Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
File: jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft (raw, json)
Hash identifier: S7nKEDWdpYPACWQndAd/9AVLAF8y9LvxIkcFrsP7dCk=
Subject key identifier: 02:53:C9:8A:B8:0C:9D:55:C1:FF:A9:F2:61:DF:FD:B2:86:9A:0D:2F
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Certificate issuer: /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial: 0196417A290B3277155A0C72A7B457BFF844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
Manifest number: 118A
Signing time: Thu 17 Apr 2025 02:00:46 +0000
Manifest this update: Thu 17 Apr 2025 02:00:46 +0000
Manifest next update: Fri 18 Apr 2025 02:00:46 +0000
Files and hashes: 1: Kt2ksaxPkIjtDoeyg1P8yernNDc.roa (hash: wfAd3vob2ra8znve71igmwtD5TyA3SG1S1RzxivWZj8=)
2: byPwkkahLGpxY_tW1OLYNjMyZ_Y.roa (hash: QA9SayE2KiT0c9dHKY7N9OrSbz3bY915oFBo7q1THjo=)
3: jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl (hash: Ex64ukpVxGnwJ/p3uHO+SacamimM7LTp7PsozA3F2g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:7a:29:0b:32:77:15:5a:0c:72:a7:b4:57:bf:f8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Validity
Not Before: Apr 17 02:00:46 2025 GMT
Not After : Apr 18 02:00:46 2025 GMT
Subject: CN=0253c98ab80c9d55c1ffa9f261dffdb2869a0d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:c5:3d:ff:14:75:46:80:d9:71:16:8e:86:
45:46:e6:70:1d:37:65:1b:49:4b:f5:7d:e6:4b:19:
22:17:89:a0:0d:9b:44:b4:bb:15:dd:db:26:99:20:
2f:0f:59:fc:1b:11:cf:b2:93:1e:a7:d8:77:ba:27:
80:59:b8:07:02:b3:0f:ef:5d:a5:b0:ef:a7:86:f0:
80:b0:70:ec:4f:08:29:91:08:99:a1:77:48:6f:76:
15:ee:ee:63:f1:55:2e:02:fe:af:f3:f5:b9:7a:93:
e1:38:f5:53:5d:6f:7e:8d:d2:c5:f5:7e:76:1e:73:
c0:66:22:a1:f8:e2:22:15:64:3f:11:e8:70:5b:49:
5a:03:30:6c:54:ec:ac:3c:08:c7:bd:76:8a:79:6d:
42:b3:cd:88:4b:41:e2:35:36:46:a8:d6:dd:0c:c5:
15:2f:67:41:1e:f5:bb:80:c5:17:8a:fb:54:a0:79:
cf:84:b3:e8:db:f8:75:ab:c9:0a:21:83:a0:67:4f:
ed:6f:42:44:99:ec:f3:6a:54:71:2c:7d:2b:17:ae:
f2:c3:d4:d1:e2:1c:81:ff:d3:e0:e3:a2:f7:99:97:
62:0e:66:ba:38:b7:56:df:21:4a:af:ce:0e:6d:8b:
3a:c2:52:d2:98:74:09:2f:e0:85:e0:8d:9c:91:07:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:53:C9:8A:B8:0C:9D:55:C1:FF:A9:F2:61:DF:FD:B2:86:9A:0D:2F
X509v3 Authority Key Identifier:
keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a0:c5:e3:41:b8:cb:ae:30:8d:a3:11:17:99:fe:a0:48:51:
f7:5b:19:c2:a4:2c:0f:c0:8c:ca:30:a7:04:12:ac:01:0e:46:
d9:22:fa:90:23:8a:b8:b0:3a:70:b8:da:8e:ca:f9:51:a9:10:
78:34:5a:99:5b:c2:2b:17:77:4c:10:f0:dc:3f:e9:9b:c0:35:
ff:83:83:43:59:7d:d2:90:9f:40:3c:5b:88:7b:fe:a3:2c:42:
80:22:4d:7c:fb:d3:e9:e4:f8:92:52:49:63:82:e2:ea:44:27:
7b:ac:73:ea:7e:c1:a7:8b:0c:e5:1c:62:e4:70:7d:6b:68:3c:
c0:5c:a6:a5:eb:0e:db:0c:ad:d7:00:7c:24:79:fd:6c:7b:64:
49:36:2e:3d:0a:6f:d8:fc:1f:1f:f9:51:71:75:10:6d:db:e3:
b4:a4:71:2a:68:21:a7:c9:5d:ae:24:9a:55:02:8a:d2:1c:d3:
d2:9c:dd:58:91:ee:d8:a9:e5:7c:13:4a:cb:f7:50:31:1b:a8:
d6:f2:70:15:73:2a:8c:7b:23:87:14:49:4b:99:5e:ab:2f:d7:
26:87:a6:a6:5d:b3:81:7c:c5:e8:03:fa:e3:ed:ab:61:bf:b9:
a6:08:cf:48:32:8b:4a:79:bf:dd:3f:73:a7:d6:c4:ff:a4:65:
d9:e2:6a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:56:55 2025 by rpki-client