Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: brHVrW8Q4y0ak2RGVEKFA21XL8ZlZGbNdHNnVRwbb28=
Subject key identifier: 56:51:C4:16:90:75:32:61:DB:C2:98:BA:D1:A7:E9:01:B4:69:89:1B
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 01961245DC5DF5523A488D26C71879C9FB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 14DB
Signing time: Mon 07 Apr 2025 22:01:30 +0000
Manifest this update: Mon 07 Apr 2025 22:01:30 +0000
Manifest next update: Tue 08 Apr 2025 22:01:30 +0000
Files and hashes: 1: Kvwz7Otgc_2cfxtWv-qyiSeDnkI.roa (hash: /Av0G+E+eRmfEHS46xLPNhTCJCoxta+3DzTycHIkaZ4=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: m+kxVr90GJEjPyrB3uO+zRYzyKDWrP7uFMppyUQotL0=)
3: jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa (hash: pk7j7TBSzPnMDTNnJGvz2FoxttkV1MmZfvsZ3NtTMUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:45:dc:5d:f5:52:3a:48:8d:26:c7:18:79:c9:fb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Apr 7 22:01:30 2025 GMT
Not After : Apr 8 22:01:30 2025 GMT
Subject: CN=5651c41690753261dbc298bad1a7e901b469891b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:48:b8:7f:3b:4f:e8:94:f0:c4:7a:e3:92:
95:3a:b4:43:7d:55:16:e3:6e:2d:2c:c2:81:e9:91:
06:b4:7b:ef:c8:8b:15:22:0a:4c:db:34:94:83:05:
a1:72:87:90:99:9a:a1:21:10:07:f8:9f:c0:19:49:
36:fd:60:cf:03:3d:b8:30:1c:c5:3c:d7:67:9f:ea:
d1:f6:df:d0:b4:1e:20:f3:cc:bf:cb:9d:70:28:98:
59:a8:43:25:de:05:6a:d7:32:bb:df:78:4d:30:0e:
71:cd:92:41:47:82:2d:32:8e:22:42:3e:32:9a:d0:
66:95:fd:a7:51:39:a2:a9:a8:ee:dd:53:bc:3e:c2:
c4:ce:e0:e2:5d:4f:29:96:95:07:0d:6a:3b:eb:ba:
7d:5c:01:02:42:b0:4f:43:bb:f0:22:7d:06:7e:e6:
a4:e6:81:5b:c8:1c:75:39:1e:22:e9:6f:c0:c1:d0:
6b:c1:e2:af:e6:dd:ec:da:04:29:84:9a:93:96:1d:
06:b8:00:99:63:ba:9e:ba:89:1a:39:06:8a:7e:01:
98:a1:d9:9b:39:79:2d:6b:1e:bb:b7:5c:44:b5:11:
ca:02:f6:c2:da:b5:7f:6a:e5:a8:dd:96:61:24:3e:
76:ed:1c:d9:e8:c0:4d:55:3c:12:68:6b:ce:41:d4:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:51:C4:16:90:75:32:61:DB:C2:98:BA:D1:A7:E9:01:B4:69:89:1B
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e3:b2:c8:7a:cb:ce:30:cf:ea:11:8f:05:e0:02:09:e4:9d:
1b:88:42:02:8a:02:af:b0:45:7c:d8:12:6b:b6:cf:05:64:4b:
78:5f:01:98:17:05:76:b9:36:e9:ee:c9:60:0f:bd:db:cc:39:
89:73:95:12:4b:92:4b:c7:a9:92:18:cf:69:cf:2d:15:25:12:
a8:ed:8c:84:f5:0d:f6:86:fc:6f:8b:4a:b2:1b:f1:a4:61:12:
63:06:fa:57:85:c9:20:22:a8:4c:a4:24:9f:d2:8b:cc:df:7b:
09:67:8d:a1:af:ea:50:5e:3f:83:24:02:27:da:46:ae:6a:52:
73:31:a0:90:c8:2f:5e:c0:af:91:d8:e0:5a:c8:7e:a9:31:de:
1d:9d:01:1e:2e:89:10:c2:53:23:9f:32:ad:7f:bc:07:d9:5f:
0d:c5:b1:43:c9:30:2b:a3:6a:e5:d6:16:05:2c:bd:af:0d:a6:
39:46:86:04:27:39:c9:3c:2e:9a:91:fb:91:88:c8:a0:09:ec:
59:b1:9c:76:46:86:c3:27:05:21:6a:fc:53:41:6f:91:4d:44:
78:b7:8e:7b:65:6a:27:37:eb:f7:97:b5:3c:43:77:97:89:c3:
45:cf:2c:08:8d:1c:04:17:bf:2b:aa:89:01:d3:42:6e:23:7f:
22:7b:70:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:08 2025 by rpki-client