Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: PPG8/xa5uJ4QaT0hDq8YTCpuRx2oJZ+CsNfxmEdNkm0=
Subject key identifier: 52:57:AF:60:08:CF:D5:FD:76:C5:6C:EC:08:3E:0A:FF:CC:7E:59:0B
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 0196444455DB662AB367AB6E5685AA324575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 0372
Signing time: Thu 17 Apr 2025 15:00:51 +0000
Manifest this update: Thu 17 Apr 2025 15:00:51 +0000
Manifest next update: Fri 18 Apr 2025 15:00:51 +0000
Files and hashes: 1: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: LMHgrCX30XyEw4xdna/cgE135hOKIkbWdnB2963zgTg=)
2: s8IxW5tuKoaeGci5PMMsvkBpqVA.roa (hash: r/ncpxBVtrl7LSWT4Ir7OLnEXZq1sFDkQ+rRRvqTryo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:55:db:66:2a:b3:67:ab:6e:56:85:aa:32:45:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Apr 17 15:00:51 2025 GMT
Not After : Apr 18 15:00:51 2025 GMT
Subject: CN=5257af6008cfd5fd76c56cec083e0affcc7e590b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:13:02:34:f6:8d:73:0b:bf:02:1c:e0:31:
02:01:86:1d:3e:94:5c:b8:15:8b:d9:25:20:be:48:
2e:69:18:a4:a4:40:6b:39:00:fd:34:e6:e0:a7:7d:
14:b6:49:17:da:ae:95:30:f2:f1:5f:67:d2:b7:65:
df:41:8e:b1:61:f1:58:5e:5d:23:f5:08:14:ae:35:
ed:bb:49:83:34:59:8e:aa:26:4a:94:0a:9c:60:0b:
54:94:7f:08:25:3b:75:81:ee:f2:4b:46:48:96:7b:
3b:45:2f:4d:9e:be:1e:56:13:dd:51:66:3f:6b:f1:
3d:d9:0b:e2:1b:d4:f4:9e:99:15:b0:02:35:a5:35:
66:a9:84:d8:41:5f:0d:65:0f:ec:39:a5:d2:87:5b:
a6:79:ea:90:af:34:88:d0:6f:61:be:ba:2e:83:44:
f0:87:6e:9e:17:c1:03:54:5b:06:6f:79:b6:77:3e:
15:b0:3d:de:b2:7b:ea:13:70:6a:58:71:5e:0f:90:
1e:55:5f:c9:b6:3b:b0:19:26:0a:68:f6:fe:b4:31:
e1:b7:c7:61:cb:18:48:b6:8d:54:e1:1c:33:a9:1d:
32:dd:20:db:51:d3:06:42:3b:c1:32:ab:78:28:cc:
25:15:ed:1d:c6:8d:1c:fe:56:a9:1f:21:f9:8b:7d:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:57:AF:60:08:CF:D5:FD:76:C5:6C:EC:08:3E:0A:FF:CC:7E:59:0B
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d5:8f:c6:79:b4:d6:7c:7e:b4:3b:df:84:05:16:f1:69:c8:
64:63:f8:e0:1f:a5:52:ae:f0:a8:a6:d2:50:0f:5f:92:d4:57:
41:30:47:38:e0:7d:18:03:ec:f4:36:86:8b:ef:11:7c:f8:6e:
4a:1e:8e:f6:37:33:7f:75:c7:0e:9a:77:a5:0d:75:21:2c:be:
27:cf:7d:d2:f1:8e:d6:75:ea:6b:28:09:1a:16:1b:dc:98:bf:
7c:a3:68:eb:1b:59:f5:c5:f6:b5:db:46:14:77:17:72:cd:39:
c6:3a:1e:f0:5a:76:0e:6d:26:33:e1:4d:78:33:97:0f:e6:76:
6c:a4:df:a7:28:8d:f6:67:b7:5b:fb:32:46:38:dc:eb:7c:ee:
de:06:e0:c0:f8:93:0f:83:56:9a:59:78:80:8f:27:58:b9:f3:
a3:c6:9e:6d:7a:93:64:20:f9:53:68:1e:50:2d:21:ab:0e:22:
72:c6:d8:b8:05:92:72:5e:7e:7d:f2:df:53:a8:6b:8c:c2:07:
32:b1:1c:9f:6b:77:0a:24:b2:bd:a9:1c:07:01:e4:ef:6e:d7:
6c:f7:6c:4b:0f:92:24:f1:0d:9d:ea:61:27:61:2a:fe:59:f2:
ee:d3:66:af:e5:27:29:1d:ff:ba:d5:e9:f8:e2:e4:8e:17:7d:
42:0b:06:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:54:11 2025 by rpki-client