Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File: jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier: sY1UOuOF4KzlLOE7tKtXtyo1klUohGNsu1WUQi96KEs=
Subject key identifier: 17:80:D0:C2:1B:01:FD:16:F0:5D:FE:76:78:54:7D:EC:9C:5D:1F:0F
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial: 019659B9B4BBA1E31A6B36DCFBA0E8672C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 19:01:04 +0000
Manifest this update: Mon 21 Apr 2025 19:01:04 +0000
Manifest next update: Tue 22 Apr 2025 19:01:04 +0000
Files and hashes: 1: K-6vxGr3EkVKtgWk3f7FXppAHWU.roa (hash: OqJwTUOjnt783umU3SvwJ0pGKHDe69wtlF63xIDInso=)
2: K7Su5tLQd2NMZMj9NBaGujGCyFc.roa (hash: mUfUc0m1Q5fvSqMO5jRLGU7xEPj6/17vBXx5MZ0j9fY=)
3: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (hash: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=)
4: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: 2m6rQ1ENKRJ1xLtfBBvWN9IpLbWdea+LVEchtZnYdAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:b4:bb:a1:e3:1a:6b:36:dc:fb:a0:e8:67:2c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
Validity
Not Before: Apr 21 19:01:04 2025 GMT
Not After : Apr 22 19:01:04 2025 GMT
Subject: CN=1780d0c21b01fd16f05dfe7678547dec9c5d1f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:91:7a:dc:1a:49:2f:14:0c:46:5a:1c:2d:
f5:b3:a0:dc:05:f6:f3:36:03:25:b3:ef:4d:74:c8:
94:68:57:50:f5:bc:58:6c:94:fc:9a:e7:ba:27:cf:
4e:69:1d:a4:2b:33:e6:8e:b7:1d:11:cf:13:31:c5:
10:ac:1e:60:9a:9a:25:51:14:98:c2:72:c7:d5:d5:
01:1c:73:f3:8b:86:ae:81:40:ed:9d:8e:0f:f5:45:
46:93:89:23:22:08:09:87:f5:40:6d:0b:33:9e:ea:
a9:87:2a:4e:34:db:0e:4e:c9:52:eb:50:05:db:1c:
27:42:c2:24:a6:31:70:f0:b3:0d:41:3b:ce:4e:b4:
6b:76:9a:53:2a:2e:d3:f5:6b:43:7b:32:14:34:21:
d2:64:a4:2f:a6:b2:32:d2:7f:6d:7f:b5:5a:41:d8:
3e:37:48:b0:a0:fc:25:63:3b:5b:57:dd:a7:17:94:
08:9b:e7:f5:5d:e3:6e:13:80:bf:f9:15:78:f5:12:
04:6a:3a:fa:3a:7f:d8:13:d4:fa:08:ee:98:81:88:
55:57:db:89:9e:6d:29:14:94:ef:fa:bd:58:b1:5c:
82:63:a4:99:c0:7b:18:c3:b4:11:27:d9:c4:9b:da:
d2:47:f8:f0:9b:f7:ee:b6:1a:06:9e:34:5d:3f:6f:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:D0:C2:1B:01:FD:16:F0:5D:FE:76:78:54:7D:EC:9C:5D:1F:0F
X509v3 Authority Key Identifier:
keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d2:d2:ce:10:b2:3e:86:49:ca:ed:45:ed:99:aa:f6:19:21:
3b:fc:95:91:89:59:8b:38:ce:27:e1:87:cb:8a:fa:d8:14:be:
47:35:87:9d:4b:48:6c:cb:81:59:18:99:e0:99:76:06:86:7b:
cb:b2:8b:08:c9:fd:e1:cb:dc:59:ae:9b:e3:93:2d:c5:bc:db:
18:9e:8a:0e:03:f2:87:41:c7:cd:41:fb:ed:55:75:55:9a:75:
72:3a:bd:8e:a9:d6:f8:83:fe:34:07:22:62:c0:42:f1:ed:dd:
2b:2a:91:be:3c:15:dd:06:c0:0a:56:5a:98:ae:d4:79:f5:6c:
66:f1:bb:93:0a:ce:6f:e3:82:e0:0f:49:21:03:87:a8:38:33:
20:ff:d9:a2:a5:8e:40:5f:52:e7:43:b2:c5:29:e8:04:10:47:
75:87:18:ea:bf:09:44:cd:18:9f:0a:60:5d:8a:e9:78:84:75:
f9:1a:2f:6d:88:8d:16:c0:65:ea:8b:bc:d9:3a:c9:17:8a:0e:
17:09:e6:97:21:19:b2:60:fb:71:80:6a:0e:8c:83:e8:3a:9a:
e8:3d:fb:24:d0:c2:8d:55:c1:cb:98:df:42:6e:f5:64:ec:e9:
9b:4f:88:1f:c8:0a:f5:db:f0:6f:01:b5:7e:1f:be:93:0c:45:
69:af:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:12:17 2025 by rpki-client