Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: mNeBv+aI1EOf6ImaqSb+GvQ5/VAuLqqVE0uSFDE9Nv4=
Subject key identifier: 50:96:1F:F1:DA:A0:9B:42:78:F6:01:66:E6:51:D8:64:17:A9:0C:BA
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 01964C6B5FD94FD9CB8839263AE56DA41D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 05:00:27 +0000
Manifest this update: Sat 19 Apr 2025 05:00:27 +0000
Manifest next update: Sun 20 Apr 2025 05:00:27 +0000
Files and hashes: 1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=)
2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: Ixam/PDvEAy9hihVbSSkHiZK99c872LXUM1ZDAniabI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:5f:d9:4f:d9:cb:88:39:26:3a:e5:6d:a4:1d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Apr 19 05:00:27 2025 GMT
Not After : Apr 20 05:00:27 2025 GMT
Subject: CN=50961ff1daa09b4278f60166e651d86417a90cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:22:61:8a:7c:88:42:e7:ed:db:2d:e0:d7:
ac:9c:a2:7c:e7:fb:a0:36:df:d6:50:9f:53:0d:07:
28:25:fd:18:c6:75:02:e4:8f:26:2f:5b:34:da:fe:
a7:90:ad:fc:bd:49:6e:f9:c4:88:7b:08:bd:34:23:
ec:cd:42:4c:a8:90:0d:8f:a2:b4:d2:86:78:c6:86:
58:be:a9:80:0d:4b:4a:bb:a2:1f:d0:3b:fa:bc:03:
60:5e:02:fe:fc:12:be:3a:e7:18:45:99:19:e1:eb:
fe:4d:99:33:36:a3:bb:eb:b3:50:20:d5:35:23:92:
fc:57:f0:c4:45:ad:6f:09:65:3f:fa:95:c7:49:25:
f7:89:31:9c:6c:6a:94:e0:68:56:83:bd:9a:ae:a5:
f2:ff:e0:1e:15:83:e2:6f:b0:14:68:5f:14:41:58:
81:af:73:4a:02:6a:7b:d5:49:10:d8:82:64:04:e7:
2a:a2:d2:a8:c3:2d:e5:97:f0:7e:59:4a:1d:cf:f6:
a0:f7:e8:a3:d0:ba:e1:71:48:72:2b:3b:d9:8e:3e:
65:7e:17:01:68:9b:9a:fd:72:c2:73:42:a9:6a:59:
4f:26:5e:0f:73:ef:47:75:70:c1:4e:f3:2a:00:98:
9c:23:80:e5:a1:f9:bd:5f:75:80:47:e5:10:fc:10:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:96:1F:F1:DA:A0:9B:42:78:F6:01:66:E6:51:D8:64:17:A9:0C:BA
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3b:17:f1:9a:b4:90:a4:51:aa:17:dc:84:6c:5e:13:24:3a:
3e:e6:ba:3c:44:ba:c2:e9:f8:6f:74:8b:9f:be:be:a6:cb:ef:
e2:95:76:aa:b0:55:07:5c:53:5c:70:c7:37:af:5f:1d:ee:72:
a9:8f:49:8b:b8:1d:d5:dc:84:c4:fd:29:a1:a0:d6:3f:92:7f:
49:94:3f:4c:45:45:f3:7d:31:a8:f0:2a:1e:e8:5b:98:7f:8b:
ae:32:29:d4:01:2b:e2:01:38:ef:7c:c8:97:c6:86:75:b2:a5:
2a:c6:5e:db:93:bf:da:50:13:98:d3:98:2b:33:a9:3e:53:5f:
28:2c:d6:79:88:d6:15:72:ce:f3:32:dd:fb:9f:b5:f6:17:e3:
87:37:46:76:00:c7:8d:ee:72:9d:fe:54:85:90:06:b9:2e:bc:
30:9a:26:1c:bb:05:8c:4f:39:6d:3a:4c:4c:c9:fa:ea:ab:f5:
e5:f3:62:9b:23:0e:e2:fc:36:bd:3e:49:eb:64:42:d3:0b:f8:
e8:02:fb:4f:19:6f:bc:89:11:d6:6e:cd:41:4e:6c:31:7d:e2:
ee:74:12:19:bf:b0:3a:f7:c9:4c:53:c5:7c:c6:60:91:ec:30:
7f:1c:a8:37:22:19:c8:36:57:f3:35:c1:9c:2b:02:b0:28:0f:
cf:b4:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:12:07 2025 by rpki-client