Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier: 1oh4KcK6FM5YqVC8Gn9W0PF+hEkigCWmJQ8jPDex9/o=
Subject key identifier: AA:74:39:7B:FD:52:96:2D:61:2A:DB:8B:69:45:D1:5F:FA:F7:F2:C5
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 0196507ED4B204162C02924E08707A303FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number: 12D0
Signing time: Sun 20 Apr 2025 00:00:11 +0000
Manifest this update: Sun 20 Apr 2025 00:00:11 +0000
Manifest next update: Mon 21 Apr 2025 00:00:11 +0000
Files and hashes: 1: 4eT-mW2UcQ9kNb0XbHZf4utls6k.roa (hash: pWKqm9dxjrmHdVu6fXo7RV80//gt2D0eFFO08R5PXW4=)
2: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: 58lnRDoWSIB4R6BTzG+7PAvTdotPHSvzTNNvTM9Cu+A=)
3: rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa (hash: oUmBkcDadINaUxLlpIH308aZUrK5RDWqrmdyK5/vDp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7e:d4:b2:04:16:2c:02:92:4e:08:70:7a:30:3f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Apr 20 00:00:11 2025 GMT
Not After : Apr 21 00:00:11 2025 GMT
Subject: CN=aa74397bfd52962d612adb8b6945d15ffaf7f2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:bc:ee:5b:45:d5:d2:ee:c6:b5:b3:58:18:
b5:6c:05:93:24:75:98:74:6f:90:38:62:53:21:87:
9b:96:6a:f1:46:63:25:c3:0b:a4:f8:f8:85:e6:25:
09:b0:41:6c:0d:d7:40:d8:5d:1e:d4:5e:cd:7c:b1:
cc:6c:e3:c2:a4:15:a5:68:f7:6a:0c:cd:90:6c:68:
05:0a:7b:b7:dc:dd:3f:1f:e5:e9:e4:5f:b4:d1:85:
3e:9a:bd:89:7e:03:87:aa:89:08:5b:44:b7:a4:82:
61:0d:20:ac:74:73:4a:24:28:2a:71:a1:dd:b4:a9:
1a:7c:50:14:fc:1b:5f:0c:53:31:8f:9d:30:5a:bb:
da:92:fb:db:19:1c:9b:1e:b5:c7:5b:15:6b:ac:74:
2a:79:7f:7e:35:f8:ed:81:da:5d:eb:6d:67:ec:db:
82:5e:82:05:ad:90:37:bb:55:17:ec:70:8b:9a:e9:
c3:91:ba:c5:9c:8c:26:0e:13:d4:ba:27:f0:1f:35:
73:e3:0f:60:22:aa:f3:1d:a9:d3:7d:69:80:41:79:
ab:5f:41:92:7b:e2:4e:d3:08:98:c4:55:db:a5:09:
dd:df:af:0f:52:4d:3d:ce:0c:79:5b:14:91:d7:3f:
a9:9c:d5:80:31:40:88:a0:11:eb:23:5e:fa:48:fe:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:74:39:7B:FD:52:96:2D:61:2A:DB:8B:69:45:D1:5F:FA:F7:F2:C5
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e4:a5:95:3a:d1:6d:00:c2:cd:b0:dc:39:c5:c8:28:3b:72:
81:97:0c:b8:46:bb:71:3f:c6:5e:b2:7d:78:54:45:24:bc:a6:
36:ce:ae:6d:62:47:c2:ab:2e:7a:b2:05:3d:cd:e5:ac:7f:88:
e5:d5:ec:06:c1:4c:f5:18:c5:fe:76:7a:8b:81:72:b6:53:67:
9b:d6:21:8b:6f:d1:1d:bc:ff:b6:3d:91:ba:ea:26:6a:cb:e0:
b2:6f:2c:15:5e:dc:ac:34:48:c5:f8:74:4d:8f:b7:47:6c:65:
fb:33:dc:29:65:45:5b:d4:ef:5d:fc:3a:7e:d3:66:2c:6d:69:
3a:b1:a6:89:bd:78:68:16:dc:5d:12:52:75:5d:ce:9f:b2:b0:
26:62:07:d6:36:27:69:de:7d:af:2c:80:e4:c6:3d:e8:eb:be:
bb:ec:72:da:49:af:7b:a2:44:ec:b8:8a:36:9f:9c:31:0c:6e:
dc:e8:32:8a:0d:f1:0a:e7:27:9c:f2:82:ea:37:98:c4:66:2d:
b4:9c:85:3f:b1:f7:6b:ba:58:16:9e:7c:fc:df:1e:12:51:ef:
78:9e:41:e5:0d:c5:bc:ac:31:22:e7:62:37:6f:d1:88:20:81:
ac:af:61:36:d6:c2:06:d1:00:8f:8c:22:d0:f4:54:9e:3f:83:
00:8e:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:40 2025 by rpki-client