Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: +fasJlbD+Ix0fxdoT+xo8F2zAZvoahTCoSSwH49EUOg=
Subject key identifier: DE:7E:81:FE:55:34:8A:9F:B3:5A:20:23:2E:28:35:86:A2:01:D8:6D
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 0196406769CBB3740AC5B68C8CA0D7E042F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 21:00:41 +0000
Manifest this update: Wed 16 Apr 2025 21:00:41 +0000
Manifest next update: Thu 17 Apr 2025 21:00:41 +0000
Files and hashes: 1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: 8ALsGUW5nllzVwIcpNXA7Fj3YMmiK4xbglSEwmbuOII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:69:cb:b3:74:0a:c5:b6:8c:8c:a0:d7:e0:42:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Apr 16 21:00:41 2025 GMT
Not After : Apr 17 21:00:41 2025 GMT
Subject: CN=de7e81fe55348a9fb35a20232e283586a201d86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:fe:85:a9:4f:9c:97:89:f7:c9:f8:17:15:
f0:17:7f:5e:f7:a6:a3:71:38:f5:32:35:d3:bd:00:
4f:c1:d2:1e:14:e4:5c:87:e3:70:3c:8c:63:17:cc:
2e:14:5f:24:0f:70:e5:46:8e:f0:fb:76:a2:bc:e2:
e8:b3:89:8f:39:b1:1f:ed:cf:bd:a1:e9:2f:bc:00:
51:fe:29:3f:15:e6:5c:9f:6b:4d:48:10:78:f1:2c:
e1:cd:00:4e:74:66:fa:24:4e:92:cd:28:7f:72:69:
ba:5d:b5:7a:1f:b1:44:03:50:f6:d8:f1:24:c5:98:
b9:0e:a0:34:20:98:5e:86:0d:f8:92:ec:76:14:81:
29:85:71:a7:10:a5:7b:ec:a1:30:e1:ab:df:c2:40:
c5:2c:66:7d:3d:5f:85:cf:39:2f:40:65:ca:3f:23:
0c:c1:00:10:32:43:85:ef:55:58:9f:c8:92:54:84:
13:6e:41:f9:39:68:f3:eb:a6:74:d5:8a:23:e7:46:
80:93:85:c9:84:af:dd:56:1f:ce:29:93:39:04:15:
6c:62:13:36:0d:b2:10:03:d0:9d:c8:99:4b:54:79:
94:e9:47:c6:ff:e0:db:e9:5f:b2:5e:f3:82:e6:a6:
e1:05:16:96:47:e5:3a:d3:36:ea:15:7f:19:e1:09:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7E:81:FE:55:34:8A:9F:B3:5A:20:23:2E:28:35:86:A2:01:D8:6D
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:10:50:c0:c3:07:11:90:a3:5c:f7:46:75:ff:ac:6f:dd:bd:
39:e2:96:af:cd:ec:16:2f:a2:69:a7:53:ea:fc:6c:e9:be:b2:
77:fa:71:3f:10:52:3d:52:e1:8e:4e:70:1d:8d:7d:bf:e9:06:
15:1d:88:34:3c:b2:0e:7c:ed:96:70:5e:87:74:e9:42:5b:4a:
d3:9e:13:de:2a:8e:1c:0a:d4:ae:b3:e9:33:7d:c0:5e:76:60:
cd:d1:e5:40:b8:13:4c:e7:1d:9e:03:cb:75:98:ac:c7:c4:8d:
7f:7b:6a:02:1c:82:41:08:65:0f:02:bc:71:f4:77:6c:1f:df:
ab:df:3f:c7:a1:80:eb:4d:c9:d1:b1:0d:7e:9e:fa:6a:6f:42:
69:a5:16:bc:2c:e1:18:32:38:0f:6b:a5:cf:4c:47:df:48:17:
be:82:2e:13:71:4a:77:6a:47:92:41:39:db:0d:b0:98:36:c3:
5d:80:f0:90:d9:d9:e7:a4:d5:fd:8f:ca:3b:6a:b5:87:ff:f2:
da:46:84:61:5b:58:79:81:ed:1e:59:65:d9:19:c6:70:37:ca:
1c:7c:fa:b7:36:61:6f:7b:ae:c1:7e:47:27:1c:61:fd:d9:d0:
80:55:6e:1c:81:0f:da:6b:6f:c4:9e:67:e3:0a:63:b7:c4:68:
14:29:bd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:31:18 2025 by rpki-client