Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier: YPNwJgmmWKzj0eFgTGR0XvU29N8/JLYYwj+DjltuSEo=
Subject key identifier: 3E:99:7B:53:9D:45:84:4B:9C:63:7B:20:4A:BB:21:9E:2E:5C:8C:06
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 01964D4751C4DF904AF1CBDBF32146914855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number: 0908
Signing time: Sat 19 Apr 2025 09:00:41 +0000
Manifest this update: Sat 19 Apr 2025 09:00:41 +0000
Manifest next update: Sun 20 Apr 2025 09:00:41 +0000
Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=)
2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: TfEqJYGvyQLW1zFpCSd24u/ULLNCBXCIqTFnRwP3d0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:51:c4:df:90:4a:f1:cb:db:f3:21:46:91:48:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Apr 19 09:00:41 2025 GMT
Not After : Apr 20 09:00:41 2025 GMT
Subject: CN=3e997b539d45844b9c637b204abb219e2e5c8c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:77:8c:8b:6a:57:85:b1:bf:d3:d8:e0:7f:54:
36:7b:51:61:eb:76:49:7e:4e:ac:5a:79:14:4f:6a:
ea:68:65:99:da:2b:90:c2:14:98:60:70:89:87:bd:
cc:5c:c2:e1:b7:e9:c9:77:24:e1:31:7a:b8:b0:c3:
c9:dd:20:40:66:32:f5:14:78:30:21:95:e3:9f:0b:
bb:9e:22:1d:21:c1:88:e3:1b:41:d2:a9:d0:95:01:
81:fb:67:76:ed:f9:00:b9:df:f4:30:12:f8:98:ee:
53:0d:c4:aa:8a:83:08:8f:2d:eb:68:85:58:8c:07:
24:fa:b2:a7:50:5a:5a:2e:09:08:a9:04:28:38:3d:
4b:c0:6a:a0:fd:05:24:b8:57:31:7c:0d:5e:77:30:
08:1e:10:a5:8e:0c:c2:18:98:7e:4f:cf:80:3c:6a:
de:c4:67:a1:6a:e8:63:84:05:0f:e9:d4:0f:59:3a:
01:2b:3f:75:88:a3:a4:bc:ef:55:dc:f7:9d:15:38:
aa:3e:d7:cb:68:1d:7c:0f:80:2e:16:4c:75:e8:2f:
85:3f:6e:0a:d3:e4:31:46:9d:53:aa:34:0d:ff:ad:
b2:72:cf:f0:c9:c0:8f:3a:74:71:c7:55:ee:90:a1:
84:d3:3d:0b:c4:a2:5c:09:38:62:3a:dc:d2:fb:1b:
3e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:99:7B:53:9D:45:84:4B:9C:63:7B:20:4A:BB:21:9E:2E:5C:8C:06
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:61:3b:d5:2e:87:18:f6:c6:49:9d:02:f0:c5:11:d9:15:46:
1d:15:00:99:7f:a4:ed:9a:fc:60:6d:53:72:aa:05:2e:1a:c4:
88:63:a9:27:b6:a7:f0:0e:a7:c2:f8:09:d1:eb:fd:05:65:61:
dd:e9:6f:a8:04:7d:da:4f:76:f9:5e:65:39:7f:3c:89:d7:a4:
96:fc:de:3b:16:c0:d1:fc:e3:4f:6d:6b:15:88:ac:07:f8:9f:
db:df:81:d5:96:65:1a:53:21:6a:fa:86:04:c1:c6:59:22:cc:
c5:ac:df:b8:80:9a:dd:85:c6:f7:de:9b:dd:fc:27:c6:f4:51:
40:ff:47:ec:5e:b5:6c:6f:42:dd:8b:bf:77:ea:50:b8:af:87:
23:63:9b:a7:20:9e:3a:a8:cd:62:39:16:08:75:1a:4b:60:9f:
d9:81:af:2c:ad:4e:65:53:90:b6:39:1f:25:35:9d:84:ec:0d:
a3:c9:07:1f:f4:90:21:ce:ba:91:db:1d:c3:02:f1:d3:76:08:
d1:ef:16:56:c6:88:d5:94:9e:f3:6e:36:b9:92:b0:8e:32:4e:
4c:e0:3c:61:ed:d9:54:ef:cc:8a:09:80:fe:41:54:e0:dd:4a:
4b:4e:c4:4f:e5:6e:24:0b:7a:45:7c:9e:b8:5d:c7:7e:12:23:
44:aa:d8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:04:46 2025 by rpki-client