Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier: RGWNc9E32R4twkqsYguDzWKSGmX9pAlH/cLzDSbHmvk=
Subject key identifier: 11:02:E8:B2:5D:85:E6:58:CD:00:42:28:83:CA:46:7A:F3:37:D5:1E
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 01964F6CF29E2E2453BBA98897A884EB34BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 19:01:02 +0000
Manifest this update: Sat 19 Apr 2025 19:01:02 +0000
Manifest next update: Sun 20 Apr 2025 19:01:02 +0000
Files and hashes: 1: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: RBGIt8BqMVZuwmUkDAPG6I5Oa1eS0dwYUatCVozUwQA=)
2: qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa (hash: QQptDB1uT/9FFhotqk1bN1Jx0M0NJncKcjU5av3+7no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:f2:9e:2e:24:53:bb:a9:88:97:a8:84:eb:34:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Apr 19 19:01:02 2025 GMT
Not After : Apr 20 19:01:02 2025 GMT
Subject: CN=1102e8b25d85e658cd00422883ca467af337d51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:8f:a7:7c:a8:ae:e6:81:cb:c2:77:42:54:
be:e6:59:4d:53:79:8f:85:2b:38:9f:8b:3e:7d:19:
c1:92:1d:01:a4:3f:58:1b:22:fb:c8:95:b3:0e:18:
da:13:e2:4e:c9:9a:78:8e:1d:a4:f3:10:1c:bc:7c:
d9:fc:5d:2b:ee:a3:3a:f9:f9:e5:e2:5c:66:4c:f1:
b4:6e:56:a3:62:db:35:72:dc:c3:2a:56:5c:0e:3f:
7f:6a:08:00:a7:53:70:5f:67:9b:1c:e4:f1:2c:e4:
a0:a8:dc:53:6d:ad:8d:2b:77:d8:49:ca:2f:2a:d2:
98:86:6b:70:af:85:27:62:e5:35:d8:86:ee:c7:79:
8c:9d:0b:99:12:03:56:02:b8:fb:20:ff:88:b1:c1:
27:ce:c9:c8:31:2c:67:dd:2b:cb:04:ef:1d:2b:d0:
39:b8:20:45:c6:7d:0e:22:1e:e2:2d:6c:82:e0:7b:
d8:9b:91:e3:19:9a:e1:1b:db:96:f8:2c:37:26:a2:
fe:7e:29:7e:33:97:7d:3f:fe:e6:ad:33:24:26:71:
ad:15:bf:d7:bf:32:9f:9a:6c:2d:ed:dc:8b:92:e4:
0b:bb:ba:94:8c:ea:4c:5f:ee:9f:af:50:57:f4:f4:
b5:cc:3a:b1:30:98:2a:f5:d8:6f:3f:26:be:e3:d4:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:E8:B2:5D:85:E6:58:CD:00:42:28:83:CA:46:7A:F3:37:D5:1E
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1f:db:3a:b2:4a:90:ac:76:11:5f:6d:7c:ed:82:d8:6a:c8:
d9:a4:55:50:f0:71:11:ae:82:43:cf:a5:44:3b:48:10:cd:de:
e2:67:8d:54:51:83:71:35:86:fd:9d:b1:86:52:86:d3:f0:9f:
bb:f6:48:99:99:3c:3f:17:44:94:90:fb:dd:a8:70:46:e7:73:
0d:aa:02:61:91:1c:00:70:56:59:79:e0:05:9c:b0:a3:74:ef:
fa:9f:56:6e:4b:7b:96:a4:45:ce:47:02:af:06:6c:21:f7:92:
7d:f8:7f:75:22:47:e7:cc:1e:c6:be:96:01:bd:0a:41:63:24:
e2:69:96:8e:21:87:df:5b:73:bd:a3:06:38:29:c0:50:0f:f1:
87:11:9e:34:7c:0e:8d:65:00:51:80:5a:64:c6:7c:15:dd:77:
9b:87:ae:ea:37:72:41:b5:1d:dd:ee:e9:da:81:b4:fd:11:58:
78:66:40:b0:16:21:2a:95:55:2e:7b:b0:da:4f:36:34:90:a8:
f9:3d:ed:7c:67:c5:2f:43:82:de:1c:7b:2d:43:4b:c9:6c:15:
b8:68:ae:1d:c3:7f:99:4f:75:82:d3:7b:26:ff:72:bd:22:07:
54:13:ff:e4:44:02:9d:97:39:c2:61:e8:c4:ae:b5:56:de:49:
74:b1:42:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:08 2025 by rpki-client