Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File: jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier: 7xjwYACS9U/G04Dg0ZbXgqmQDnV2XxteSdpQ9dzyGt8=
Subject key identifier: 73:50:56:36:58:19:97:3F:21:DA:30:52:A8:E6:ED:63:9A:41:FE:A7
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial: 019643D6756B5433F9770F2093215A8E38FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number: 1488
Signing time: Thu 17 Apr 2025 13:00:50 +0000
Manifest this update: Thu 17 Apr 2025 13:00:50 +0000
Manifest next update: Fri 18 Apr 2025 13:00:50 +0000
Files and hashes: 1: BCN4ZtExcExoi2ZpeY5zxnXpqZs.roa (hash: J4RuOv92rnUwTT9ZA2LqfolBgIUjjRVEb11UiMubpN8=)
2: KQ8djxwDZnjEjwDeGenO8z4CQfE.roa (hash: n8AngvQ0fquzsxztAqeeyBCrmmkZMY5Guz/NYsJtM+U=)
3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: Lo5z1zgFB8gkoDEhS0HBBjiQ9/R7AIjJ4EYhvgHK9ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:75:6b:54:33:f9:77:0f:20:93:21:5a:8e:38:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Validity
Not Before: Apr 17 13:00:50 2025 GMT
Not After : Apr 18 13:00:50 2025 GMT
Subject: CN=735056365819973f21da3052a8e6ed639a41fea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:b3:28:d2:78:33:5f:5a:c2:99:c6:ce:ad:
6a:b9:cf:bd:5a:dc:b1:e1:c9:20:1e:36:9a:7b:de:
d0:52:29:85:96:db:4c:7b:99:c3:fc:6f:7b:2e:6f:
36:ab:14:15:2b:17:07:9a:20:84:67:2f:f9:ea:05:
d0:52:65:ae:79:fb:2c:da:c8:84:14:02:92:ea:73:
a0:de:7c:69:64:e1:5e:54:61:1e:3e:4f:eb:df:89:
2e:fd:f6:91:3c:78:32:09:91:85:77:fb:67:70:65:
8d:7a:58:09:f7:a8:11:dc:a5:8d:b8:b3:e7:87:71:
8a:6b:61:74:ba:d7:0e:08:f6:dd:fc:c3:94:fa:99:
3d:8f:fd:8b:e9:b3:d9:6a:b3:35:25:34:c7:f2:64:
2d:2f:e0:20:c7:39:d0:90:49:d1:c8:e4:b8:63:6c:
d5:50:c9:b3:0d:c6:6f:6b:cf:3b:16:0f:0e:f2:2a:
c3:fa:a0:93:49:26:f7:6c:45:dc:25:69:88:3b:7c:
d6:0e:ba:62:9a:74:af:00:16:9d:f1:52:48:6b:f2:
7c:a9:76:68:e1:29:19:e1:f9:76:81:a8:7a:27:d3:
b9:f8:3e:1e:4f:80:30:d2:04:77:54:bd:09:d5:6f:
a8:a5:b1:40:40:5c:dc:fd:d3:69:5d:17:12:0f:00:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:50:56:36:58:19:97:3F:21:DA:30:52:A8:E6:ED:63:9A:41:FE:A7
X509v3 Authority Key Identifier:
keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:41:fc:54:f2:7a:28:2c:29:d2:7b:93:cd:e9:68:50:32:9c:
c5:d9:45:11:d9:ce:ed:32:5c:8f:8d:f9:3e:dd:64:75:aa:63:
36:ee:54:b1:be:27:78:53:9d:b9:81:cb:c8:65:dc:f5:ce:e7:
ba:7c:85:e3:eb:3a:90:ec:22:db:48:dd:d9:b5:fc:8d:a0:f3:
26:ed:d1:b5:cd:a2:0c:5b:bb:be:93:19:5d:2b:f9:eb:fb:c4:
3f:f6:cd:27:7e:43:6e:00:85:df:4f:a8:f2:03:0f:c5:1e:f6:
69:25:b3:70:f9:56:e4:c2:86:00:ae:21:e1:08:14:86:27:15:
5b:e7:f0:16:42:c0:dd:32:dd:1e:13:58:20:9a:7d:0f:4a:b0:
0c:7d:b3:00:42:1f:ae:f0:00:65:bd:24:ae:4b:21:14:aa:a0:
7d:2a:2b:c9:28:8d:8e:8e:44:7b:58:df:58:2e:27:dd:4b:1c:
f5:8c:95:1c:b6:7f:5c:11:77:df:47:08:98:b0:07:f5:16:d7:
bf:0c:d5:84:c0:57:a3:3e:85:e4:32:9f:8e:b3:2e:36:f8:7d:
d4:ce:a0:f6:b5:a8:a2:94:70:b2:44:d0:e0:cd:02:d2:e8:42:
4e:ca:1c:61:54:0e:4f:96:fb:fd:22:44:a9:ec:14:a9:83:55:
d6:6e:b1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:41:21 2025 by rpki-client