Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
File: jxVuaflETCsGaHJWCFtqek6Yh_Y.mft (raw, json)
Hash identifier: sukURxQSXF3QZMJP3Yk5goyADiUFBnoZbTMCwWPVSHs=
Subject key identifier: 54:C8:90:81:D4:D3:27:C6:34:D8:C6:30:5E:33:06:98:DA:4E:08:C2
Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
Certificate issuer: /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Certificate serial: 019647E9C90924965F06BDAC61AF07396C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
Manifest number: 08A1
Signing time: Fri 18 Apr 2025 08:00:25 +0000
Manifest this update: Fri 18 Apr 2025 08:00:25 +0000
Manifest next update: Sat 19 Apr 2025 08:00:25 +0000
Files and hashes: 1: gENnBMD7CFnpDe73cGovXB6cewg.roa (hash: rDcPDp/N1UMZLBWpv8SmAqXs5rg//NGw82tfNx9i/r0=)
2: jxVuaflETCsGaHJWCFtqek6Yh_Y.crl (hash: 2LSzxO/c5xb4sGljoDyg6u7rOqcm76vDLmlBsbvtoqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:e9:c9:09:24:96:5f:06:bd:ac:61:af:07:39:6c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Validity
Not Before: Apr 18 08:00:25 2025 GMT
Not After : Apr 19 08:00:25 2025 GMT
Subject: CN=54c89081d4d327c634d8c6305e330698da4e08c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:b1:d1:12:49:d4:8c:5a:59:37:60:29:2f:
11:42:57:d8:37:10:4a:ef:0f:d1:85:98:2f:b7:ea:
76:fe:3d:8f:c5:41:f6:df:1f:07:1a:e9:5e:23:7d:
ea:bf:70:ed:bc:eb:1b:7d:0a:7a:4e:a1:a0:30:b6:
6d:41:1f:48:ae:cf:ee:45:23:2f:27:68:95:46:01:
b8:1b:e8:53:83:fa:c7:cc:a1:c5:6c:6c:72:53:f4:
c8:4d:62:5e:c6:41:49:4e:91:37:e5:a5:12:16:84:
a4:20:94:cd:55:6e:22:fd:ab:9b:3a:da:d7:30:7f:
d7:30:89:54:20:19:89:3f:cd:71:94:3e:d5:03:29:
6a:07:f0:c8:be:05:e0:30:f7:90:a2:c1:57:2c:00:
b8:f7:25:ab:9c:41:00:3c:90:1d:78:d0:11:6b:0d:
e1:04:2c:88:a1:ea:4e:d3:d0:b0:89:f0:bc:2c:19:
20:e9:f3:79:ce:e8:c8:02:19:ca:13:40:29:fe:7a:
fe:64:dd:e5:e3:eb:5d:e9:c7:88:89:05:c0:2b:33:
58:3e:b2:05:b6:4a:3d:3e:1f:fa:d2:f6:8b:dd:5e:
81:67:a5:1d:e2:c6:8b:2f:07:a4:f9:2b:1f:22:d3:
ff:93:97:4b:80:2a:90:fe:cc:f4:e0:5e:e4:7a:70:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C8:90:81:D4:D3:27:C6:34:D8:C6:30:5E:33:06:98:DA:4E:08:C2
X509v3 Authority Key Identifier:
keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8b:41:06:3d:d6:45:e3:fd:fa:33:b0:39:03:71:f8:32:94:
8a:99:cf:f2:16:bc:19:05:99:1c:12:f9:45:2f:68:63:14:b7:
f5:39:86:db:23:bb:65:4c:be:a7:fb:d0:2c:fe:ea:c0:dc:b2:
d0:e6:ff:bf:bc:b7:f2:ed:6a:2f:7a:b9:ef:e6:3e:cd:28:a7:
86:cd:99:c2:ca:c2:e2:96:14:78:4f:da:eb:be:9a:84:18:95:
86:a5:4e:3c:96:cf:f8:6a:6c:33:d7:17:d2:be:bd:e5:a2:0b:
ac:df:fd:f5:e6:6f:18:44:1b:a6:8f:60:5e:3e:c7:65:14:75:
b2:a9:a7:fe:85:63:fb:3a:6d:70:fc:fb:bc:ea:cf:1d:b7:37:
de:fa:13:1f:17:b6:46:9c:3d:6f:83:2e:05:41:4d:1c:3a:a7:
2a:1d:19:18:df:ca:80:d6:87:92:3a:f8:b9:eb:40:52:39:ab:
b1:e1:e2:55:00:c0:e2:f5:f2:b8:05:da:c3:71:b4:21:78:7e:
b1:c1:1e:3a:a9:07:c2:0b:cb:c9:fb:f9:5a:f3:9d:39:37:29:
76:94:8d:f9:1b:63:60:05:7e:3e:8b:91:b1:a3:fe:6a:54:1d:
7b:94:ea:ad:66:53:d7:27:84:37:1a:75:90:e0:d7:19:5e:ff:
46:0b:4e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:19:26 2025 by rpki-client