84:9e:6c:ec:da:b7:bb:82:f4:66:c9:fb:8c:5e:55:8b:7d:
a5:76:a3:32:a6:80:b1:58:fc:8d:55:c8:fd:8d:bd:73:c8:f2:
a8:82:8b:3d:8c:25:22:ce:85:97:63:4b:59:6d:8c:19:7a:02:
7a:11:ab:8d:d9:a9:8e:a2:42:4b:3c:c3:4d:bc:1d:c9:e3:90:
a5:62:71:23:e1:59:13:57:04:ee:9e:d9:1f:0b:43:74:53:5d:
7b:d0:14:5e:c3:d4:6a:2c:b4:43:3a:00:1f:bd:ce:be:8d:4b:
fc:84:8e:db:d4:d4:d1:6a:d8:6c:b1:f0:cb:66:90:e6:64:6f:
12:04:f2:cd:76:c2:b8:23:99:8d:36:39:bd:e5:44:43:0d:9e:
b4:f0:13:0f:ae:29:d7:fc:07:22:3a:c9:05:a0:18:fc:18:e3:
3f:d8:bc:73:d2:bc:6c:fd:b7:65:4f:07:2d:d6:e6:30:04:fc:
4a:8d:b2:a7:6c:63:a0:a4:9e:41:fb:b6:2b:01:40:55:21:d8:
d6:76:b2:46:52:d1:b4:02:e0:98:1e:89:04:ff:ac:28:c9:a3:
be:63:7a:e8:6a:7b:cf:a6:fd:01:df:17:eb:06:83:04:1b:89:
ea:ab:44:d5:c4:70:7d:41:c1:50:9a:2a:4c:2c:9e:6b:34:57:
77:1d:cd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:18:13 2025 by rpki-client