Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
File: jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json)
Hash identifier: T/7xVcTRyOJL3AUouyq3u3O1EXB/TV8jciZTcix+UbQ=
Subject key identifier: 14:16:2E:C0:FB:F6:6E:A7:A8:7D:94:D2:80:06:BC:92:DD:68:50:D2
Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
Certificate issuer: /CN=8d843b57d0afcc112fe389668bf675d80d8223da
Certificate serial: 01962D8638887108CDD24556522F96B1D8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
Manifest number: 060D
Signing time: Sun 13 Apr 2025 05:01:33 +0000
Manifest this update: Sun 13 Apr 2025 05:01:33 +0000
Manifest next update: Mon 14 Apr 2025 05:01:33 +0000
Files and hashes: 1: iKKb1X29tTU2k_RZJyC1P6S0W1I.roa (hash: JYbd5SDgMPm4EIN7ny/Mr7yif1cItUNdM4vZHpLmqsU=)
2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: 3BG0T1+tqg3Vq6hl9jlJmRoMX3DrX1Iw5/pxHrrmW3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:86:38:88:71:08:cd:d2:45:56:52:2f:96:b1:d8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da
Validity
Not Before: Apr 13 05:01:33 2025 GMT
Not After : Apr 14 05:01:33 2025 GMT
Subject: CN=14162ec0fbf66ea7a87d94d28006bc92dd6850d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:d1:a1:fe:20:d2:17:b3:3d:65:95:4c:04:
f8:ea:bc:96:a6:97:fb:7d:f0:47:a3:3d:68:2d:da:
ce:bf:1e:5e:69:9a:42:f0:52:80:e9:b9:1d:59:50:
cf:83:19:03:d9:6b:0b:44:7c:0c:2c:bb:b4:c8:ff:
0d:53:59:f0:31:5b:b5:ec:cf:cd:ee:1a:2d:3b:17:
0c:f8:be:9b:a2:84:c6:65:a2:84:1f:06:fc:fd:89:
bb:30:ae:c4:65:77:df:f5:4a:23:d5:c3:3a:cb:c7:
63:49:f9:a9:e3:17:c1:7c:e4:93:74:86:0e:a1:3e:
7c:ef:0a:f9:d6:27:ab:d1:82:de:d0:93:b5:bb:03:
b2:72:3b:97:33:14:30:3d:b3:01:1d:fa:95:0f:86:
a1:5f:d7:60:80:f1:a6:94:3c:e2:5a:28:8b:39:a9:
ed:cd:21:2a:5e:3c:78:16:54:1d:d0:79:34:21:c8:
6c:3a:8b:7c:fb:f6:ee:05:12:ee:64:54:8d:8b:1a:
a3:6d:e2:bb:3f:f7:4b:99:02:cb:df:71:fe:ad:a7:
06:3f:c8:51:62:4d:66:f9:ed:dc:3c:1b:d2:60:fb:
f3:4f:b1:08:de:84:35:e5:82:be:26:99:c4:67:92:
99:9d:a4:75:77:eb:ec:4c:dc:a3:5b:a8:5a:4b:64:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:16:2E:C0:FB:F6:6E:A7:A8:7D:94:D2:80:06:BC:92:DD:68:50:D2
X509v3 Authority Key Identifier:
keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:26:75:ce:1f:35:9f:66:47:49:14:34:0a:96:c2:f2:ac:98:
43:8b:d0:3f:01:0e:44:fc:9b:5a:6d:91:08:1b:36:e2:b2:2d:
3c:89:0b:b6:46:bf:14:b2:38:7c:ac:2c:32:7d:52:3c:4d:72:
07:1f:ed:88:83:8b:42:3a:61:38:18:08:a6:05:90:5d:dc:06:
bd:49:07:a0:33:33:a1:91:12:cf:26:5b:5b:e0:8f:11:e8:0c:
53:52:59:05:14:d0:28:6f:11:d4:15:b5:ed:e0:5c:0c:0d:ca:
de:fc:81:e9:0c:dc:56:7b:6c:36:8c:82:e6:19:4e:7e:b1:9b:
94:6a:66:17:58:16:80:6b:cc:2a:99:00:5b:d4:43:60:5b:7a:
b3:a8:21:ea:d9:ac:bb:3e:4d:25:c9:35:b3:ed:68:c5:f1:31:
4f:da:0b:0e:74:fe:56:8a:e9:58:7e:b4:44:76:df:4b:ab:0e:
34:b8:47:e9:77:dc:3a:85:4e:ca:2d:d6:cf:2d:b6:7d:15:9b:
3c:f0:7b:e2:e1:b2:71:32:dc:d5:da:7e:84:70:ae:e3:8b:d0:
5c:ad:ca:e0:f6:1f:05:31:22:de:95:81:9d:ed:d2:52:de:c2:
e7:c3:8a:cc:27:7e:ce:44:05:f9:95:c9:ee:a4:b9:dd:3f:60:
28:8b:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:17:52 2025 by rpki-client