Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: LPf382y5cmIOF2/kPzxFypsbJN6Dgdsr6K18gTxuSQ0=
Subject key identifier: E4:E7:03:91:B7:D6:BF:23:46:34:2C:3F:3D:6B:1D:66:76:7A:B6:7A
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 0196380913D1E376A034AF60B12CFB140C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 14F2
Signing time: Tue 15 Apr 2025 06:00:40 +0000
Manifest this update: Tue 15 Apr 2025 06:00:40 +0000
Manifest next update: Wed 16 Apr 2025 06:00:40 +0000
Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=)
2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=)
3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: vsE92+5S+PeUOBNaRf3V1lRtBOYcAHht19vH/5xIwXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:09:13:d1:e3:76:a0:34:af:60:b1:2c:fb:14:0c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Apr 15 06:00:40 2025 GMT
Not After : Apr 16 06:00:40 2025 GMT
Subject: CN=e4e70391b7d6bf2346342c3f3d6b1d66767ab67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:2a:2f:c4:fa:d0:e2:14:46:55:4c:b5:85:
1c:8f:fa:fd:c4:82:a0:26:8a:6f:95:af:2b:6b:ed:
a3:80:14:66:a4:66:b3:5d:ca:de:32:f5:53:1d:10:
4e:81:d1:ba:16:93:a9:5a:51:3c:eb:88:72:58:3c:
1e:90:46:1d:1b:f7:87:00:e0:e0:ed:11:a9:9d:e6:
2a:45:ec:1c:d8:06:2c:4b:94:76:09:15:93:c8:da:
c1:c2:ee:2b:77:5c:9e:48:57:1a:82:f8:a6:b1:8a:
42:02:6a:00:72:5a:4d:4a:50:bf:e3:01:4b:10:8b:
c4:80:c4:0f:5c:65:fd:ff:31:79:46:7b:e1:93:6b:
d2:f9:ac:e4:c3:e0:93:ae:e6:8f:b6:f9:20:7c:7d:
9a:62:8c:49:bc:06:bc:14:51:1f:08:2e:7a:83:28:
12:62:f9:f9:a8:45:19:96:0d:a6:9f:87:76:dd:f7:
6f:12:1c:54:a4:1a:cf:d3:02:15:11:a1:65:75:38:
0e:5a:42:81:68:2e:5a:e2:eb:b1:f7:d7:f5:05:16:
f6:3d:4c:fa:79:78:6d:f6:d7:a3:b7:8c:37:aa:6c:
b2:42:57:b5:aa:64:fc:9b:2c:00:1f:b4:11:07:f5:
bf:50:97:ae:8e:85:f6:97:16:11:14:90:41:10:ed:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E7:03:91:B7:D6:BF:23:46:34:2C:3F:3D:6B:1D:66:76:7A:B6:7A
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:04:fb:b8:bd:f3:06:56:73:7d:f4:93:72:20:c0:35:4d:43:
7a:8e:a0:0d:db:f5:0e:b2:f4:52:4f:52:07:a2:3b:24:f6:55:
34:00:dc:64:67:56:f8:fb:2b:0c:ba:4c:2c:46:61:d9:61:b6:
5b:d1:af:61:44:49:5f:99:b1:49:2a:71:d0:fe:15:83:10:55:
7c:f8:94:03:a8:7b:ec:ba:bd:76:2f:8a:df:99:17:9a:58:71:
a2:62:d8:99:bd:b0:74:ae:67:da:68:8b:67:f6:e4:28:3d:3b:
44:bd:a1:01:3c:95:be:42:37:f2:83:b8:f5:7d:ad:7c:d1:2b:
9e:fe:7a:06:bc:56:cf:b6:1b:8f:5d:53:d0:ef:ea:b2:f5:2c:
24:28:b9:1c:2f:0f:90:18:8a:95:34:10:ae:7c:c9:7e:06:d7:
7b:b1:c9:42:34:01:9c:b0:33:3b:e9:93:be:ad:f0:2c:29:86:
b6:ba:c3:39:dd:91:f3:42:fe:a8:96:f1:fc:c2:26:45:0f:13:
35:46:c6:69:dc:1b:aa:b7:52:56:fc:46:78:02:e5:f2:d8:fb:
db:87:28:50:35:75:6c:c2:a3:32:d2:12:ed:86:88:6d:14:b8:
7c:92:10:47:59:15:1a:69:6f:10:41:08:10:57:6d:81:b7:a5:
21:3a:cc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:41:23 2025 by rpki-client