Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier: xGnQWK1HUEnfhZQmNooDsrp0RJg5EIBIcf+UScMoSzk=
Subject key identifier: 25:D2:0F:1E:F3:DA:43:0B:E5:02:85:D2:87:FF:FD:C0:F6:33:9B:DE
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 0195FCD0495DA08D48D9CA1391D524C1044C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number: 04CA
Signing time: Thu 03 Apr 2025 18:01:03 +0000
Manifest this update: Thu 03 Apr 2025 18:01:03 +0000
Manifest next update: Fri 04 Apr 2025 18:01:03 +0000
Files and hashes: 1: L4smq-nhr8V7McPkHdFWkWsgri8.roa (hash: VHGnpdqtRLQtG9p6agEggr8NFc04lbC697PzkOrlE14=)
2: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: hEbIrMIP7VzNi+zRNNUUaFRA0GmOb58jrzXmb1AOYHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 13:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fc:d0:49:5d:a0:8d:48:d9:ca:13:91:d5:24:c1:04:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Apr 3 18:01:03 2025 GMT
Not After : Apr 4 18:01:03 2025 GMT
Subject: CN=25d20f1ef3da430be50285d287fffdc0f6339bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:cf:6f:04:38:74:76:80:7d:ee:18:31:69:
a0:6c:c6:c8:c5:c3:30:55:64:85:72:00:a4:f9:a1:
76:d8:3e:84:49:9a:74:98:78:1d:21:cf:41:8e:67:
1c:6d:12:b4:ed:e3:24:e9:d7:c6:0f:c2:8e:5b:34:
fb:57:51:83:4a:a6:3f:77:b1:be:71:77:ba:82:d5:
96:61:e7:01:c5:ce:90:8a:14:5f:db:0d:44:86:12:
8d:7a:80:68:c1:09:55:8d:ff:4b:81:cc:0e:5f:48:
53:68:12:dd:8a:7f:80:a8:2d:d7:27:f7:24:3e:c4:
3d:29:7b:0e:7f:10:0d:85:98:80:7a:e6:48:9b:9b:
ba:d8:2c:27:91:3d:9f:4d:95:7c:be:47:4a:ba:41:
d5:c8:11:85:d1:64:6e:01:8c:fa:3a:57:97:11:93:
94:9d:d5:40:03:85:51:d1:74:d8:13:a1:7d:13:69:
e3:19:e3:4b:b9:7a:b2:b4:02:98:55:8d:e5:93:97:
c8:23:35:ef:1b:e0:b6:ae:2d:e8:3b:6b:90:65:1e:
6f:25:07:18:22:be:f9:81:58:df:28:45:02:82:0e:
06:07:98:2d:4e:63:a0:fe:3a:20:d2:16:02:05:19:
e5:78:28:7e:db:48:aa:d6:48:00:2a:6a:26:30:64:
2d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D2:0F:1E:F3:DA:43:0B:E5:02:85:D2:87:FF:FD:C0:F6:33:9B:DE
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:62:01:c8:5c:5c:9c:d1:fb:e1:d2:3c:8f:43:59:a7:fe:3d:
20:88:41:c9:3f:ba:c4:81:61:9f:db:69:db:05:ef:0f:99:10:
49:3f:bd:fc:fa:5e:b3:90:d9:8b:c2:a7:38:e7:c1:59:89:ab:
b5:fc:a9:c8:64:cb:0c:be:50:c6:45:93:96:86:5d:47:4a:f9:
8d:d4:5c:c2:b4:09:62:a0:ee:60:b2:7f:2c:16:e7:c7:84:fb:
b5:6d:cb:d9:6a:79:74:77:a6:8f:28:ea:99:38:c4:e1:e2:d8:
28:2f:38:4a:4e:19:b3:3e:78:0a:59:02:9a:34:ce:75:74:8a:
36:4b:49:02:14:d2:27:78:63:08:49:29:c8:7b:44:22:99:27:
d6:3d:ca:c1:cd:44:25:04:88:29:c5:37:f2:69:e8:cf:69:0d:
81:32:2f:00:fb:96:99:14:a4:31:73:7c:6c:4a:7c:1f:5b:f8:
c9:99:3e:65:28:22:d5:a9:bd:88:26:0f:6d:19:ab:d2:2f:df:
83:f7:7d:ff:a7:08:01:15:0d:ba:2d:3a:83:ed:38:76:c5:23:
6d:45:c8:4c:fe:4d:e4:30:52:67:d3:1a:f0:ca:5b:3c:66:b2:
4d:4e:77:51:89:84:4e:60:84:da:5f:43:02:f7:99:76:83:4c:
cb:b3:d5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:33:22 2025 by rpki-client