Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier: ByIcyZAmuTbyf/ahICI6M9ZuW7XY+ncl6WjiF2I+74E=
Subject key identifier: 65:56:8F:AC:9F:29:34:D2:1D:D3:50:B9:76:D3:96:B9:94:64:6C:04
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 01960F7BB3D4930B0DE91C20231C9A0B5B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number: 12F6
Signing time: Mon 07 Apr 2025 09:01:27 +0000
Manifest this update: Mon 07 Apr 2025 09:01:27 +0000
Manifest next update: Tue 08 Apr 2025 09:01:27 +0000
Files and hashes: 1: 8sUA95GjYhv6KuzZVFilwCguWC0.roa (hash: XZADDosj5zXS8Dzie6vOXsU0vLjewsqKyvZNlIpinLc=)
2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: y0BSRiSYJYsGVuil/WxPTaUkg8hyo580isCm3R80EPs=)
3: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (hash: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=)
4: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (hash: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:b3:d4:93:0b:0d:e9:1c:20:23:1c:9a:0b:5b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Apr 7 09:01:27 2025 GMT
Not After : Apr 8 09:01:27 2025 GMT
Subject: CN=65568fac9f2934d21dd350b976d396b994646c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:b4:c8:b3:3c:38:70:39:b0:99:a1:25:ce:
bd:bb:5d:72:52:0f:79:ba:77:be:de:5a:ea:cc:54:
a8:98:f3:cc:66:1a:bd:73:24:ff:1c:09:d3:e5:f3:
d0:66:a8:e8:70:67:98:3d:14:0f:62:f1:0b:e2:32:
ad:13:00:41:61:34:d3:4c:16:0e:ee:96:6b:92:bf:
f9:20:0a:1c:c9:52:09:ae:95:56:ca:41:3e:28:06:
ee:b4:4c:23:09:d9:03:68:33:b9:fe:30:c3:07:02:
5c:69:4e:e7:be:71:fb:1c:31:d7:9a:11:de:2b:b2:
cf:9b:bb:d6:3c:1b:86:e2:f1:56:51:dd:f6:98:7f:
e8:aa:70:29:19:2f:37:bb:32:a9:b1:98:69:16:87:
1d:96:33:26:41:e2:ee:c9:d9:0c:c4:3f:76:45:8c:
08:61:2e:ec:f3:70:29:04:ae:67:fb:65:f4:70:39:
e6:c1:73:d2:1b:52:d8:f0:71:de:62:af:99:1d:9b:
7d:13:cb:eb:44:3f:7b:ec:dc:d7:5f:64:e7:93:64:
4c:cf:51:92:8c:8c:a9:d5:be:73:e4:e5:3b:08:78:
19:80:43:bc:b7:14:7e:ce:c3:14:4d:90:f2:e1:20:
64:81:1c:8c:66:f8:49:c1:d3:eb:03:05:b5:e7:81:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:56:8F:AC:9F:29:34:D2:1D:D3:50:B9:76:D3:96:B9:94:64:6C:04
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:74:ac:e3:d3:40:1f:ec:bf:e2:8a:63:4a:26:84:b0:bf:87:
28:cc:be:21:31:f4:e5:34:c0:6a:ed:af:d6:21:5c:f6:45:e0:
cd:3a:67:7b:6f:fa:7b:d4:94:b7:e7:0e:d3:9f:17:d7:3d:1f:
a5:a2:e7:13:3a:2d:10:19:a7:fc:41:46:32:da:eb:fe:88:4d:
a3:be:7a:2c:71:fd:58:dd:b0:dd:b7:13:fe:5f:74:80:5b:f1:
fb:17:b5:80:d9:93:3c:7a:61:3b:f5:97:b7:1f:9b:bb:de:dd:
ba:7b:25:b7:92:37:65:48:bf:60:21:a9:da:ef:c5:91:b7:bb:
f5:85:cd:89:21:fc:53:23:8f:18:04:88:f8:d5:ec:eb:f0:ef:
a6:fc:2e:92:96:26:5b:f4:b9:a5:b3:25:b9:41:83:7c:9a:ad:
90:43:75:6c:ba:91:04:d7:17:a4:91:02:4d:0c:e1:03:6a:71:
7e:ea:d9:43:69:3d:9c:6c:9d:08:20:0a:9d:0f:36:3c:60:b1:
52:50:05:a7:9d:22:93:a0:bd:6a:3a:30:bc:33:0d:cf:5b:ef:
32:0b:a0:31:03:37:b3:09:f8:9c:2f:b3:b7:f6:84:19:ac:ff:
65:bd:2a:1d:32:47:05:29:a7:18:14:41:42:2a:fb:71:02:45:
62:3b:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:08:01 2025 by rpki-client