Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: w8PGfKuoIGbiAnT7r/oL9v05z1y0XYn5XRdpe9rJdrg=
Subject key identifier: 65:16:7B:FE:CD:49:09:13:FD:E0:2E:59:11:D6:A6:E1:65:A0:E1:2B
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 019644B2497FEE38F2E3CA4FBF403CBFCE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 1504
Signing time: Thu 17 Apr 2025 17:00:56 +0000
Manifest this update: Thu 17 Apr 2025 17:00:56 +0000
Manifest next update: Fri 18 Apr 2025 17:00:56 +0000
Files and hashes: 1: J6Kzm9-BHVrTMueLm85flmGpBuc.roa (hash: 9/2ACokdd6WeH0EpVJ7k0Vq4xCNM0q7ZPA1hEeNbMHI=)
2: bijRliPCnbFotmMqItnp-5jqXj4.roa (hash: uM/kaOsx/CgALc1h4UDZdPe4HF4oyeAzB65mv4DJvkA=)
3: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: v9lgBfUC8scOiSJ1zSApknszOgvxDLTvqv/RQ35nr6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:49:7f:ee:38:f2:e3:ca:4f:bf:40:3c:bf:ce:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Apr 17 17:00:56 2025 GMT
Not After : Apr 18 17:00:56 2025 GMT
Subject: CN=65167bfecd490913fde02e5911d6a6e165a0e12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:e2:02:3f:f7:f7:d9:f2:af:c6:d1:2b:02:
fa:c4:4a:1d:46:ab:6b:3e:b7:d4:dc:00:5c:26:df:
12:cb:f1:73:99:d2:be:ef:de:f8:6e:57:b2:f2:05:
e2:29:b0:f4:32:fc:3f:c8:03:cf:c7:69:f0:64:ee:
cf:9a:de:c5:cc:4e:42:06:00:73:69:fe:7c:28:02:
cc:f0:8d:ea:1f:36:e0:8c:23:e9:7f:16:21:78:23:
c7:c0:b0:bb:8c:4a:70:97:8c:b3:3d:3e:a6:46:ae:
ca:e9:fc:8c:92:5c:b7:7a:28:d0:a0:9a:2b:7e:20:
82:19:8f:c5:cd:ec:55:8d:72:5c:19:c9:a7:e6:b8:
6c:d4:9b:17:bb:ec:fa:4c:1e:99:56:da:d1:ed:b1:
c3:0a:df:3c:9b:53:7a:bc:93:7f:46:96:6d:e8:72:
8b:5b:d2:8c:4d:b5:30:cf:da:71:5b:31:6e:12:7f:
a0:a1:8a:5a:bb:a9:82:81:3e:ae:14:e2:a8:23:dc:
8d:ae:11:7a:8c:f7:69:07:35:fb:9d:56:b3:ac:7a:
ee:da:0a:f7:e9:59:b9:b5:24:cc:97:31:ae:a2:db:
35:fe:ac:56:7d:55:15:31:ec:1e:f6:74:d4:45:73:
5a:07:35:b1:5c:62:75:9f:fd:9b:44:06:57:9b:71:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:7B:FE:CD:49:09:13:FD:E0:2E:59:11:D6:A6:E1:65:A0:E1:2B
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:76:d7:0b:86:a3:1e:87:65:a9:8a:58:87:ed:23:25:4a:2d:
7e:8d:1e:40:f4:b9:15:6d:53:03:52:d9:28:2f:f3:61:9b:5f:
f7:93:46:09:e7:75:c8:b7:f3:2f:d0:25:f3:bf:25:88:7a:7c:
79:4c:bb:2d:1c:8c:38:99:b5:65:58:b8:6b:1c:4f:54:e6:94:
f3:7a:5b:ef:6c:1c:92:94:34:5b:59:d4:1d:ec:b7:67:71:ac:
ee:80:cb:e4:2f:a4:41:ca:4b:87:6f:b8:0c:72:f6:4c:84:da:
fe:c9:13:72:cf:24:43:9d:41:61:e1:7a:a7:f6:3b:d9:dd:25:
16:80:83:78:d4:3c:e6:ec:34:99:63:b2:f1:8e:0f:c3:0e:65:
77:39:f4:2e:f9:b1:c2:1b:63:77:fe:54:ee:3e:41:1d:9b:63:
b0:d7:55:76:f3:29:e3:78:91:90:2b:59:2a:00:08:9a:f4:93:
63:3f:b7:d7:cf:6b:21:6f:e4:3f:8d:51:b8:7e:9e:ba:93:12:
ea:38:15:c2:13:b5:73:00:a7:02:35:4c:8b:31:24:a1:ea:af:
90:39:43:9e:48:2a:d9:89:de:56:f8:ef:e6:f6:b5:07:8e:ac:
43:8c:07:74:26:49:44:2d:e1:b0:24:3d:39:57:ac:55:9f:73:
3b:0f:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:24:15 2025 by rpki-client