Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
File: jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json)
Hash identifier: u+IGlEbo8FW9+dbJTkzjTXx2pCtSoxd7Mcl8uUSFxj8=
Subject key identifier: AB:8E:B1:F8:9E:33:55:C4:A2:46:1A:D8:81:E4:8E:29:13:2D:BD:91
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial: 019652DB67CBDF8294CD88BB9B7C4E203955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 11:00:32 +0000
Manifest this update: Sun 20 Apr 2025 11:00:32 +0000
Manifest next update: Mon 21 Apr 2025 11:00:32 +0000
Files and hashes: 1: IGFAJ7tvsxoewBIz-CIaT5Rb9KA.roa (hash: b9kbJBvM0NpcufGFz0NyZFZ9HPycn+QMvqEDUNgTAzI=)
2: MQoy-ze9auOiRnYWkevo5ug6b74.roa (hash: e50zWSr9FAOpXTByWZCk9NzWnhOqRMc92RH7Gp5XlqE=)
3: ivVRenlAkxSye3NC_DyoAxqoj6M.roa (hash: tMvkuqfZVs7G8eRqzF/eWUmt5tCQ8iMBN+34AAtvEYo=)
4: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: RStGUrWrQtZ+s3RnQFbSgKJV16lCEJOd2beSQJajxXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:67:cb:df:82:94:cd:88:bb:9b:7c:4e:20:39:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
Validity
Not Before: Apr 20 11:00:32 2025 GMT
Not After : Apr 21 11:00:32 2025 GMT
Subject: CN=ab8eb1f89e3355c4a2461ad881e48e29132dbd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:b9:a7:d4:99:8c:f8:af:97:7b:6d:1a:32:
3f:36:97:a3:01:85:f0:13:45:13:da:b2:e7:f1:aa:
99:29:e1:b0:fd:cc:da:00:7a:a4:68:61:f5:06:53:
82:35:42:ad:ae:f8:80:7c:c3:a5:08:2d:37:c5:bd:
05:70:57:35:3b:88:7d:a6:a0:eb:17:e6:e5:62:f4:
fb:ef:45:2b:18:95:09:55:a6:38:43:80:62:d8:fb:
19:a0:fc:82:0e:74:42:d1:02:ff:5a:74:3e:0e:f4:
7b:ba:46:d8:a9:c6:67:d3:f4:84:ad:12:3a:df:b9:
a8:18:48:cd:c7:db:f8:65:eb:55:d7:4e:2b:66:ad:
d2:f0:b7:48:74:ea:01:c3:80:b4:f1:72:9d:37:a0:
56:eb:bd:f2:f6:53:12:8d:ed:42:79:3f:ec:72:63:
d4:9b:aa:12:ec:69:fb:7a:72:31:32:91:b3:6f:cc:
1e:03:75:fb:6e:d4:15:5e:16:ec:bc:94:2c:a8:32:
ba:67:1b:ec:48:c3:43:88:e6:82:c7:41:e3:bf:54:
5d:2b:1e:5b:75:a0:42:ac:d2:4c:93:78:20:70:84:
cb:f4:39:da:4c:eb:8a:cd:d1:42:65:dc:da:f0:95:
7e:13:69:e5:12:2c:70:ff:ff:02:c7:c5:f3:7f:cd:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8E:B1:F8:9E:33:55:C4:A2:46:1A:D8:81:E4:8E:29:13:2D:BD:91
X509v3 Authority Key Identifier:
keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:90:ac:d7:c4:7c:cc:c2:cf:08:5e:29:ee:e8:94:51:24:37:
ff:7f:f9:e9:67:68:8e:37:05:75:1b:e1:0a:a3:e8:dc:a6:91:
12:a1:98:9f:68:57:d8:6f:57:b0:de:44:a8:12:76:6e:b9:96:
c8:ae:b0:b9:ba:2a:d4:d0:72:ce:36:46:31:23:d6:02:61:76:
a2:0c:e9:3d:46:91:cc:36:f2:e9:f5:9c:a4:82:da:35:76:c1:
7a:ec:2f:10:0a:c5:41:7f:e6:0f:36:4a:9f:62:f5:65:60:aa:
cb:89:8a:0e:cd:3c:f8:81:a4:d6:63:16:ef:87:c8:4b:7a:67:
b6:e6:44:22:8b:c7:2d:be:94:2f:7a:10:30:57:a8:04:66:a0:
45:ce:51:93:a0:0b:a3:98:a5:b2:08:5b:f7:ce:2e:f2:69:ba:
08:cf:77:d1:96:e6:97:df:02:d3:d3:7d:98:d5:79:6b:d2:32:
f6:a4:95:16:4b:20:e6:80:4f:d7:2e:2d:59:18:b1:0f:b3:fb:
0c:9e:6d:b5:d5:d4:ea:9d:0c:2c:0d:e9:33:fe:2b:0d:11:42:
ba:0c:fc:65:f3:e2:73:e7:04:47:b2:72:0e:1d:90:1d:9e:40:
c6:c7:4f:50:d2:f0:34:73:86:a7:9b:72:4d:df:7c:73:ce:28:
78:f3:c8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:52 2025 by rpki-client