Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
File: jTUmuzG54wxJBF9DaMYC7pi-wBo.mft (raw, json)
Hash identifier: QIbs5nm0K5ef8kPzR2Ar5TFSEZBv4bOHgtkgZDSc1XI=
Subject key identifier: EB:2E:90:57:3C:F9:B7:B0:62:2B:D5:5E:7E:C2:91:8C:C2:4D:B5:8B
Authority key identifier: 8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
Certificate issuer: /CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Certificate serial: 0196440D523AB1C4C2DDC447AA9C987C34A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
Manifest number: 0243
Signing time: Thu 17 Apr 2025 14:00:45 +0000
Manifest this update: Thu 17 Apr 2025 14:00:45 +0000
Manifest next update: Fri 18 Apr 2025 14:00:45 +0000
Files and hashes: 1: e6xoJBVIfdJmiKe2nJgRQGtQ5ww.roa (hash: JfuVzsuhmGpnCucojoUfItSJOnwkZRw4nitsAmYaRLg=)
2: jTUmuzG54wxJBF9DaMYC7pi-wBo.crl (hash: AdFtFypMmI9sAdVlefaM9adcPVRIQcq2ML6aj0FZzOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:52:3a:b1:c4:c2:dd:c4:47:aa:9c:98:7c:34:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Validity
Not Before: Apr 17 14:00:45 2025 GMT
Not After : Apr 18 14:00:45 2025 GMT
Subject: CN=eb2e90573cf9b7b0622bd55e7ec2918cc24db58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:af:cd:e5:d9:00:5d:2d:1d:93:4d:20:c8:
9c:d0:9a:cb:b6:c3:4e:5e:7f:b6:88:14:f4:35:cb:
88:78:1d:ae:bf:d3:53:7d:ac:93:aa:ee:39:c3:0e:
1c:8a:b8:c6:f9:39:c1:7b:65:86:fa:7c:d2:07:ae:
39:3a:3b:0b:5d:a1:2c:b3:92:db:4d:43:9b:c0:40:
05:b8:8d:50:3e:8b:65:05:c7:a0:dd:03:50:e4:c3:
88:d7:a7:3d:de:47:1e:3f:b7:87:8a:0e:bf:bb:95:
db:06:08:57:52:d1:13:b5:58:48:c1:80:97:e9:2c:
37:0b:a9:3f:ea:9d:b1:df:42:8b:94:76:bc:b7:b5:
33:ee:3b:c0:b8:50:18:14:aa:a4:39:92:74:12:e0:
a5:d5:1b:52:5e:f3:b6:4b:90:d3:25:d5:a1:ad:af:
6e:ee:f3:75:c6:4e:d0:20:50:aa:5c:84:db:64:10:
5d:f8:cf:bf:ed:4a:d2:19:42:d8:84:d7:b4:a1:3b:
28:44:51:54:fe:f1:87:e0:c0:bc:9a:e9:e9:44:6c:
6c:8f:26:a5:0f:9f:a0:2f:29:c0:a1:0f:55:6b:71:
98:52:7c:19:e6:45:c5:51:23:7d:5c:36:06:23:2a:
a4:b0:da:95:6b:e9:d3:26:44:cc:60:d8:e7:96:53:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2E:90:57:3C:F9:B7:B0:62:2B:D5:5E:7E:C2:91:8C:C2:4D:B5:8B
X509v3 Authority Key Identifier:
keyid:8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d3:1b:86:8b:a4:c7:46:b9:9d:e7:9a:3f:90:e3:f6:5b:36:
46:04:b4:b6:bd:94:31:42:17:89:3f:4b:e7:8a:a7:ae:d3:96:
9a:1c:39:b7:58:1e:8a:7c:ec:bd:82:54:22:c6:d3:bc:04:f5:
1f:e9:dd:4b:bd:e9:cc:d3:da:b8:90:c1:6b:89:23:18:c1:88:
fb:70:65:f3:4a:a0:3f:3a:73:fb:b9:d3:35:a5:95:bd:58:56:
ff:6c:b8:8d:1d:78:36:6a:f2:59:28:b0:d9:43:10:de:5e:d3:
43:0e:42:4d:c9:c3:6b:8e:bf:b6:46:9d:4a:a9:c6:4c:28:87:
f6:cf:ee:bb:17:4c:3c:d0:2c:2e:9f:b3:4f:92:69:ab:02:f3:
5e:94:46:32:83:cd:fa:62:fc:29:e1:8b:d5:21:f4:32:39:5a:
2e:51:52:34:f0:6d:2f:cb:e7:03:85:82:b0:2e:b2:64:56:e9:
b5:42:b9:87:ea:9f:33:32:99:82:eb:f4:84:aa:26:92:65:a2:
04:d7:c4:25:72:6c:d3:90:8b:4d:46:cd:05:4a:c3:6f:0a:4d:
2c:21:6c:9d:07:68:14:59:76:e8:e8:5d:88:31:29:e5:d3:31:
65:a8:0d:fa:78:34:df:72:39:ae:95:9b:e4:12:05:e1:b2:ba:
3d:95:84:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:33:05 2025 by rpki-client