Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: lOh+PP4X4CukURtpnbCmn9wv9XfmXkbETc/Tw9wMIzk=
Subject key identifier: 86:98:52:EB:52:1C:B1:F8:55:FB:A7:09:04:AA:F3:7F:08:9A:AE:89
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 019657270180835E7A5E24917C70E880BD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 1504
Signing time: Mon 21 Apr 2025 07:01:36 +0000
Manifest this update: Mon 21 Apr 2025 07:01:36 +0000
Manifest next update: Tue 22 Apr 2025 07:01:36 +0000
Files and hashes: 1: 6xQfGOt_4QRi194ctt1Yy_IpWvk.roa (hash: Zeq/X7clOOaPFxvhWK8RPC5T2Ckw08yRW0DPBjzvh6E=)
2: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: n8+2ADYpLwpz6AggFBKIjUN04pPjegV8AUmQ6iFzoN4=)
3: nMDCAx4S7BvyRseCP1AtruhoXlQ.roa (hash: MzKXqieiYhEALeqU1AUv5CMaIkFtOJxEDtJDUquvAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:27:01:80:83:5e:7a:5e:24:91:7c:70:e8:80:bd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Apr 21 07:01:36 2025 GMT
Not After : Apr 22 07:01:36 2025 GMT
Subject: CN=869852eb521cb1f855fba70904aaf37f089aae89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:d8:b9:2e:e7:5f:b3:e7:ca:4c:33:1b:62:
5d:d3:40:36:0e:4a:f5:fa:ee:c3:b7:57:a5:15:7c:
6f:6d:24:70:6c:b8:67:d9:5d:ea:fc:fb:31:ad:71:
c3:5d:f9:a4:ed:26:cc:84:72:fa:8b:f8:87:f6:04:
c6:3a:cd:b9:18:46:b9:35:d3:e3:81:4e:94:d1:06:
4b:3f:62:a9:b6:08:c6:3a:e0:52:20:a3:41:e3:e6:
dc:40:5c:f6:aa:b1:dc:06:cf:4d:9f:b2:f4:80:dd:
4d:14:57:d2:d5:b0:d3:f3:21:ba:0f:1c:d4:32:7d:
2b:44:7b:04:1a:70:21:28:3d:ea:c5:e7:a8:ba:23:
d1:11:39:d1:25:5b:ea:8e:e5:0d:38:23:12:49:12:
c8:79:9b:9c:86:d6:22:ee:8d:8f:25:26:a3:d8:0a:
92:23:c9:c8:38:59:52:78:5d:5a:68:42:51:dc:81:
1b:d7:1f:a5:1e:0e:c0:ff:10:9a:fb:e0:e6:1a:ab:
39:66:dc:6d:26:9d:9c:e6:80:af:4a:6d:66:ba:8c:
60:a4:37:fd:4e:56:a1:31:18:47:3e:04:ec:ce:60:
83:ee:96:3d:8b:e8:7d:5e:00:98:fe:f1:9c:78:ab:
a3:5e:a3:cb:83:90:0f:8e:fe:dc:48:fd:57:9e:08:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:98:52:EB:52:1C:B1:F8:55:FB:A7:09:04:AA:F3:7F:08:9A:AE:89
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5c:08:d0:90:06:5d:94:a3:3c:9e:1a:df:d9:0d:7c:f4:b9:
cb:b9:90:60:dc:a2:67:b5:a0:58:85:06:86:cf:3b:25:e6:ed:
e9:8e:43:4d:7f:9a:4b:d9:57:25:af:04:9c:b5:a8:be:21:0c:
07:a1:d1:44:d1:f1:a0:70:2a:11:b3:da:fa:59:45:0f:cd:c3:
c7:6f:59:01:1e:7b:f6:b8:5d:c3:48:f3:52:a5:f7:ca:38:83:
69:ac:9c:25:0d:12:4f:f0:64:1d:12:34:96:86:19:05:ec:4a:
0d:2a:3d:a1:b0:26:aa:ab:f8:85:8d:40:62:d4:e7:59:f1:36:
c8:68:b0:38:5f:56:35:38:94:b4:40:d8:6f:e9:41:7a:62:4d:
b0:23:14:71:32:cc:02:f3:d9:17:30:1f:32:0b:b3:8d:1d:22:
d3:2b:10:e3:5e:13:7c:4d:8b:22:7c:7b:98:bf:29:0c:f8:d3:
6c:ac:84:db:2e:ab:a8:14:fb:f9:7a:ec:5b:4d:6f:a5:e6:1f:
d8:5a:db:81:62:20:82:ce:f8:14:dc:93:03:04:71:6a:7f:fe:
08:cb:1f:42:c3:d9:45:30:59:15:77:ca:1a:d9:22:c7:ca:ad:
c4:8f:8e:a5:be:5b:55:6a:b0:51:7c:a4:d8:ba:04:96:69:e1:
57:a2:61:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:22 2025 by rpki-client