Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: tbTrLAKI7MfuQUcdGamx9dMb5345vX1SFRlsePx+aT8=
Subject key identifier: 26:4A:08:72:20:0F:F6:31:88:64:48:A7:39:0F:A2:AA:04:25:64:6D
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 01964D7DEDD8E0F2B35601D4AB2128CD5886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 13F8
Signing time: Sat 19 Apr 2025 10:00:20 +0000
Manifest this update: Sat 19 Apr 2025 10:00:20 +0000
Manifest next update: Sun 20 Apr 2025 10:00:20 +0000
Files and hashes: 1: 0UHdcMJlJhG3oZKabqSdR28w2GU.roa (hash: c4S1i8VzMNkAak+YpBSVo9bfa8POuJI9pEw8vgNIjtg=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: C3yIinV3Yu67MDhl216HNlWR1b0j2XZF5OueY5v16oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:ed:d8:e0:f2:b3:56:01:d4:ab:21:28:cd:58:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Apr 19 10:00:20 2025 GMT
Not After : Apr 20 10:00:20 2025 GMT
Subject: CN=264a0872200ff631886448a7390fa2aa0425646d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:0c:03:30:89:47:80:c8:f7:55:fe:da:05:
94:c0:3f:cf:b4:48:30:e6:c5:9b:d1:76:fe:68:5c:
9a:45:ce:79:8c:7b:3d:d3:e4:62:cd:71:7c:ca:cf:
da:cf:2b:da:a6:88:41:5b:a0:e2:44:19:19:4c:c4:
5f:43:7f:9c:1b:62:6b:c0:83:df:1b:ff:55:2a:f8:
91:4c:1f:06:2e:cf:b4:f0:b6:e8:ae:15:e9:77:e6:
a2:2e:16:8c:f9:c0:69:2f:84:48:35:28:14:1f:90:
40:64:ce:74:87:ac:1d:17:c8:51:ea:6e:cf:61:14:
6c:2e:f5:22:5f:61:3f:e0:15:1a:d6:22:0a:47:bc:
55:1c:f7:61:29:45:32:3e:cc:60:cb:5e:53:ed:34:
62:fd:d1:d0:61:61:9a:d2:08:01:49:fd:2c:1e:81:
d3:cd:f7:29:51:ee:d1:8f:4d:73:58:2a:80:34:c1:
62:46:a6:32:3a:e6:2f:b2:3d:21:47:18:89:b9:20:
72:f8:37:28:fb:92:cb:a3:38:6d:8e:c2:85:fa:13:
77:b3:ee:9e:db:58:70:b4:75:50:7f:bc:f5:8f:85:
6a:01:9a:e7:27:15:c7:b2:43:e9:d9:4c:25:ef:3f:
11:11:f7:98:9e:99:31:0f:ba:4d:30:9d:a7:7e:14:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4A:08:72:20:0F:F6:31:88:64:48:A7:39:0F:A2:AA:04:25:64:6D
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c4:46:f7:a5:f9:87:a6:ca:5c:e0:c1:c0:15:a6:a0:22:16:
57:a6:10:b5:6b:21:1a:b9:35:3a:e2:2a:40:a8:d6:c7:ee:89:
cd:50:a7:c3:ec:78:ba:b4:77:d6:c7:00:c7:46:02:56:64:78:
cc:5d:74:b2:f3:c2:a2:e3:67:f0:da:54:15:90:e9:d8:43:85:
ce:81:dd:4b:42:8f:67:07:c2:7d:ff:7a:78:6a:08:fd:3d:7e:
e7:58:e4:90:94:95:e9:ec:92:1c:8d:00:d2:bb:7d:dc:8d:47:
16:89:b3:bd:b1:e2:e9:2d:05:96:06:bc:5a:ba:f5:de:eb:9d:
60:15:b7:63:60:48:71:07:c2:f9:23:7c:94:4c:74:9d:a8:4d:
1e:f4:4c:1f:5d:24:dc:fe:2d:40:45:9a:d1:ac:38:fe:04:0a:
d5:0c:3e:00:5a:d6:c3:cf:32:3b:f3:65:a9:02:fe:8e:ea:a2:
c3:13:12:3b:a3:59:a9:2e:4a:18:72:2d:8e:27:30:d6:72:15:
d1:60:2f:96:b7:ef:32:45:c3:9f:63:6e:22:bd:8d:83:2b:28:
e9:65:59:32:3f:2f:76:19:5a:d1:c3:7f:55:b6:94:6f:47:f9:
aa:04:76:b2:4b:34:59:89:7b:8e:51:de:0f:80:90:b6:38:5e:
53:5d:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:14:44 2025 by rpki-client