Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier: UvzfpBRZRRWrUtLR6jlYSpUeSom7TZv+mqZ0aGey0nw=
Subject key identifier: D1:52:F5:7A:80:E0:0B:8F:79:BF:44:B0:52:C7:E7:59:61:1D:23:0C
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial: 0196561318AC46074362F6DEE92DA2BBC04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number: 1E
Signing time: Mon 21 Apr 2025 02:00:14 +0000
Manifest this update: Mon 21 Apr 2025 02:00:14 +0000
Manifest next update: Tue 22 Apr 2025 02:00:14 +0000
Files and hashes: 1: eLQvZXPU_77wrIDfdDfIdsIHFlE.roa (hash: Dn8Gnar3CSZGrhitajHivb75okRn8yMh58M9uLTkwsk=)
2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: nuJGVQT5IHJhiciOV4hDZHHhx4hlng7tTNrOSaAJpeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:18:ac:46:07:43:62:f6:de:e9:2d:a2:bb:c0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Validity
Not Before: Apr 21 02:00:14 2025 GMT
Not After : Apr 22 02:00:14 2025 GMT
Subject: CN=d152f57a80e00b8f79bf44b052c7e759611d230c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:89:d5:79:a9:5c:21:03:7e:ec:da:a0:96:
e8:83:3d:c1:5f:79:fe:83:b5:5b:e7:7e:ff:ab:c8:
49:9e:a9:3e:da:5d:26:38:33:5d:7c:42:4a:82:b3:
ae:92:21:3f:d1:3b:6e:e1:4b:9b:dd:bd:4d:df:52:
2e:24:a5:89:7b:6a:b1:38:d2:b7:8b:c6:41:b5:6e:
32:44:bd:49:c3:91:e4:64:4d:92:f8:21:d5:8c:5e:
05:22:11:c8:47:f0:28:2d:80:4c:2f:0f:39:bc:4a:
db:e9:27:a0:c5:ac:80:22:d0:5a:32:45:2a:f3:ed:
0e:a8:11:42:35:e1:a7:58:b1:86:db:8f:24:0d:02:
60:58:35:ab:29:ee:64:b4:88:7a:7c:ef:10:03:c9:
fd:48:41:c8:bf:69:07:66:50:65:a6:ea:a7:36:6f:
05:70:48:6d:c4:9c:df:94:b7:9d:3f:30:dc:55:c3:
1e:9e:81:b0:65:db:ef:cc:f6:e3:0e:db:9f:b7:c0:
07:96:ff:10:52:f4:49:78:7f:93:a1:62:4c:2f:16:
ea:49:93:f6:d7:39:43:96:c4:7a:d7:1f:f1:ca:09:
b3:c7:23:8f:f4:ba:e9:10:54:6b:0d:81:76:39:6b:
ee:4d:73:53:80:72:ae:ac:79:ad:80:f1:2e:24:6d:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:52:F5:7A:80:E0:0B:8F:79:BF:44:B0:52:C7:E7:59:61:1D:23:0C
X509v3 Authority Key Identifier:
keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e4:9c:95:e3:10:0f:59:26:d7:64:d5:73:34:ec:04:5d:4f:
c5:76:cb:01:4e:4c:11:21:ab:7b:8f:f8:68:9f:01:d2:f2:b1:
2c:47:1b:b9:9c:97:71:54:33:a8:bc:51:67:fa:0c:12:ab:2a:
d4:85:47:2f:b5:c1:15:62:85:f5:2f:d6:e1:6d:16:95:88:14:
42:96:d7:ff:32:6c:64:bb:80:38:8d:84:70:9d:bf:d2:98:aa:
e1:c4:d5:25:19:30:d1:92:aa:9f:53:00:cb:c0:ed:07:7d:2e:
ca:c7:a4:c0:17:5a:d4:5d:04:04:3d:b7:34:25:d9:7e:1d:05:
5f:fd:bd:2a:ce:02:2c:f0:e9:0a:05:3f:dd:72:f1:ef:39:fd:
e2:c9:cf:d2:9d:f5:da:fa:a8:b8:f8:e2:d6:11:9d:c7:f8:b5:
4c:df:9b:f7:d4:43:d1:85:b3:d6:53:00:d2:c8:53:98:e4:09:
09:2d:ed:7f:e7:8a:d7:c7:98:99:40:e4:bb:49:27:29:f5:bf:
df:51:8f:83:37:38:3a:fc:eb:07:9d:42:0e:6c:46:40:7b:0f:
9e:8d:ef:44:88:87:97:e6:56:37:a4:da:1d:21:a9:23:4a:65:
8d:5a:38:09:fe:e1:f0:5a:7d:4f:cf:a4:cd:ae:aa:03:cc:e8:
80:b8:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:38 2025 by rpki-client