Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
File: jYQmVhd7QmerVeS6FlpewA9QhLw.mft (raw, json)
Hash identifier: onHHJcYX/lmpmg5+s4SvrPyj/iXxyElSWtdV9BRxYEo=
Subject key identifier: FF:1C:63:A7:37:33:41:C3:E7:49:ED:68:D8:44:AA:98:F7:16:1C:A3
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Certificate issuer: /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial: 019659154A09F04B8E718AE676137E93CDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
Manifest number: 1504
Signing time: Mon 21 Apr 2025 16:01:29 +0000
Manifest this update: Mon 21 Apr 2025 16:01:29 +0000
Manifest next update: Tue 22 Apr 2025 16:01:29 +0000
Files and hashes: 1: RJ12iqBIGMdg63G0MMvg2LDMix8.roa (hash: sESw+q0gARk5gtp41IohBHW+APoentCrsvNrV3WWi+U=)
2: aUmaQEWRoE1QO_xmwTCfYrd0iAI.roa (hash: KmZy81mfy9sZbmzpjyQc2GLJJhLJJJePfwOXkxp6EMc=)
3: h17YXZJyvSVJKfuRPJwacmnQTko.roa (hash: gCm2d2N9654aioOcioiAbPWA94RRy8WmG63hHdr1o54=)
4: jYQmVhd7QmerVeS6FlpewA9QhLw.crl (hash: fP39DWZzXNG0EzTNxrVb6mOdOIyf5d6jkt3rZaD/LWs=)
5: vum5ModJUNyeXtPPKIV3l7J0g94.roa (hash: zPI/RZhzXTNYTyqGgKwTajtQQ1UJGC+Yon4LK77IQPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:4a:09:f0:4b:8e:71:8a:e6:76:13:7e:93:cd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Validity
Not Before: Apr 21 16:01:29 2025 GMT
Not After : Apr 22 16:01:29 2025 GMT
Subject: CN=ff1c63a7373341c3e749ed68d844aa98f7161ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:7f:be:79:36:cd:56:82:7b:2a:d2:ec:3a:
b7:2b:2a:47:de:1f:76:66:df:5f:94:ef:f2:4e:1f:
24:de:43:a8:98:cf:80:7c:cd:a6:78:a4:32:c0:72:
7a:c6:6f:06:ad:8e:1a:29:69:67:44:f1:15:50:60:
99:e8:d8:79:b9:b5:b7:ab:8b:b2:d4:a2:64:d8:74:
30:2b:48:8b:f6:ba:1b:fb:2b:bf:99:87:35:66:ad:
b8:6d:ea:ef:8f:df:61:c3:e5:f9:b1:02:09:03:62:
e0:53:0d:c9:b8:e2:c8:4b:c2:2d:8a:6e:66:35:f5:
a1:30:43:b0:e3:b3:e4:23:2c:f8:c0:9a:03:71:db:
9f:47:8d:8e:45:30:82:1d:e1:a5:0e:b2:97:82:96:
d5:48:46:db:3f:78:a1:2a:93:64:a7:02:16:df:39:
8b:09:db:a7:54:98:84:a0:9b:c9:d0:8d:4b:d5:16:
47:07:5e:ca:38:c3:80:56:7b:76:96:fd:ea:b1:94:
fa:be:31:5e:cf:8f:b8:27:ab:b9:c7:78:67:9a:06:
b7:0d:b5:eb:50:b2:91:b8:8c:33:50:7a:81:bf:22:
bb:0b:8c:c8:35:17:a8:4a:76:b0:ad:10:42:51:15:
b6:9f:3a:4e:39:6c:cc:39:f1:c6:d1:9b:c9:db:f1:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1C:63:A7:37:33:41:C3:E7:49:ED:68:D8:44:AA:98:F7:16:1C:A3
X509v3 Authority Key Identifier:
keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a2:87:11:a9:7f:24:2a:3c:e9:17:64:8f:30:fc:86:9c:08:
d9:cd:67:cd:5d:03:e6:98:22:ad:4f:c6:a4:2b:7f:5e:15:60:
f0:ce:cb:78:40:a8:05:5a:e6:d6:41:92:b1:2c:de:31:f8:41:
88:c3:bf:06:be:38:cf:da:b7:40:c4:84:0f:a5:af:c0:e4:76:
12:93:bf:d0:0c:1f:d3:65:37:6e:49:a9:ca:51:8b:ba:72:44:
54:da:1c:05:f8:2e:5e:0c:67:81:e8:f4:96:06:6e:9c:28:b8:
eb:38:71:4d:c0:1c:3e:19:b8:b5:32:71:5b:4f:e1:31:eb:1a:
03:8f:24:3e:eb:11:f1:ae:11:97:a2:ca:a6:f8:76:0b:27:8f:
7a:41:7c:55:58:f1:bd:22:45:b4:89:9d:12:3e:4b:38:8f:e3:
02:40:63:5f:04:9a:d0:8e:0c:0e:ec:89:50:d2:22:50:a3:6f:
28:2c:18:3a:69:de:b5:00:1b:b5:cc:d1:cf:c1:45:77:99:39:
c5:c4:ef:b8:d4:74:52:94:61:a7:5f:80:2a:79:07:f6:39:07:
1e:ec:b6:da:12:15:1a:05:96:89:13:89:d7:2c:ee:30:78:99:
d9:60:36:a7:c1:c9:63:3a:08:db:a2:dc:92:3b:12:0b:2f:c3:
49:ad:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:51:35 2025 by rpki-client