Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier: MLsxWE+HX0B3/yqaGRbrcvjGl8XXijnWsM0o1LreB7E=
Subject key identifier: 75:D6:AF:21:59:C6:A6:FA:90:A1:61:1C:E5:25:7F:67:38:08:58:5C
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 01965349F4BD5CFD577CA428B63BD552E9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 13:01:17 +0000
Manifest this update: Sun 20 Apr 2025 13:01:17 +0000
Manifest next update: Mon 21 Apr 2025 13:01:17 +0000
Files and hashes: 1: 7Ih44HEchM76fosssYsDhPW80DM.roa (hash: fUnotk/PUA4nwBmKa2OkgoRu1RIyYVBHFgrPwz0Fmwc=)
2: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: 7XLZTpKMP2jm/Ul8YH53rMqKZWnkkI1Yte6CmXFTVjg=)
3: tnLXZpAcdsupjiIll_iKlzExQoQ.roa (hash: mDoarqNRra8hpVT2LOO1TVGYi/0LvJxSxAQ/O0wAR7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:f4:bd:5c:fd:57:7c:a4:28:b6:3b:d5:52:e9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: Apr 20 13:01:17 2025 GMT
Not After : Apr 21 13:01:17 2025 GMT
Subject: CN=75d6af2159c6a6fa90a1611ce5257f673808585c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:3e:19:82:c3:7e:fc:df:1c:1c:6b:b4:6a:
8e:e9:46:9a:7d:4b:89:8f:42:2b:03:7f:32:25:d4:
91:24:38:e8:22:90:a9:4f:f0:bf:03:c4:10:7b:70:
1e:45:b7:57:c9:e9:a5:59:87:c8:53:8c:12:1f:23:
f5:58:83:fe:47:88:f8:3b:07:fe:48:ad:75:be:a9:
25:c3:13:2a:15:1a:d8:81:6e:e0:ed:52:3b:6d:08:
34:a4:52:e3:a8:44:6c:12:a6:6d:b9:3f:50:36:c6:
a4:a2:49:b1:01:63:01:6f:58:77:d7:55:56:fb:c6:
d6:ff:50:c1:d6:a1:3e:7e:d8:4c:70:b3:fc:2d:78:
19:15:51:4b:26:7c:8c:6a:c9:4d:39:7e:c4:fb:c0:
8b:16:1d:d7:6c:ea:9e:aa:ae:33:76:58:e2:00:92:
a4:32:23:2c:13:0e:60:0f:5b:4f:8e:c2:27:8a:43:
4e:12:ff:01:29:9b:78:66:aa:73:99:a5:06:d1:7e:
57:ca:da:fa:74:3c:0a:e8:6a:a4:b4:4c:fa:12:1b:
ad:14:9d:b4:7d:b7:67:11:44:74:5e:66:c8:2e:5b:
10:ef:57:23:6c:3e:7a:d5:35:4b:01:53:9f:1d:57:
99:ff:db:19:85:04:d2:42:a0:99:e1:08:0e:4c:77:
1a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D6:AF:21:59:C6:A6:FA:90:A1:61:1C:E5:25:7F:67:38:08:58:5C
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:64:69:25:f5:7e:f3:14:d1:03:c7:57:40:3e:12:f7:ef:c4:
a1:8e:ba:38:99:93:6e:cd:4e:a1:cd:02:7b:ab:7f:3a:17:0f:
06:97:81:4c:6a:f3:f8:50:b0:f7:d7:d1:7f:cd:ee:c7:ec:68:
30:3e:f1:15:a6:dd:27:79:70:a1:7c:50:0b:22:51:db:b5:51:
5b:9d:58:93:73:4e:79:78:b2:6f:c7:a8:1e:71:c5:f6:58:33:
01:57:13:7f:94:b2:a1:9c:d5:5a:6d:73:26:a4:96:0e:e9:26:
4f:09:cc:b5:09:0c:d1:c9:74:d6:5b:a9:f8:5f:c1:f3:a3:e5:
5c:95:be:82:77:39:ca:7c:bb:f2:c6:83:9f:47:e1:db:03:a5:
bc:66:b7:1a:e4:77:aa:ad:01:04:ec:eb:89:a0:6d:3f:35:52:
a4:8c:ae:22:d6:50:9b:9d:84:8e:58:74:92:c6:d8:cf:e9:f6:
d2:e2:0e:29:c9:02:b8:59:31:35:f3:77:89:22:a6:d5:4e:24:
50:09:79:20:06:85:8e:67:92:a4:fa:b7:bb:f3:c1:b6:9c:ef:
25:7e:f7:56:b7:f6:19:42:9f:c9:52:56:e0:9c:8c:e6:29:44:
1e:1f:e9:d1:58:3d:8c:9d:2b:09:3f:5d:30:97:93:e1:8b:30:
fc:0b:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:37:37 2025 by rpki-client