Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: xAzvYzmCbFQ3a5b7NIYsVMCB5qiuthiECWPYs1aiFWw=
Subject key identifier: 00:FA:86:55:01:50:12:DB:27:AC:0F:48:90:E7:12:8D:BF:41:46:9C
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 0196556E930FD3E6E00756EBD8C61A92C253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 23:00:32 +0000
Manifest this update: Sun 20 Apr 2025 23:00:32 +0000
Manifest next update: Mon 21 Apr 2025 23:00:32 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: mpdtxnNuFzxe+aylBv3QEidnlKBGWZ4ArkmxN1DeMLQ=)
2: RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa (hash: dQnKrWhdakZ+384uTWhQC1swu7fczbqA0NfqM/pjIIQ=)
3: wtfqM181rNTZILTtZZuVyGYsV2g.roa (hash: jL1T6NkOiM+9LzgY51xQQ/S9ZQ9hPL5ZNlX1CHentpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:93:0f:d3:e6:e0:07:56:eb:d8:c6:1a:92:c2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Apr 20 23:00:32 2025 GMT
Not After : Apr 21 23:00:32 2025 GMT
Subject: CN=00fa8655015012db27ac0f4890e7128dbf41469c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:0a:aa:2f:c0:c0:d8:3f:89:cf:d9:82:b1:
5b:45:05:26:0d:e1:74:ca:1b:39:3f:6a:10:69:80:
4a:81:b0:fb:5e:eb:7f:2b:a8:ee:40:e7:e5:b4:fe:
1d:1c:bc:99:8d:2d:7c:49:18:75:54:30:3d:ec:82:
bc:db:e9:6b:29:71:1e:71:61:b7:98:34:3b:76:0c:
da:19:a1:a1:db:21:4b:1c:e4:9e:ed:77:4f:48:89:
69:16:e8:c3:e6:cb:e5:a7:79:70:57:46:56:0c:73:
0f:70:78:fd:f0:b3:d2:73:a4:3a:ca:4f:9f:1f:0a:
b6:48:17:08:ef:3a:a9:66:f0:a2:00:91:f8:cc:e6:
ae:21:d4:0c:b7:97:9f:d8:ae:05:f1:51:70:1b:e3:
94:b5:8d:1b:65:15:5a:ef:2b:10:70:9d:bf:e2:f8:
b7:f0:fa:2c:62:43:19:45:83:5d:e9:f0:50:80:d3:
7a:95:e1:ed:ae:7b:f2:7f:06:da:c4:02:2c:1e:25:
6f:2c:e6:a3:f6:8d:59:8a:3a:b8:19:49:92:7b:7c:
f2:d4:ab:8c:e9:8c:6b:74:7e:02:7f:bb:7f:79:2e:
d5:fc:bd:6a:c8:69:59:a6:be:28:d8:ea:28:14:60:
92:2f:08:e8:91:0d:3d:e7:5f:70:73:af:de:02:11:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FA:86:55:01:50:12:DB:27:AC:0F:48:90:E7:12:8D:BF:41:46:9C
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:73:6a:cf:46:c5:24:2d:33:db:d4:c2:3a:5e:e2:b9:73:53:
68:47:10:e3:db:ff:ea:ca:6a:94:1b:88:8f:49:f2:69:28:e2:
a6:43:19:1a:33:c5:0c:46:ae:2e:a3:d4:cc:7e:8d:8f:e0:a6:
76:3e:4a:39:77:00:34:5f:f9:10:eb:27:0a:98:06:37:9e:44:
e2:a9:b8:63:0f:b6:78:b7:b7:f9:34:51:9a:6b:5c:ac:53:f5:
65:b0:93:9f:0a:10:ef:95:67:5c:ba:7f:4e:3e:94:eb:74:bc:
64:ef:49:96:75:6a:5c:52:f3:62:3f:b8:17:cb:b8:e0:cd:6d:
ae:61:5b:79:c7:70:76:38:0c:38:3b:3f:63:93:47:01:19:36:
4f:19:9c:82:ca:d3:4e:d6:fd:d0:b6:38:11:10:87:34:0c:94:
4b:7f:3c:bf:f4:d0:97:7b:df:0a:30:4b:70:b6:a1:29:f3:c5:
71:0b:90:91:9c:19:a1:e8:f5:82:3c:5b:5e:e6:9f:f8:e6:a0:
6b:cd:7a:88:03:9f:73:4c:67:dd:29:64:f3:9f:62:d0:ce:95:
ad:d3:84:1a:3b:3d:ba:ad:22:f8:28:a6:0a:19:ff:f0:8b:b0:
ac:3a:6c:a5:65:0f:a9:09:96:bd:08:2d:92:fe:70:e5:81:e7:
7e:bd:39:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:27 2025 by rpki-client