Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File: jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier: aFDVwoRES2gvvnzeOy7JD95GES+lFfVl1iAnLXahSKQ=
Subject key identifier: 35:87:CD:7A:D5:AC:B9:C9:8B:5D:AB:63:BC:09:27:8A:7E:29:42:8D
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 01965500C5D04E6887597F77D0CD8F92BA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 21:00:35 +0000
Manifest this update: Sun 20 Apr 2025 21:00:35 +0000
Manifest next update: Mon 21 Apr 2025 21:00:35 +0000
Files and hashes: 1: grXRQpT1aZeaC-n0N849AfZZ_V4.roa (hash: x7JYnVR7QlEIld9EwbA1Mq0qnt4Qvkq7/cYHdkassRc=)
2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: TFl2a73glwsOhFitzLci/TG5p1dQEPT2dJ+nTLzhnAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:c5:d0:4e:68:87:59:7f:77:d0:cd:8f:92:ba:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Apr 20 21:00:35 2025 GMT
Not After : Apr 21 21:00:35 2025 GMT
Subject: CN=3587cd7ad5acb9c98b5dab63bc09278a7e29428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:a8:21:cf:e7:4a:29:81:e5:dd:8d:df:0c:
41:46:1e:26:3c:62:6d:14:a0:b1:48:9e:0a:87:1d:
89:0c:9d:5c:60:0f:9f:b8:0e:ed:22:fd:3a:12:71:
ff:10:57:83:db:2f:ee:0f:2e:2c:49:9f:e3:22:01:
9f:ef:63:7e:1b:6f:25:f4:ce:52:de:2c:79:03:ef:
4f:8d:81:7e:83:b1:2c:4d:6d:0b:46:fe:3d:75:52:
d6:47:1f:6c:ae:6a:d9:d0:c7:bf:02:56:f9:49:dc:
11:ce:5e:d4:94:0d:27:b9:94:c1:38:bf:f1:df:4e:
b8:cc:de:c2:4a:13:64:77:b0:42:1d:2a:99:c7:d6:
4f:f9:0b:76:c3:06:a4:39:39:72:a4:17:5c:c2:85:
91:f9:3e:53:37:35:a7:ef:ab:87:b9:4e:05:f9:22:
0f:92:a7:b9:64:db:63:6b:fe:e1:5e:fb:ca:3e:47:
36:38:0c:0e:5b:6b:9b:8c:ac:24:17:bd:b9:88:92:
7b:33:f3:61:08:fc:67:88:29:c0:b8:7d:ea:c6:18:
4b:ff:58:20:c1:31:7e:71:50:47:f2:95:b2:20:46:
33:22:9c:f4:96:38:7f:cd:79:ba:8f:b1:d0:de:35:
ca:b8:3a:c8:46:87:88:4a:8c:d9:11:9c:20:15:38:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:87:CD:7A:D5:AC:B9:C9:8B:5D:AB:63:BC:09:27:8A:7E:29:42:8D
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e4:06:1d:84:f2:43:11:23:ba:69:20:3a:94:8f:08:bd:6e:
94:99:77:13:d0:fb:72:78:5f:43:c2:2b:63:d0:48:ae:b5:eb:
97:fc:9c:87:d6:6b:66:97:75:8e:c8:a4:8f:93:5c:56:71:7e:
7f:12:6a:d2:30:b8:78:78:b3:71:0f:e1:c9:a6:8d:5f:39:4a:
ff:6d:ff:13:65:ad:2f:0d:69:01:f1:4f:23:4d:e8:7f:2a:cb:
66:bd:a1:11:50:7d:50:4e:d6:20:bc:07:d3:e5:bf:e5:7e:4b:
8e:f6:73:24:bd:3a:b5:35:fb:ab:27:3d:d2:c3:61:49:d8:15:
b3:3a:69:04:64:9c:b8:4a:3b:7b:24:7f:80:6f:40:aa:8b:1f:
21:11:a3:6f:1d:36:c1:a9:1c:e9:6d:53:87:d7:bb:58:71:fb:
47:02:ef:27:6c:ea:af:32:fc:40:cc:5e:c4:0c:d3:1d:db:1b:
65:c9:72:e8:2a:d4:99:af:09:77:77:08:5a:82:3d:ba:6d:5b:
20:70:58:10:f8:92:84:12:75:b6:fc:23:57:ee:39:02:c6:ac:
1d:90:78:86:85:61:20:a5:f7:8e:f7:ef:4e:7d:10:40:b1:49:
ea:e3:60:f5:7c:cb:f4:61:33:35:c3:98:6e:3e:09:fb:3d:7b:
05:b7:fe:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:19 2025 by rpki-client