Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: LrbF2GLej8QW/hccDeteb91dVguCT6gTzn2gi6Md6CM=
Subject key identifier: 80:34:C3:99:90:75:56:C5:36:BD:C6:F8:AC:31:C6:1D:00:A6:7C:1D
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 01964556B1B7BABD6EED56EEADC373A95422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 1263
Signing time: Thu 17 Apr 2025 20:00:31 +0000
Manifest this update: Thu 17 Apr 2025 20:00:31 +0000
Manifest next update: Fri 18 Apr 2025 20:00:31 +0000
Files and hashes: 1: B0VOGqgWvciGn9lsPPPNtDMM_cE.roa (hash: H0LM3F0MCvrmnF+41NjCVulojTYy2eQ3Qd3O1jXQklA=)
2: CC2hAsaTX94OsKPmChtfbXTcFNE.roa (hash: l5IYiZcm9PSDWMsJtwhQfhiyJDNyjG8wrsa+ZBwNb+0=)
3: IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa (hash: rOrP7u2w0rkDr+dN4bu5dl5k+6reLBo13wIVMJJiIoo=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: vzQByytTHg1SlHLQhTIomywD61eB42CH58rcbgGS+Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:b1:b7:ba:bd:6e:ed:56:ee:ad:c3:73:a9:54:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Apr 17 20:00:31 2025 GMT
Not After : Apr 18 20:00:31 2025 GMT
Subject: CN=8034c399907556c536bdc6f8ac31c61d00a67c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:14:7a:9f:9e:f6:1e:1e:83:6e:2b:dc:a1:
e3:da:04:48:17:74:4c:f4:a5:37:6a:a7:e6:38:d2:
f1:5a:ab:bd:33:4f:0b:b8:ca:6e:5e:39:ae:5e:af:
6d:03:24:d2:2b:b0:e9:5e:fe:3b:a8:9d:10:0c:27:
89:a1:36:0c:bd:63:e1:93:94:e0:d8:e4:0b:df:fd:
df:bc:ab:47:ec:b1:33:ec:64:a3:54:c6:50:1e:0f:
40:28:02:f5:07:67:6e:75:4a:d0:e8:84:7a:fd:1a:
c2:f1:e9:db:73:a3:02:2f:83:55:c2:87:b4:6c:36:
e2:d2:18:e9:93:14:ef:4f:1a:df:aa:e1:8d:ff:c6:
60:bb:cf:2a:92:c3:25:c7:75:df:23:2c:b4:fc:c0:
ad:d8:eb:ed:67:ca:d7:00:06:61:68:f8:17:3f:08:
c1:9b:7f:03:cb:2a:48:bc:9f:fa:c9:0e:b8:78:17:
74:52:7a:d5:47:ca:47:ca:99:bf:70:00:63:d8:66:
e1:68:b9:df:26:fd:98:62:a2:d9:a5:42:33:16:11:
e4:72:85:ed:1c:43:55:c8:68:4a:7f:b8:f1:25:84:
79:42:aa:96:c2:ff:2b:af:5b:1d:cc:ba:23:48:a0:
a2:49:53:0c:88:64:97:5d:9d:c3:d6:12:26:f7:54:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:34:C3:99:90:75:56:C5:36:BD:C6:F8:AC:31:C6:1D:00:A6:7C:1D
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ff:bc:dd:7d:d9:68:c6:6d:48:4d:3a:5d:56:7e:67:17:a2:
6e:e2:87:c9:82:3c:76:43:0c:18:5a:64:fe:96:d9:ba:a3:a6:
75:d3:04:ca:17:68:45:5d:d2:43:94:09:ce:05:c2:ea:25:87:
29:2d:90:3b:09:05:18:2f:ce:e3:f5:0c:33:82:51:ae:94:1b:
33:af:19:5a:66:70:a2:b4:01:4d:06:15:ae:76:3b:36:36:1e:
02:2a:e4:63:f8:61:de:0e:df:b5:25:9c:b5:78:40:01:bb:20:
e2:35:b7:55:4c:06:88:0e:54:c9:fa:cd:18:3e:f8:c2:c9:b3:
11:b5:7d:ab:b3:72:15:f9:ed:f9:78:68:01:85:54:39:93:1b:
a6:65:70:24:ae:a4:16:0d:2d:c0:3b:d8:4a:95:0e:cd:ea:11:
d4:39:45:77:3b:5d:28:29:ba:e1:21:a6:2b:c1:1b:87:cf:c2:
23:06:30:64:1a:4e:d0:6a:0b:fe:b1:e6:99:af:f8:76:69:17:
f1:25:4f:2c:fc:dc:d7:62:a5:08:76:23:87:e6:29:97:a7:2c:
0d:ad:c5:b1:d8:94:dd:83:5a:a8:0d:61:9a:44:50:25:f7:73:
ab:a0:e4:b0:16:74:dc:b9:d4:45:55:3b:54:6d:3d:91:8a:76:
3c:aa:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:57:17 2025 by rpki-client