Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File: jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier: +fmiaogPfQ25KxPjiDlLBV/kvHuEM4g7MrjoTmLHwnE=
Subject key identifier: 25:5A:1D:32:15:30:72:43:DA:06:96:98:FC:2D:40:0C:48:F3:90:E3
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial: 01965E3A81C81B0EFB609126C8AD181C8E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number: 1195
Signing time: Tue 22 Apr 2025 16:00:14 +0000
Manifest this update: Tue 22 Apr 2025 16:00:14 +0000
Manifest next update: Wed 23 Apr 2025 16:00:14 +0000
Files and hashes: 1: Af23iU2cOAjf5HW9zn9fh70-n50.roa (hash: KFEfbZsYVTLnLOFsm4vXZoNvNqznJDGo1YKGYJ8NDjc=)
2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: vfkRwsR2wyKQ4NiJJUMRjwI+BmzjL8yVB1CyzGjsz/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:81:c8:1b:0e:fb:60:91:26:c8:ad:18:1c:8e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Validity
Not Before: Apr 22 16:00:14 2025 GMT
Not After : Apr 23 16:00:14 2025 GMT
Subject: CN=255a1d3215307243da069698fc2d400c48f390e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:49:5d:85:0a:a8:67:46:c5:fb:1f:fe:25:
9c:c8:a9:15:f0:01:86:cc:54:c0:16:7b:f7:4c:56:
9c:9c:e7:3a:0f:5e:77:f1:7d:2d:28:32:bb:46:f9:
e4:99:f0:ef:8f:88:43:b7:b5:31:d3:37:63:52:a2:
e9:b6:a1:7c:f7:70:ec:73:85:e7:6f:ce:c1:e7:33:
d1:c9:b6:90:3a:23:27:24:42:fa:a5:31:b8:f7:9c:
5d:d1:15:bc:f4:ff:d9:aa:5c:b7:c6:58:09:4e:9e:
e1:15:3f:a3:5b:f9:a4:6d:1e:02:de:61:81:d4:d2:
4f:44:a2:48:f9:b4:e6:74:c8:cd:b3:40:93:8a:86:
3c:91:5d:0f:27:7a:76:25:49:68:ff:2e:96:f3:17:
6e:82:de:b4:4b:70:13:6f:aa:24:29:fb:39:b6:98:
2c:a9:7a:83:a8:45:d7:1e:fc:65:1e:25:e8:82:85:
4e:cb:04:76:cd:5f:22:3a:6a:f3:7c:5d:60:f5:df:
6b:02:4b:b1:98:af:1c:f6:57:48:10:68:ed:67:86:
c2:3f:18:ca:9d:2d:80:3f:4d:ef:f1:19:4c:91:ef:
b7:c8:a8:09:57:ab:5f:a4:dd:ed:b8:60:f9:c1:d3:
39:f9:cd:1b:97:d8:9b:74:a1:27:06:0e:64:80:01:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5A:1D:32:15:30:72:43:DA:06:96:98:FC:2D:40:0C:48:F3:90:E3
X509v3 Authority Key Identifier:
keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:91:99:cf:d2:55:5e:4a:4b:18:3f:70:4b:44:3b:6d:47:f3:
11:4c:02:13:63:b7:44:86:81:d7:e7:dd:81:60:01:6a:39:7c:
77:de:fd:b9:ac:7c:41:82:60:cf:86:0f:a0:59:7c:62:11:a5:
fe:e2:ca:60:63:f5:ff:e7:3f:57:88:04:5f:ed:4d:01:df:44:
9e:74:a6:15:7d:06:6d:00:02:ac:d3:5d:7a:ad:1f:18:dc:76:
c2:d5:85:9e:d2:13:c8:28:76:4c:eb:6b:f1:32:65:85:85:05:
c4:68:63:bd:c4:a4:cd:94:7e:3f:83:46:4a:7a:d9:c9:b9:ce:
79:c7:a6:d3:a4:05:33:64:03:7c:c0:86:62:e7:b5:a1:9a:24:
38:06:f5:c3:25:3d:b6:b2:3c:76:90:1c:1b:97:b6:03:50:05:
e3:60:fb:84:d1:b0:71:14:8c:be:cd:e8:47:de:87:da:cf:d8:
05:18:68:02:fc:02:a6:e4:96:dd:08:1a:84:9d:b8:05:a4:52:
39:f3:44:18:a0:4e:59:b0:35:f8:46:bf:22:4d:05:2b:42:58:
d2:a4:96:a2:01:a4:99:1f:ea:40:bb:c4:a4:10:c9:43:38:ac:
e5:86:d7:f5:00:b6:e2:14:36:92:54:55:08:1c:35:da:84:77:
e0:32:27:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:37:02 2025 by rpki-client