Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
File: jYhinjx4EKzCKOF6GNtnlOvtgZM.mft (raw, json)
Hash identifier: oLWvbZwuHpiYTWlM83lP4XSgSqEL0wFjKemQfH1mRCs=
Subject key identifier: 61:5A:20:EF:82:9C:0F:DB:A3:F6:34:64:C8:80:F2:49:57:7F:EF:15
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial: 01964744C5C5C74B22E911210C014D4CFCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
Manifest number: 11BA
Signing time: Fri 18 Apr 2025 05:00:11 +0000
Manifest this update: Fri 18 Apr 2025 05:00:11 +0000
Manifest next update: Sat 19 Apr 2025 05:00:11 +0000
Files and hashes: 1: ZBTvhiqTow3aNMb2aKed7aOmeLE.roa (hash: Hs63HPHm64omZRW3Iw+4oLNTtYpDyEs3J5diEPbkms4=)
2: jYhinjx4EKzCKOF6GNtnlOvtgZM.crl (hash: zrGN4jaxpIgyy6x9TvPdBFGxl+hffrkVYBjBtRFzRGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:44:c5:c5:c7:4b:22:e9:11:21:0c:01:4d:4c:fc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Validity
Not Before: Apr 18 05:00:11 2025 GMT
Not After : Apr 19 05:00:11 2025 GMT
Subject: CN=615a20ef829c0fdba3f63464c880f249577fef15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:c1:f3:05:0e:86:7a:73:5c:44:d9:4e:6a:
5a:3e:8e:2e:ec:3f:ce:30:6f:aa:40:61:da:4e:8b:
3f:46:54:39:31:1e:64:57:af:94:da:29:68:6a:96:
59:c8:b9:8f:f3:a2:d6:47:57:1e:86:01:e1:bc:46:
86:ab:54:5d:52:cd:0d:a5:6b:21:ba:ac:dc:93:82:
6f:33:69:8d:bb:8e:fe:61:f1:c4:f9:9a:ef:29:98:
e6:07:48:ef:26:00:26:df:02:37:86:92:d9:2f:01:
12:7c:07:74:d3:fc:0d:f5:ca:af:1b:4e:1d:71:46:
c6:44:93:3a:b4:74:cf:0e:6a:1c:53:bd:3c:e8:77:
cf:3d:db:d6:9f:41:77:76:83:99:2a:66:f4:23:52:
a8:1c:97:45:83:c3:a2:2f:c1:68:a1:71:9c:f3:8d:
6c:27:fa:fb:07:bf:cb:15:b9:bf:fc:8e:1a:9f:b1:
75:fc:3f:38:37:7b:6c:4f:25:28:79:35:ea:fc:bc:
99:08:44:5b:9d:be:2a:fa:83:18:3f:df:91:3b:a2:
90:ad:22:99:a8:7f:dc:dd:1a:11:0c:46:c3:6f:a3:
48:a3:eb:cf:ef:67:cf:c7:93:d4:64:4a:98:1e:e4:
8e:41:00:44:d7:fd:3d:1c:a1:6b:21:78:72:79:80:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5A:20:EF:82:9C:0F:DB:A3:F6:34:64:C8:80:F2:49:57:7F:EF:15
X509v3 Authority Key Identifier:
keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:19:38:e3:66:28:4a:9d:ab:b4:93:33:b6:a9:78:c5:77:68:
0e:f6:86:d6:90:38:cc:7e:10:1f:c1:aa:5b:c8:61:b1:86:c3:
47:c9:6e:ae:7a:bb:31:99:45:17:11:92:bf:df:47:b9:20:ab:
58:20:d3:77:35:8c:16:c5:08:f8:7c:0f:80:ea:df:8d:05:16:
be:9e:f0:98:e7:a0:2d:c8:87:2d:d4:17:bd:4d:f5:76:d6:59:
0a:a5:86:ee:64:4f:c7:01:51:f9:4b:39:e3:88:f5:06:fc:ff:
ac:a2:75:7a:54:4a:5c:1b:ed:9b:91:2d:dc:a3:9b:92:2b:e2:
d4:73:ba:40:04:a4:a7:5e:1b:3f:d0:d8:41:fb:38:95:33:06:
c8:0b:40:a5:0f:47:fa:dd:f4:90:a7:12:4c:72:69:97:99:67:
7f:6f:c7:25:95:6f:9e:5a:56:50:d3:9d:b2:2f:ec:9e:09:58:
f9:1e:8c:1d:7c:a2:e0:fd:26:76:07:8b:37:0f:96:55:41:34:
cc:9d:34:72:87:c0:2b:11:20:bf:8f:1c:ef:79:c2:03:a8:26:
fc:7f:eb:f4:d7:b3:6a:74:d1:67:17:7f:01:4a:df:f0:1b:38:
af:11:21:59:17:cb:6e:d2:26:e6:05:5b:ec:47:25:2a:36:cc:
7d:e5:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:32:27 2025 by rpki-client