Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File: jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier: DMrm14MI0qGYN9ZYtiGHc2G6eEp6wKoDkLqe0tJVEn4=
Subject key identifier: 7B:08:96:F0:C3:E5:2A:58:E9:C2:41:CE:BD:7F:B9:B3:4F:48:90:64
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer: /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial: 01964E5A4BE842F96C760D90BE70AB0482A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number: 0722
Signing time: Sat 19 Apr 2025 14:01:02 +0000
Manifest this update: Sat 19 Apr 2025 14:01:02 +0000
Manifest next update: Sun 20 Apr 2025 14:01:02 +0000
Files and hashes: 1: Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa (hash: Da8fMzEd6ZdZtBJZunslR4v5JrpLeUfmPOL3PB5KGc4=)
2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: zf/L/m64iPA7Zhg+9GFJqy4UwL5b7UWvQnsEVCNyR/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:4b:e8:42:f9:6c:76:0d:90:be:70:ab:04:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Validity
Not Before: Apr 19 14:01:02 2025 GMT
Not After : Apr 20 14:01:02 2025 GMT
Subject: CN=7b0896f0c3e52a58e9c241cebd7fb9b34f489064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:d8:ec:18:f6:ba:84:d7:80:26:ab:77:3e:
fb:db:43:a5:71:24:66:88:f7:9d:d1:ce:8c:d6:91:
86:73:1d:90:f0:bd:e2:f6:05:4c:52:a5:76:2c:23:
e5:a3:0e:f1:8c:8c:64:79:74:59:f6:cd:ec:11:cd:
13:65:a1:de:69:f7:6f:b8:9d:f4:3c:33:c4:15:b2:
35:ed:07:4d:28:5d:08:c7:e2:43:ed:3f:f6:77:a2:
16:a9:17:81:f0:70:05:95:fb:2f:12:bf:ce:47:30:
36:e1:11:e3:44:7c:3b:11:3d:68:b9:50:c8:6e:dc:
50:f3:d0:6a:c3:ef:06:f7:6b:47:da:05:1a:ec:a5:
21:b5:51:8c:d2:63:cd:d0:dd:be:d5:f9:28:36:56:
c1:51:48:6b:74:23:05:9a:f9:ee:6b:f4:f3:32:1c:
0f:a1:82:33:ef:eb:29:8f:38:f3:b3:14:ab:95:d9:
c7:18:8d:8a:a9:16:ac:c9:64:02:9e:ef:a7:38:95:
d1:73:a7:0e:90:6f:a7:94:26:d1:81:9a:bc:c0:c3:
26:40:1f:fc:42:fc:ed:80:9f:4b:9f:99:61:11:29:
4f:78:76:65:cb:cb:28:72:a9:9f:09:e4:5d:bf:6d:
8e:2b:08:81:2b:24:76:c4:44:cf:63:7d:98:69:c2:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:08:96:F0:C3:E5:2A:58:E9:C2:41:CE:BD:7F:B9:B3:4F:48:90:64
X509v3 Authority Key Identifier:
keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:02:b3:16:b4:0a:78:ea:fd:b7:b6:3a:ff:72:51:c7:81:64:
2f:22:3d:88:4a:e3:34:e6:29:32:80:4e:74:76:41:e0:af:74:
35:ae:1e:06:7b:a2:dc:a1:8a:cd:3e:52:90:7d:79:18:5e:c6:
e8:75:0d:70:20:11:39:c1:1e:6c:6f:f9:16:e2:fc:69:7a:b0:
da:17:70:2d:69:7d:96:29:b9:1a:e4:30:45:9e:ff:c4:bd:02:
dd:e8:5e:d7:87:3d:94:6c:d1:6d:2b:cd:37:a3:ad:0e:f3:9a:
56:75:08:c6:60:6f:9e:dc:e7:ff:db:a2:62:d1:ca:d4:e2:d2:
ef:8e:85:53:cb:25:34:83:9c:8f:4f:71:3c:0c:4b:ce:af:5e:
5d:dd:3f:8f:38:ee:ed:c9:3f:d9:36:46:71:40:4d:bb:dd:ef:
d7:c7:86:dc:aa:9e:62:6c:3d:ff:3f:64:a9:cd:f2:14:5b:d4:
c2:f2:95:3f:b8:f9:49:52:de:3e:98:4f:1e:99:32:07:b1:e0:
f2:ca:09:de:fa:be:b3:6d:92:40:49:c7:e2:a6:22:fc:f9:ab:
86:39:81:8e:cd:21:10:e9:ce:ea:d3:b2:5b:ff:cc:2c:db:8c:
77:e9:d1:e7:51:64:f3:05:aa:8f:70:2b:37:33:0b:18:f6:09:
80:a5:ea:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:11:55 2025 by rpki-client