Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
File: jTQC6uAnq82SYJDMDd7_gKq5LDU.mft (raw, json)
Hash identifier: GG67AkZiYmW1VCRD/JsHbYMzanHLfrV0ap1isPHG0Ss=
Subject key identifier: 02:EA:16:6A:7B:7C:5D:54:7B:95:9B:8F:5A:46:45:AF:66:D0:E6:00
Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Certificate serial: 01962DF395DD15B9CCD5A29977DC3AAE2D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
Manifest number: 0683
Signing time: Sun 13 Apr 2025 07:01:00 +0000
Manifest this update: Sun 13 Apr 2025 07:01:00 +0000
Manifest next update: Mon 14 Apr 2025 07:01:00 +0000
Files and hashes: 1: jTQC6uAnq82SYJDMDd7_gKq5LDU.crl (hash: NcY+3GEn+5F12x3kWtkejRBnf1dJYj6Y8JvZGOiJNec=)
2: rOnq86dV2BXa4tQU-vqcTAdf2VM.roa (hash: nUAAXheN4rY8m+/9k6ldoGDPKA5ssts8flzhVGQ+fHk=)
3: sExC59C2viDQKDDYj8CusH8J5Lg.roa (hash: cOWFAprr/QGP2vQ6eCaPmf7CyWdmOoqQ/ISFnDFZTmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:95:dd:15:b9:cc:d5:a2:99:77:dc:3a:ae:2d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Validity
Not Before: Apr 13 07:01:00 2025 GMT
Not After : Apr 14 07:01:00 2025 GMT
Subject: CN=02ea166a7b7c5d547b959b8f5a4645af66d0e600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:56:b3:9c:db:89:a9:ad:6e:fe:db:08:25:
52:d2:38:5e:22:5f:f7:c8:5b:75:f8:2f:30:88:a3:
af:fa:34:68:5c:8c:1f:54:c5:50:68:f6:d1:6f:94:
ef:5f:7b:dc:bf:38:23:f3:73:d1:ab:88:51:b6:8a:
32:55:35:1f:8c:d4:30:34:9e:7a:b5:13:31:f5:e1:
4a:98:cf:a6:c7:04:92:61:b9:53:5e:f3:2c:11:0f:
c4:c5:88:2b:f0:07:de:0b:ea:28:6f:c5:ec:10:ba:
75:e4:69:9d:9c:75:e1:84:83:7d:46:b7:c3:a2:2b:
16:eb:55:49:75:7b:eb:2f:ab:07:cd:10:9a:b4:e0:
68:e2:69:14:00:85:99:4c:05:2e:65:2c:d2:c4:3e:
08:57:3c:70:58:9c:74:2f:15:87:b7:d4:45:e3:f3:
f4:f9:f4:fc:c1:88:52:31:fd:2b:1e:26:e1:a2:f6:
ce:6c:06:fd:41:16:ca:db:ba:af:17:43:bf:0f:57:
f2:bf:de:57:fc:a6:b6:45:f3:44:2b:1d:d6:29:48:
4b:e3:fe:78:b3:66:05:77:81:98:bf:19:27:bc:89:
cb:dc:ea:3f:d9:ae:4b:54:fc:bf:fe:dd:50:85:8c:
2c:61:b9:6d:bd:70:e3:32:24:e5:6d:5c:ed:52:67:
97:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EA:16:6A:7B:7C:5D:54:7B:95:9B:8F:5A:46:45:AF:66:D0:E6:00
X509v3 Authority Key Identifier:
keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:65:e3:3e:17:d1:96:4a:8a:6e:cd:3b:f1:c3:8d:8b:a9:7d:
c9:e4:7a:22:72:5c:ba:92:a9:07:c9:39:50:7d:7d:42:5a:eb:
b5:05:17:4c:2e:1b:13:59:28:35:24:80:ed:d1:dd:c2:5f:a5:
87:ae:61:4f:a6:4b:01:76:b0:21:aa:f8:1d:51:c1:5a:bc:ab:
5d:5c:93:96:a9:bf:b0:43:42:35:83:f8:68:8d:f8:c9:bf:c1:
b6:e6:18:98:a8:3c:55:bd:cb:ce:eb:26:3a:53:34:0b:a3:5e:
2b:2f:24:a4:a4:1e:eb:da:05:05:c8:79:85:a6:87:72:d5:c7:
e5:9c:9e:d3:3b:cb:a2:b5:18:25:88:81:75:27:01:fb:ee:6d:
fb:79:a7:78:7d:81:64:c8:0c:cc:89:72:f7:de:f8:b2:d0:79:
3f:08:c6:ea:07:3e:21:41:2e:7b:5b:8b:b1:8c:59:9f:d2:b9:
8d:79:ff:64:5a:bb:a4:0a:ab:0d:f2:e7:49:2a:df:17:05:c6:
8f:c5:d1:6a:45:f9:c4:9c:b8:1c:ae:9e:f9:b3:34:30:45:b3:
02:d0:8d:5e:23:70:35:7c:40:c5:af:99:98:1a:e2:51:5b:f3:
b1:b6:7d:74:78:3d:12:51:45:c8:5d:57:42:d5:f7:5a:62:f7:
0a:a3:83:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:43:41 2025 by rpki-client