Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json)
Hash identifier: IvrmRoymRGztGq64JHUYGOBLiAvVhLv2CG6NgVfZI3I=
Subject key identifier: 5A:FF:B8:14:CE:31:02:CB:6A:F0:63:76:B4:C3:A8:9D:C6:EE:B3:34
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 019659F0882224F2D89B47BDFDDACF49FBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
Manifest number: 0B39
Signing time: Mon 21 Apr 2025 20:00:57 +0000
Manifest this update: Mon 21 Apr 2025 20:00:57 +0000
Manifest next update: Tue 22 Apr 2025 20:00:57 +0000
Files and hashes: 1: UbUeMfpLDU2B5tdTAaw2aWanYxE.roa (hash: tdkyhyzbAK1xvoMt58nvdU/zMVFNztmsRhNZhHaMbYQ=)
2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: MnRRB7CqKuKyiTXfvCJHn02Z54+bukmadK5G3SOvShI=)
3: ymEXcJVVoGyICrDxKsSN1clsK5E.roa (hash: AJjBik7pMke5JpIJlFEXV/dLTYXuYObLdzj39aIHrMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:88:22:24:f2:d8:9b:47:bd:fd:da:cf:49:fb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Apr 21 20:00:57 2025 GMT
Not After : Apr 22 20:00:57 2025 GMT
Subject: CN=5affb814ce3102cb6af06376b4c3a89dc6eeb334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:b3:5e:93:e1:38:70:75:14:08:bc:d9:97:
af:4c:95:88:cd:99:7f:04:16:00:7b:d7:71:a8:54:
9b:22:7e:38:3a:74:b8:27:a6:f3:93:8b:4d:6f:3d:
ea:35:1d:8b:86:e0:f1:b5:78:51:25:d0:24:67:19:
bc:71:c7:00:25:3e:bc:4b:b8:41:b9:9d:94:ad:8e:
8d:ea:db:b0:ad:b5:bc:93:68:aa:73:26:f4:b5:74:
ec:27:7a:52:98:19:42:e8:7c:20:94:9b:5c:e9:13:
27:3f:fc:f0:a5:6f:d3:c7:a1:0c:f8:d2:1d:1a:ca:
75:49:7c:e5:d7:ac:9f:cf:86:40:e9:f1:51:b4:9c:
c7:8e:ee:c7:c9:1d:8b:0d:fa:17:1c:ec:f8:6c:35:
19:7b:6e:1d:4c:90:ff:a4:0f:75:6c:25:d7:96:33:
be:6d:e4:e2:43:bc:db:99:d3:24:9d:42:39:f8:37:
e9:83:b1:51:9b:ef:81:48:1b:ec:81:57:06:5a:1b:
e8:b2:30:c6:67:13:c5:ec:c6:b9:6e:66:bd:38:0e:
66:84:6b:2e:c0:a2:64:8e:3f:5e:af:e6:ef:53:cf:
50:b2:6c:f6:d5:ae:af:1b:56:68:18:b4:7c:4a:1f:
d6:07:be:a7:f8:5d:f4:3c:a6:61:de:2e:5e:b7:4c:
2e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:B8:14:CE:31:02:CB:6A:F0:63:76:B4:C3:A8:9D:C6:EE:B3:34
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:51:5d:6a:14:86:ee:01:4f:bc:c3:da:aa:88:fc:6f:29:56:
a3:77:d4:be:d2:b4:97:13:b1:70:c3:be:3f:5f:23:b9:57:b8:
5b:b5:23:4b:04:c9:4e:46:bc:37:dd:c1:14:99:ab:52:3d:8b:
6c:16:48:db:58:ff:25:9d:71:62:57:6e:b4:47:e9:f2:df:2c:
19:3a:c0:42:3e:8a:cf:59:77:52:56:3c:e2:57:c3:82:78:4b:
39:7c:25:b6:e9:e1:0f:ee:78:30:83:dc:15:4b:50:b2:25:cd:
eb:ed:be:8f:07:15:2d:99:bf:82:dc:53:54:c9:1a:cd:13:e0:
23:01:f6:0a:1d:0b:75:c7:b4:db:ed:93:23:0a:87:dc:0f:08:
c2:ad:e0:c5:27:64:a2:55:df:92:28:bd:f5:ce:b9:fe:07:cd:
0b:df:e0:79:37:25:79:db:8a:e8:65:a6:bc:6f:23:97:8e:b8:
bf:50:04:5e:9b:92:e2:32:0d:79:59:84:d4:58:9b:24:76:31:
75:a6:68:79:b9:a8:88:ed:0c:2a:b1:a8:33:e5:f9:1d:f1:a1:
a7:88:c5:8d:77:b6:d7:70:50:06:9f:9d:d1:37:4a:ef:05:d9:
50:8f:1c:83:49:7b:b1:44:ea:1c:da:12:ef:fa:7e:d0:21:64:
8f:63:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:15:09 2025 by rpki-client