Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
File: JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json)
Hash identifier: UCNKGjhwEKpsuez4VHAvclOwyUmmj0jw/yofnmq2fEc=
Subject key identifier: D1:8B:38:EB:EC:70:96:BC:5E:2F:72:2D:73:5C:6C:37:FE:34:9E:47
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial: 01965B39F3CB333FB9C4306EFD366D3DB4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 02:00:46 +0000
Manifest this update: Tue 22 Apr 2025 02:00:46 +0000
Manifest next update: Wed 23 Apr 2025 02:00:46 +0000
Files and hashes: 1: 1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa (hash: 1RWFPDfJ1G/rxL8RWFN0T7fyBapWijKmVx76gf4PMDo=)
2: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: GaK3Z8U81qXV/WwUgScUMGt+rbcTQoz6ZH7SryguURg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:f3:cb:33:3f:b9:c4:30:6e:fd:36:6d:3d:b4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Validity
Not Before: Apr 22 02:00:46 2025 GMT
Not After : Apr 23 02:00:46 2025 GMT
Subject: CN=d18b38ebec7096bc5e2f722d735c6c37fe349e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:79:1d:98:bc:a0:d4:ec:cc:58:c3:ca:49:
62:25:5b:d3:dd:a7:27:1e:bf:e5:ae:5d:b7:62:17:
44:68:1b:e9:0c:f0:99:69:38:0c:80:ad:ad:30:de:
e2:4a:a8:6e:09:85:b4:a6:9d:ab:03:a9:a8:75:d6:
bd:0f:81:19:b3:f7:1f:3b:f2:d9:86:8d:dd:13:cc:
f7:96:9b:45:f3:38:e2:42:ef:50:e8:e0:d5:b7:bf:
8d:97:99:a2:32:30:59:62:b3:a2:9c:b1:b2:b0:84:
5c:f0:2e:75:61:4b:00:b5:62:02:a7:da:20:88:cc:
e6:1d:1c:75:2b:9d:c1:fe:0f:89:3e:1c:58:5b:2c:
a6:20:b1:8f:6f:d3:32:23:84:f1:74:ed:dc:dc:d4:
06:56:1b:c9:87:5a:0a:1b:37:c7:83:b4:f4:2f:c3:
97:69:66:1d:b5:71:71:5d:2e:f7:18:8e:d0:fb:c0:
47:33:7e:71:c7:f1:70:07:bd:5a:c8:b9:a7:94:c5:
7e:a6:3b:0c:bf:21:84:94:76:3e:da:38:13:b1:00:
1c:17:3f:b6:30:cd:09:21:77:79:24:43:a8:a2:06:
7b:d1:cb:50:9c:9e:13:04:6c:cd:40:6b:35:ad:26:
4d:a5:34:2e:b1:00:57:0e:2e:0d:a7:df:b8:20:fe:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8B:38:EB:EC:70:96:BC:5E:2F:72:2D:73:5C:6C:37:FE:34:9E:47
X509v3 Authority Key Identifier:
keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d9:c0:37:90:de:15:3f:4a:9a:8b:c8:a2:9d:b4:31:b4:3d:
df:e7:d6:02:83:ac:00:ea:14:5d:64:93:0e:d6:b1:9d:e9:29:
3c:71:30:01:8e:76:ba:e5:27:48:d1:52:d7:a3:f5:85:ad:0f:
b8:b0:06:00:9c:d9:7e:9b:59:8c:05:f1:1d:c7:23:5f:59:24:
4e:4f:17:f0:4a:b1:55:5a:90:d7:cc:f6:42:57:f1:45:5f:47:
89:39:bb:4e:42:b6:84:47:11:74:fe:80:49:48:2c:a1:6a:87:
d2:b2:24:cf:2e:30:2c:c9:56:ce:00:eb:97:4a:44:10:7e:fb:
6d:b4:92:11:77:c3:1b:4d:39:1a:d8:5f:e7:70:d6:0c:32:10:
a1:8e:d6:5d:bc:d2:69:8e:1c:c7:6c:ea:d7:3f:15:6a:b6:f8:
f4:4c:07:b6:e9:c7:4c:09:d5:5a:c5:22:21:a5:ed:eb:c1:8b:
a9:82:d9:d1:95:93:aa:b2:9a:4c:3c:b7:e2:76:58:a1:78:c7:
08:f4:a7:df:33:1c:1d:8a:af:90:ee:e9:07:2a:f7:a1:b1:87:
3b:4c:f0:7a:1a:ca:a9:48:25:a6:04:33:dd:49:2b:37:fc:11:
25:dc:f1:76:0c:a3:7f:ed:d3:2a:04:f2:8e:67:26:19:d7:5e:
50:b9:ef:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:09:34 2025 by rpki-client