Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: NF2CuMNxh6daMG1ruMCWFJfWsNsSEhZISW9TnWktR+M=
Subject key identifier: CE:F6:03:F9:78:1B:96:CF:7F:BD:92:3B:90:B8:4E:83:A9:29:1D:CB
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 019654C994C38AFD33E0B706E537808936D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 0E0D
Signing time: Sun 20 Apr 2025 20:00:18 +0000
Manifest this update: Sun 20 Apr 2025 20:00:18 +0000
Manifest next update: Mon 21 Apr 2025 20:00:18 +0000
Files and hashes: 1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=)
2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: 1CbEgWXzGuOc+6s4PtJbpyaPmLJkMWz726ad7QnAoI8=)
3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:94:c3:8a:fd:33:e0:b7:06:e5:37:80:89:36:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Apr 20 20:00:18 2025 GMT
Not After : Apr 21 20:00:18 2025 GMT
Subject: CN=cef603f9781b96cf7fbd923b90b84e83a9291dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:d7:5e:61:de:3d:3a:90:75:ab:27:ef:06:
19:52:e4:71:a9:d9:16:8d:1b:9b:21:93:72:bd:83:
dc:92:6d:dc:30:b8:d2:6e:71:d0:66:61:03:30:e5:
64:3d:9a:82:87:26:dd:41:84:d9:a1:c9:bb:f7:fd:
37:06:60:58:52:c1:24:b7:02:5b:a9:4e:f5:98:cb:
0a:77:c0:5d:85:19:ae:8a:bf:16:99:ee:3b:b6:95:
21:1a:9d:98:36:76:70:af:53:57:83:a3:37:41:e8:
24:a5:4c:7f:c5:92:a7:68:d7:c6:1d:12:31:e1:90:
16:ee:2f:63:49:4c:09:8e:fd:54:36:56:bb:e5:cb:
ad:16:1a:dd:ab:72:b0:7e:21:e3:18:82:5c:20:d9:
49:9a:64:c5:63:51:17:8f:88:70:5a:35:70:98:9e:
e6:d2:d5:d3:29:9b:61:15:b6:85:ec:54:60:13:e4:
c5:ea:33:72:f3:2b:63:d6:59:51:80:bd:dc:5e:5d:
9c:2c:f9:6f:ec:a6:bc:d2:9f:cf:17:4e:34:21:b7:
5e:a7:8f:ba:79:29:5d:56:32:44:56:ab:66:57:a3:
cf:db:fb:92:a5:3c:1d:35:60:87:0f:46:ad:e6:7c:
0b:65:4c:20:8e:d7:e4:68:47:4e:d2:ac:46:db:79:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F6:03:F9:78:1B:96:CF:7F:BD:92:3B:90:B8:4E:83:A9:29:1D:CB
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:62:e0:68:60:1a:67:d2:2d:d2:e3:65:b7:38:6d:49:97:c6:
96:d7:38:ed:87:a3:bb:c1:9a:bb:2f:4c:1a:23:da:9f:91:01:
aa:1c:8b:b7:62:09:da:a1:1e:61:f8:e8:cd:99:d2:f3:e5:9f:
d3:a4:cd:35:2e:de:c0:ed:c2:b1:93:73:36:a4:50:2d:34:c1:
e6:4f:e7:33:b7:38:41:9f:cc:4c:86:56:9b:33:0b:d9:32:5a:
d2:90:02:fd:20:23:c8:c8:89:4f:30:3a:0e:5d:ba:d9:0f:a7:
a3:5e:db:6e:c3:a9:29:c6:88:e0:f7:ff:36:6f:ab:e9:10:05:
65:f0:b6:48:2f:10:85:8a:dc:ce:43:c1:a6:f1:57:c3:b8:6f:
79:8a:a1:5e:80:53:90:a1:3a:c0:62:61:1f:7d:e1:6c:ad:46:
fe:06:6c:37:02:98:2e:c3:f5:dc:00:77:f7:ed:b3:0a:96:c0:
90:84:f6:7e:99:3b:fd:c9:94:f0:a6:65:65:90:c0:16:66:09:
2f:22:2c:9d:7e:cf:95:76:bf:4b:35:be:c5:54:ab:21:0c:81:
19:d4:81:56:ec:a5:a1:ec:78:a3:66:82:a6:57:c2:71:04:fa:
89:a1:d8:f1:64:89:42:ab:e2:f3:4c:9d:8b:62:e0:31:b1:9b:
0c:bc:db:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:49 2025 by rpki-client