Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
File: JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft (raw, json)
Hash identifier: wOPF4H5qGQh2XvsrROpcKijLKJpXO/mZaxXM+uhC4JA=
Subject key identifier: 64:3C:66:08:3D:D0:22:DA:3E:39:6C:A1:87:44:DA:09:8A:66:37:C3
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Certificate issuer: /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial: 019607C1F8E62BC9ACF7F4DA4D17D48FF665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
Manifest number: 0124
Signing time: Sat 05 Apr 2025 21:01:14 +0000
Manifest this update: Sat 05 Apr 2025 21:01:14 +0000
Manifest next update: Sun 06 Apr 2025 21:01:14 +0000
Files and hashes: 1: 3T-1XN6_cwuMNW22iL1_AA25sSU.roa (hash: zx2BF5CFYR8Sr363pI6NcjPdMBZx2ThD7Wo/N06Wwyo=)
2: JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl (hash: N7pMw3dKTgGWG+u+2gy2j8bnGnMqNq9rJ+YsotKD9vM=)
3: kB78k7d7cNChEiOEdhutVluA5Eg.roa (hash: a/qillBjMak//HIfJthslOlVYybCavMHPJc8Tn/8qiM=)
4: wDk7LmI6cHqgPwoPiReork5n7TM.roa (hash: f4jrE7YABghrHsA4bobpIqsKuhp5LdVQIAwVcPaNdyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:c1:f8:e6:2b:c9:ac:f7:f4:da:4d:17:d4:8f:f6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c672da72a34cc282adc40f282676de75117654
Validity
Not Before: Apr 5 21:01:14 2025 GMT
Not After : Apr 6 21:01:14 2025 GMT
Subject: CN=643c66083dd022da3e396ca18744da098a6637c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:30:04:8b:e8:27:0f:d5:c2:e5:77:10:64:
5e:78:38:84:55:c1:13:7d:69:40:89:9f:58:9c:5d:
03:1f:54:44:9e:68:43:28:67:13:0c:1f:6b:5d:4b:
41:99:84:12:f1:fb:13:3d:c7:bb:07:7c:2a:57:82:
8b:5c:29:82:c7:b2:fb:79:d2:b0:e6:56:e9:3c:3e:
9b:f1:58:9e:40:07:44:df:5c:9b:36:3b:78:81:19:
9a:e3:f5:5d:16:38:f0:ae:2c:c1:2e:b8:e3:7b:4a:
3d:03:38:4e:1d:6d:ea:53:78:6c:44:cf:2e:8e:a1:
7e:6b:76:cc:ae:fb:22:56:5a:28:cb:79:df:3d:bf:
b2:c7:3f:63:51:c8:fb:8a:56:1b:69:82:8c:b5:58:
8e:05:94:81:45:ed:c2:ca:97:a7:b7:e6:af:e2:56:
d2:0b:a0:5f:4d:6a:84:8b:a6:21:0e:51:f4:19:e0:
10:0f:bc:e6:e7:17:14:07:54:97:40:94:39:42:d1:
64:08:bf:9c:4b:71:4b:44:6d:4a:63:1d:7c:d3:34:
23:f2:84:14:e4:00:d1:9b:4f:f7:c8:65:b5:1b:f4:
db:b1:65:4f:4c:ff:74:7b:79:a5:ca:16:8c:18:71:
b7:04:dc:28:d6:47:28:0c:52:9e:74:2a:e7:cd:75:
a8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3C:66:08:3D:D0:22:DA:3E:39:6C:A1:87:44:DA:09:8A:66:37:C3
X509v3 Authority Key Identifier:
keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:60:66:77:19:26:c9:e9:8b:d8:49:9b:8a:1a:46:9c:1c:f9:
9d:dc:65:e4:e8:65:fe:71:11:47:54:5c:98:ba:03:6f:70:b8:
43:06:14:02:14:49:c3:c9:9f:4c:11:3c:82:d9:83:eb:31:6c:
54:4c:2b:3e:f7:16:33:ff:e1:60:13:74:8a:2a:36:e1:19:61:
9c:c9:35:75:29:b3:83:6e:d6:f9:a0:83:23:e6:44:9b:13:da:
2a:f2:c4:c0:73:2a:e3:ba:ce:6c:10:1d:90:0d:ae:25:6b:4f:
49:68:44:20:37:50:06:f0:b9:d7:85:90:ce:78:dc:ea:de:e6:
78:47:5d:c8:94:07:28:cc:19:61:b4:79:07:4e:a6:85:96:fa:
4b:62:a1:e8:88:32:98:c3:7f:30:4d:b8:8e:92:6e:51:2f:af:
88:5e:c1:c7:4f:96:e2:aa:d5:f8:78:5c:05:67:7f:44:69:57:
81:4b:15:c4:39:05:1b:d5:c7:ab:6f:53:b3:17:76:27:5c:fc:
83:37:a7:c0:f7:87:ac:ed:dd:c8:5b:9b:b1:81:70:0d:32:4f:
fc:8e:05:df:7f:c2:7a:25:90:d5:71:3c:84:7f:17:a9:e6:10:
6c:35:75:e1:ce:33:15:ad:d5:5d:5d:b8:fd:81:3e:a5:7b:6b:
c4:d2:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:25 2025 by rpki-client