
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier: chUeGm/Y9IVolDuqmzU4inGzXVYruBq9jhrE2QyQpOc=
Subject key identifier: 3F:75:35:60:64:18:62:13:15:27:C6:E0:3A:B4:7B:75:8F:31:AC:AF
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial: 0196568176B01890B4BD4F3B84F920645AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number: 14D2
Signing time: Mon 21 Apr 2025 04:00:47 +0000
Manifest this update: Mon 21 Apr 2025 04:00:47 +0000
Manifest next update: Tue 22 Apr 2025 04:00:47 +0000
Files and hashes: 1: Lj7wNt42nDZMFrqwFNzaUflSi14.roa (hash: 7lYXpxe/6x5jvaWmKlwV+88ghkrorZKCs1qdn0iPrpQ=)
2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: S7jMLR4xvuW/8s+j/ZIWwaCJBKQUXjYtxI5isW9jMWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:76:b0:18:90:b4:bd:4f:3b:84:f9:20:64:5a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Validity
Not Before: Apr 21 04:00:47 2025 GMT
Not After : Apr 22 04:00:47 2025 GMT
Subject: CN=3f753560641862131527c6e03ab47b758f31acaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:49:59:66:bc:3c:5e:d1:3b:49:62:ef:32:
7d:4d:02:65:24:d1:ed:94:93:ad:44:91:8e:de:89:
ab:d1:05:a5:a9:f7:32:85:bb:0f:9d:b6:74:44:cd:
89:dc:51:d3:2a:ec:2b:1c:3a:f5:17:6b:2f:4d:a1:
82:46:53:b1:cb:50:bf:60:01:50:01:25:56:b0:6d:
e0:38:f9:7f:e6:5a:5f:31:ed:51:5d:f2:28:1d:f7:
6f:47:08:7d:22:7a:7c:08:1f:a0:e3:25:54:fc:20:
63:2a:a0:11:4d:88:18:ae:91:a1:b7:24:2c:bd:10:
74:3e:bc:b9:1a:8e:c5:2a:91:75:f2:db:d4:d0:26:
87:61:91:b0:0d:f0:86:4c:65:79:ad:2c:56:49:a0:
c6:d5:c5:2c:cb:a1:7c:b9:9a:e7:38:29:f1:57:63:
bb:7d:44:e0:16:3c:a4:13:93:d5:40:d2:21:1b:10:
3a:f1:37:38:6c:41:de:c4:b5:f5:45:22:74:c7:a9:
0d:eb:10:56:9e:62:61:20:b0:ac:78:7b:0e:cb:5f:
d1:83:78:60:a9:b1:42:b7:91:83:df:c8:ba:1e:0a:
44:9a:27:b4:3f:d5:f6:c6:71:ab:0c:fb:85:36:4b:
fb:03:c0:bb:d6:66:63:ea:ca:6d:21:f3:cf:94:4c:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:75:35:60:64:18:62:13:15:27:C6:E0:3A:B4:7B:75:8F:31:AC:AF
X509v3 Authority Key Identifier:
keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f6:b2:6a:dc:32:61:81:89:fa:9f:30:43:5e:ca:de:9d:33:
92:4a:cf:cb:31:19:1b:80:3f:89:d0:f5:0d:a8:4f:08:10:23:
68:84:c3:a0:cc:51:3d:b3:fa:03:d7:96:61:07:01:9a:7f:91:
e7:41:b4:76:7a:63:6d:e2:14:27:6d:5e:70:50:4a:cc:ec:01:
af:22:68:b1:21:8b:df:41:e0:ab:e5:82:40:06:76:a3:4d:77:
0d:03:92:d9:5f:68:25:44:26:87:1e:c1:7e:e0:17:31:a4:59:
84:88:70:13:48:d4:6a:93:7b:87:3f:0d:2d:12:ff:6f:e4:d1:
84:4d:7e:39:44:a2:cf:2c:9e:39:f6:e5:d7:37:94:77:ea:b0:
0c:d1:b3:52:31:bc:9c:7f:43:f2:ca:e0:97:c7:7c:32:73:03:
33:de:42:46:21:ee:da:b7:8b:8d:b7:54:1b:28:26:0f:94:7e:
00:cc:c8:29:8e:f3:32:9c:7e:02:27:03:b1:3f:1b:e6:c2:bb:
8b:98:b9:0e:04:1e:e6:73:c7:e7:b3:d4:38:93:d9:a6:4f:d7:
70:76:1d:fa:27:f6:e1:2d:29:3d:e4:8f:96:46:a8:15:17:2f:
19:6b:74:05:ee:af:c5:54:32:c0:f0:f9:9c:b6:cb:f2:44:44:
8b:2c:4b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:51 2025 by rpki-client