Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: P+56OHywRpMQZgU1BGbMNa3lesIYSi2Tb4YWSxgYLdM=
Subject key identifier: 91:15:22:47:4B:4B:A3:5A:48:B7:BF:D1:66:97:87:21:3C:76:F9:50
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 0196146AF6F7EE19DE842CAFFC110361AD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 0E9A
Signing time: Tue 08 Apr 2025 08:01:16 +0000
Manifest this update: Tue 08 Apr 2025 08:01:16 +0000
Manifest next update: Wed 09 Apr 2025 08:01:16 +0000
Files and hashes: 1: 1-VympxjBDWi5MNPd5PqkAiFK8cw.roa (hash: g9oAglIOu05tbBj4MBirO8ol3RXV21sLtMa1CGtPD7w=)
2: RJkO8AUrZrMkwWrIpOKAj9ZRQns.roa (hash: DMl9U1g0NhHcsK5udeo5/s32paUDRQXnGqAqFKyzYXk=)
3: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: mYiqWAe6U+Sv+QXJ3/OvEf2KsHzcxbYQ868yemm2Rxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6a:f6:f7:ee:19:de:84:2c:af:fc:11:03:61:ad:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Apr 8 08:01:16 2025 GMT
Not After : Apr 9 08:01:16 2025 GMT
Subject: CN=911522474b4ba35a48b7bfd1669787213c76f950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:d2:b5:4f:94:ec:2a:1e:3d:84:c4:8f:85:
85:1e:53:80:7c:8d:de:40:7b:c8:b4:6d:98:d0:7d:
49:19:29:a9:76:60:3f:24:3b:0b:e8:b7:58:99:e8:
c6:a6:1e:e4:59:6b:41:69:f4:ff:b0:07:52:5a:8c:
1c:8d:7a:b8:3e:9a:bf:60:5a:25:c7:0e:84:f8:c2:
4c:17:2c:7b:5e:a0:82:c9:cf:55:38:62:dd:aa:0b:
7a:36:b7:5a:54:8c:a4:ea:c8:80:23:68:cb:fd:72:
3b:1b:7a:9f:c4:ad:b7:ac:0c:5f:a4:c9:78:4e:4b:
98:b3:51:44:61:6c:62:57:d5:80:cf:be:26:1e:eb:
83:14:7a:78:85:e7:ab:5a:a7:0c:1d:38:a0:44:c4:
26:60:cb:3e:ee:0c:41:93:2a:11:d8:ce:99:f3:3b:
cb:78:08:22:c2:20:27:eb:80:65:5a:12:79:74:42:
06:ff:39:a6:fb:16:ba:72:d9:83:de:67:19:b1:57:
19:37:42:a4:20:3f:7f:e6:ac:71:b0:a0:b3:04:63:
eb:41:31:df:1b:35:68:32:24:c1:bf:c2:22:35:ee:
04:88:bb:3d:3c:74:da:6c:34:5f:a8:3a:f3:2c:70:
3b:fa:b7:45:16:dd:01:10:86:ce:fe:2b:64:c0:f3:
c5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:15:22:47:4B:4B:A3:5A:48:B7:BF:D1:66:97:87:21:3C:76:F9:50
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5e:d9:c8:13:d8:08:75:5a:e4:6a:07:ea:11:6c:0b:ac:80:
27:bd:f2:22:83:8e:eb:c3:cb:2f:e7:0a:36:9f:b4:b8:2a:e5:
ab:fd:d3:36:5c:ad:73:17:03:85:ab:76:d3:c7:94:00:19:9f:
e1:a3:4e:f2:e0:64:4d:e4:16:7f:0e:65:2b:60:3e:06:44:aa:
ef:66:3e:7c:44:d8:91:c5:86:bd:7b:04:11:c7:d2:cc:c1:05:
a4:05:5b:c4:8e:a6:6a:cc:5c:5c:0c:75:12:f5:c2:3f:68:9a:
34:bc:d0:0b:a1:aa:ed:35:72:c6:fe:25:cf:b6:c3:9e:0e:72:
61:62:81:ad:6a:ae:e9:79:cf:af:92:85:d6:ae:24:86:b3:f6:
2b:d1:ca:1b:7b:8d:b2:ff:a4:7c:e5:a2:1b:37:98:81:67:84:
1a:af:b4:b2:6a:89:69:0d:bc:b9:95:d8:49:94:e6:7a:76:4f:
20:69:ad:82:5b:c6:0e:68:ef:a1:9d:d2:3e:69:8b:b1:f7:87:
03:ad:8c:14:c5:c0:46:38:f1:03:40:52:55:27:2b:f7:b1:cc:
87:23:06:f9:6b:97:4b:06:f9:28:df:9f:6a:97:e6:df:e8:a7:
32:24:12:96:0f:29:ba:c5:cb:7c:e7:ed:6e:ba:7d:42:4a:26:
7d:cc:c4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:06:26 2025 by rpki-client