Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
File: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft (raw, json)
Hash identifier: 3+naNcvmXsDFOEd9mTuU6wOItIYE+5HDR5zDJ5dAdOA=
Subject key identifier: 0F:89:86:50:2F:C1:B8:C2:DA:47:48:61:63:08:B9:4F:D8:DA:E7:CC
Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
Certificate issuer: /CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Certificate serial: 019644B1FF10C328E6CD6DD38601D8421AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
Manifest number: 14F8
Signing time: Thu 17 Apr 2025 17:00:37 +0000
Manifest this update: Thu 17 Apr 2025 17:00:37 +0000
Manifest next update: Fri 18 Apr 2025 17:00:37 +0000
Files and hashes: 1: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl (hash: k9itbT1mf9ulln2SXAGfpXMbYiMOtT2CD1wr2G7uFGo=)
2: GBHgZs5smXIHM4FYLqRTdebAY54.roa (hash: 8eoGRtWR94CvV+AUeQO0MQrawByEe9oxj8H6brsnZqU=)
3: ZaZt-EklqiwdQvzDUFQiPldPl5k.roa (hash: oR9yB6wHGUKGTVwJ48OCFcMFmxevjZzgWdtvhuAPlXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:ff:10:c3:28:e6:cd:6d:d3:86:01:d8:42:1a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Validity
Not Before: Apr 17 17:00:37 2025 GMT
Not After : Apr 18 17:00:37 2025 GMT
Subject: CN=0f8986502fc1b8c2da4748616308b94fd8dae7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:c4:09:5a:ce:a5:86:b9:49:e7:c3:e7:52:
6e:a0:6f:12:a3:42:0f:1c:eb:9f:bd:f2:0b:86:a1:
76:02:f8:b0:67:23:fa:ec:81:12:7a:26:f7:7c:7d:
db:a3:4e:d0:cb:1e:43:e2:d2:13:bd:db:5a:89:f5:
90:3b:5b:d6:19:e4:29:3a:a9:5f:89:5d:33:b3:19:
de:e9:5a:e1:00:2e:a7:45:e8:08:49:97:7d:36:89:
32:ec:d7:5e:a1:99:51:64:00:73:8d:41:21:e7:bd:
75:ea:48:07:96:58:40:f7:46:c9:3c:75:f5:03:e8:
92:b0:b4:97:6f:d4:dc:09:48:32:56:c2:36:8e:cb:
44:83:9e:3f:8e:07:c6:31:8f:e6:9b:21:42:3b:77:
89:1f:87:f6:ca:01:47:11:a2:de:74:2b:67:11:35:
42:62:6a:2b:a3:bc:52:8b:e8:da:da:3c:b7:9d:ff:
bf:c9:72:bc:11:5a:31:7b:c6:83:78:18:09:6a:47:
10:40:ce:9c:2e:b3:ae:00:58:27:dc:79:7b:53:20:
d6:a4:8f:40:37:61:96:a4:4e:d8:c7:fa:30:7d:c7:
5b:6b:bb:0a:69:71:5f:69:06:c6:7f:35:a8:8e:a4:
e3:4b:e9:22:a1:ab:04:a3:42:34:46:06:f4:a7:89:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:89:86:50:2F:C1:B8:C2:DA:47:48:61:63:08:B9:4F:D8:DA:E7:CC
X509v3 Authority Key Identifier:
keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ae:0f:7a:14:6a:c6:67:a6:b1:b2:5f:4a:06:88:4b:09:d5:
51:fd:3f:a4:ea:fa:d2:e2:0d:fc:68:de:d4:2a:f1:41:0c:85:
73:da:6b:9e:97:cf:8e:74:4e:df:52:a8:39:a7:5f:d7:ff:29:
46:b8:c4:42:e7:f6:ab:11:69:dd:1a:c3:08:5f:eb:c2:4a:03:
8a:e2:50:70:d9:ce:eb:42:2f:61:a3:85:61:9c:0b:58:2a:e0:
21:71:17:47:34:b4:b0:9a:10:69:91:73:01:7a:7c:5d:6b:59:
8e:04:0f:62:65:30:73:f0:ab:39:a2:46:db:ec:70:01:18:1b:
82:5c:aa:e4:68:22:7a:c7:85:94:ec:a4:e7:6c:0c:bb:3e:93:
48:c5:0d:07:43:6c:9b:ec:6a:d1:48:99:b3:55:f3:5f:7e:81:
b5:dc:07:15:cf:df:16:9b:a3:47:27:70:5c:d4:b5:a7:df:21:
0b:61:9b:22:a0:68:ab:cf:e9:7a:c5:a9:b1:13:83:0e:61:c4:
0d:79:d9:d5:a0:7f:c6:56:9a:54:ca:92:a2:cb:aa:6f:44:ad:
4e:51:91:58:a9:8a:21:7d:a4:38:f0:82:70:53:50:75:f7:d1:
f6:e2:2b:88:92:06:16:e5:7e:67:4a:be:e3:99:d8:43:9e:16:
6e:97:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:44:35 2025 by rpki-client