Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File: jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier: k/tEca9lIa4a+sy9Mf0GA91o3beHHdxW/uYxxhBG+sg=
Subject key identifier: 5A:3A:E3:18:D4:4D:C1:FC:7F:1A:D0:C2:28:45:78:8F:4D:F7:C5:CE
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 0196120F1AA5C7F23584519697B220C88AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number: 14DC
Signing time: Mon 07 Apr 2025 21:01:41 +0000
Manifest this update: Mon 07 Apr 2025 21:01:41 +0000
Manifest next update: Tue 08 Apr 2025 21:01:41 +0000
Files and hashes: 1: Zwk791BjXFiWW_GWZuipoheVevk.roa (hash: 98bTEWSKCgsr9ScLAh15mZ7s1p9cPoDYzZZ0PPizWyo=)
2: ebKQop9j6C8Jd62F7ue25JuDgWs.roa (hash: FqOT4Eu6V5AfcUcuw2gXk+K+VJY6kHg+9mF4TAN1HTA=)
3: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: rGrnZZaVPTH8qEeX0m7qVN2bi58OAj6z9unx2EfAGV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0f:1a:a5:c7:f2:35:84:51:96:97:b2:20:c8:8a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: Apr 7 21:01:41 2025 GMT
Not After : Apr 8 21:01:41 2025 GMT
Subject: CN=5a3ae318d44dc1fc7f1ad0c22845788f4df7c5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:cc:2f:d9:0e:39:7d:b1:53:6a:34:1b:74:
2f:12:ab:a7:d1:40:77:d0:72:c1:f1:a6:da:93:43:
8e:41:06:13:07:12:49:29:66:b5:12:a0:75:2f:88:
2b:43:d3:0e:da:1f:e5:82:ec:32:15:2a:a5:38:b9:
cc:66:e0:c4:e6:aa:4a:1f:ba:f9:89:36:2d:a5:12:
62:fe:3c:d6:54:82:59:04:84:59:a5:8b:cb:55:55:
8b:a5:c0:01:78:ee:e6:79:b1:de:a4:84:22:90:07:
84:da:21:9b:dd:32:f5:eb:38:b1:f4:0d:df:c0:5d:
f3:6b:95:a0:70:ad:18:b4:c0:ad:27:41:e8:5c:ba:
29:92:39:2b:29:b5:d2:4e:21:82:f7:70:d3:53:9b:
c2:3f:db:eb:1b:14:e9:0c:95:57:9d:39:5c:13:c7:
63:e2:13:e7:37:4a:bd:a6:d3:67:01:ee:2d:e7:40:
f4:e8:82:36:f0:d4:29:f2:93:32:b8:de:1f:97:c8:
a3:8b:20:69:66:bb:e2:94:17:8e:8f:39:66:69:6c:
5d:2d:0a:e3:78:3e:e7:f9:11:9f:2e:6c:e0:b0:2d:
da:0a:b5:23:45:31:68:77:78:45:86:7b:c4:79:45:
3d:87:f5:33:c7:d8:b1:07:de:a1:13:d4:9f:19:69:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:E3:18:D4:4D:C1:FC:7F:1A:D0:C2:28:45:78:8F:4D:F7:C5:CE
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:24:18:27:fd:e6:08:aa:77:74:34:78:da:1e:59:f2:c0:b9:
53:86:07:2c:87:3b:7f:50:8c:8c:3b:7d:06:27:2b:56:50:4e:
79:7f:ed:ad:6c:e2:32:96:7c:7c:b2:5b:bd:9a:83:76:e5:b5:
45:ed:c7:7c:f5:09:a0:35:08:77:3e:04:e7:8d:0b:98:23:9f:
2d:0e:48:9d:1d:66:bb:26:f0:2f:c7:89:f1:23:47:e8:b8:82:
e0:b9:5b:4f:a2:0e:46:41:c9:4a:62:3d:f2:d9:8e:2e:42:a2:
df:fa:27:ff:3c:4d:62:16:08:64:53:26:bd:9b:9f:44:00:61:
3a:69:04:ee:cd:0c:e8:88:72:6b:c8:25:12:46:cd:a5:90:6f:
9f:6e:71:24:bf:fa:cf:3d:bf:45:a2:03:0b:44:31:78:7b:ac:
03:af:d7:2e:ef:5c:f3:b9:02:23:c4:6f:d8:f5:eb:79:fb:6f:
d1:33:e8:18:8e:c5:a1:a1:71:1e:55:55:12:09:a5:39:4f:37:
c4:58:4c:7f:93:c0:70:08:80:87:b6:3b:b1:10:8b:67:0c:a9:
dc:d2:14:78:11:17:80:75:a8:92:69:62:84:13:37:02:3b:69:
36:4b:65:8f:3c:99:73:34:76:64:af:06:5a:53:91:6a:2d:4b:
f6:01:9b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:34:23 2025 by rpki-client