Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: i2TeQq0OlF1iDvEujR4le+UwwoUk5LTu9FJCEyp/MQw=
Subject key identifier: 10:CD:FB:91:F1:81:88:EF:BC:F4:F9:0F:C0:2D:35:0B:9C:A6:69:A8
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 0196195A2F4DA4578192E3DBD6854E7804E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 0E0B
Signing time: Wed 09 Apr 2025 07:01:02 +0000
Manifest this update: Wed 09 Apr 2025 07:01:02 +0000
Manifest next update: Thu 10 Apr 2025 07:01:02 +0000
Files and hashes: 1: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (hash: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: /UBErXL7G+nzhhiI3OLRbhb6SzpyyuuEF1WYttJrUGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:5a:2f:4d:a4:57:81:92:e3:db:d6:85:4e:78:04:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Apr 9 07:01:02 2025 GMT
Not After : Apr 10 07:01:02 2025 GMT
Subject: CN=10cdfb91f18188efbcf4f90fc02d350b9ca669a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:c5:bb:db:4a:f6:c8:2e:1a:50:00:10:94:
13:ea:a7:a1:20:d0:d6:02:6f:18:95:0e:bb:87:a4:
21:ff:5d:cf:d9:f5:c0:31:2d:db:d4:2c:f1:12:ee:
30:0c:c3:9c:75:4c:0d:d8:5f:b9:77:1b:3e:36:a8:
22:79:43:93:27:c5:f3:a7:db:18:4d:92:ae:ac:67:
2d:ec:73:99:b9:13:2d:d7:58:ca:c9:16:39:e3:7f:
99:1c:15:ea:7f:a4:2a:eb:f2:78:a1:0c:44:a2:95:
0b:86:51:24:f8:a9:d3:34:ec:4f:d9:58:86:77:54:
2f:e9:c6:0d:4a:dc:87:01:cc:c9:0d:56:e3:91:c4:
ec:42:8d:76:c9:e6:29:6c:60:64:3b:f8:5c:b7:67:
dd:27:e1:e1:9c:ad:dd:25:4c:39:36:b5:8f:a7:45:
33:06:43:05:c3:23:4c:06:b1:f2:46:c1:9f:4b:1a:
e2:3b:25:4f:6d:12:c3:5f:85:99:12:f4:c8:56:66:
c9:6e:bb:52:bf:16:ca:fd:97:aa:14:94:16:40:da:
a6:77:90:49:1e:42:e8:91:e3:cc:a0:c6:c7:a3:34:
22:6a:4e:1b:1a:30:71:6e:46:03:3d:e4:57:12:2c:
63:28:01:65:a0:01:a3:cc:06:57:16:45:ee:83:94:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CD:FB:91:F1:81:88:EF:BC:F4:F9:0F:C0:2D:35:0B:9C:A6:69:A8
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b0:6e:f2:09:36:c2:59:90:03:cb:77:a0:e7:37:cd:94:2c:
61:3e:cb:ba:2f:6c:69:7d:d5:22:32:83:cc:dc:ca:06:d0:96:
3b:f6:72:f5:dd:24:ee:bd:0b:02:b5:8d:5e:a7:da:77:ba:a3:
83:07:55:65:c1:18:6b:7e:ed:95:51:6c:1d:f8:87:13:5b:81:
59:c5:eb:94:ea:66:09:6b:91:78:9a:af:55:aa:c6:d0:68:63:
a8:78:db:c3:af:4f:e0:8c:44:c9:0c:1c:54:e9:74:7f:e3:d5:
b9:79:bc:4e:90:6a:38:73:ae:9e:98:92:8d:ea:06:b3:39:61:
77:91:d4:cc:e1:0b:0e:3c:af:98:f3:16:50:85:7f:88:29:bc:
07:07:65:8a:2c:40:65:78:81:77:1e:fc:85:52:35:16:cf:56:
90:12:3e:e2:1a:6a:e9:76:7f:86:aa:ca:74:d4:82:4f:6f:01:
66:0c:73:3c:42:da:a6:22:c4:78:9e:cc:ee:06:6b:2e:0a:a4:
f6:24:fa:64:51:77:e6:b9:24:7f:97:ca:7c:c9:aa:c7:bf:b7:
7d:39:5e:5f:3d:3e:ea:c2:00:6b:fa:fd:fd:b3:fe:9a:7e:3a:
a9:f1:e6:70:48:b7:53:2e:37:6c:1f:57:ff:00:09:ff:4e:c5:
b3:f8:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:46:05 2025 by rpki-client