Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: +JqklOv2HieXSzddjsa6Y5EFeidHxGyLgZfw72C2os4=
Subject key identifier: BB:76:65:95:B7:01:0B:C5:5F:B7:B6:E1:E2:55:A1:23:AF:41:85:ED
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 0196561389FE1965ED38E39C57498C7EC58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 0115
Signing time: Mon 21 Apr 2025 02:00:43 +0000
Manifest this update: Mon 21 Apr 2025 02:00:43 +0000
Manifest next update: Tue 22 Apr 2025 02:00:43 +0000
Files and hashes: 1: 2a4uGqXqRLFwxkrNzW_s6-qnGXE.roa (hash: goHZck25hCom6tNMtTpOVgal0/zlXu42ccbA4cfzVE0=)
2: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: BDzJern3uw6pdiPzLrrlDXOcZoHVx28oQfJotl1n7s0=)
3: kFOw0UjGI7qti8qa1uAUEOsP1Y0.roa (hash: 3Ka4QMk7D3J6EIhtUeiuaJXa58kFmA+7bZN+m672Gvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:89:fe:19:65:ed:38:e3:9c:57:49:8c:7e:c5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Apr 21 02:00:43 2025 GMT
Not After : Apr 22 02:00:43 2025 GMT
Subject: CN=bb766595b7010bc55fb7b6e1e255a123af4185ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:08:6e:8f:79:78:14:0a:22:5d:7e:7f:90:
9c:51:0b:f0:10:46:34:92:d8:0d:d8:c5:e1:77:8e:
ed:84:9e:10:f3:f8:e3:e3:ca:ff:4e:ce:e7:9e:6b:
c4:93:7b:83:2a:df:12:fc:0e:54:da:d8:6a:82:86:
00:83:04:8d:8e:7a:82:8c:eb:96:d4:9f:6b:67:b5:
fc:02:fe:22:b5:bc:d9:25:c7:44:66:b9:4e:24:ec:
46:e1:39:a0:49:e4:41:83:90:c3:f4:82:9c:1a:ce:
6a:68:b9:06:f1:2c:eb:71:b9:a7:34:9f:19:a2:34:
f1:85:56:86:57:04:2a:f9:2e:a8:59:23:47:a0:b0:
cc:c5:89:9d:0a:3f:e8:0b:cc:65:4b:10:05:c6:71:
85:95:66:36:92:e1:8e:be:d0:17:b8:da:80:ce:7f:
7b:7c:94:ca:2c:4b:22:e8:99:a5:90:44:9e:f4:4f:
d6:c2:bb:ca:41:bd:24:cd:5c:c2:04:b3:2f:78:a5:
67:b7:4c:52:d1:21:dc:54:37:ce:7d:32:79:17:3d:
91:7f:a5:3d:eb:93:d5:70:ef:11:b6:3e:3e:c5:89:
20:03:10:57:b8:e4:9e:00:2f:34:eb:e5:b1:33:b6:
f8:56:aa:e4:8b:cd:31:6d:ba:59:c4:2b:dc:e5:3b:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:76:65:95:B7:01:0B:C5:5F:B7:B6:E1:E2:55:A1:23:AF:41:85:ED
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e4:45:2f:f2:06:c7:91:cf:a6:d2:35:19:85:95:c9:47:a9:
d2:3f:da:2b:0d:88:7a:b2:53:c7:15:b8:21:fc:4f:32:5c:68:
1e:7d:aa:10:83:06:f7:a9:02:10:f5:fd:71:ef:c6:67:2e:a2:
f9:8b:3a:e9:68:84:0c:bb:5b:0e:9b:17:c9:37:a3:30:98:67:
9e:0e:05:f4:3f:e3:41:96:45:fc:fc:26:f3:74:c9:70:7f:8b:
bf:3e:c2:7e:81:1a:09:23:53:b5:67:9d:e0:bc:24:31:90:1f:
7c:f0:fb:d1:52:d7:7f:5f:70:a7:58:27:ed:f1:6e:d0:93:66:
98:91:38:3a:40:d2:3d:75:3c:17:f1:13:55:02:94:a6:99:8c:
40:ef:84:5c:4e:28:f6:d4:e4:91:00:9d:19:fa:b6:27:a8:8b:
d3:ef:51:ee:f3:dc:7a:d9:d2:d8:b5:83:1b:8a:95:0e:0a:e0:
3f:21:17:3e:ca:45:f8:5f:03:0b:9d:bb:d1:25:18:99:f9:36:
6f:41:a8:1b:20:fc:62:67:1c:0f:b6:ca:86:78:01:f0:06:ea:
4e:79:c6:02:dc:d5:c2:44:7d:35:be:69:b8:15:7c:2f:1f:7b:
b2:6b:c3:6b:55:5c:a4:b6:eb:1c:b1:68:31:9b:86:9e:7e:75:
2c:0d:8b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:18 2025 by rpki-client