Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: iHRIGtJB+8zo7GyB7C45OLhqw9hCIR0uxEPwe7I+HyE=
Subject key identifier: 93:56:44:98:80:96:C0:A2:D8:A7:32:B7:93:37:A6:AB:35:AD:2F:F4
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 01964B909D5DFF2CB5CB7D9B2FF9190ACC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 13F9
Signing time: Sat 19 Apr 2025 01:01:30 +0000
Manifest this update: Sat 19 Apr 2025 01:01:30 +0000
Manifest next update: Sun 20 Apr 2025 01:01:30 +0000
Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=)
2: c9lDVYQcRQdBCo43HauWZGFuClk.roa (hash: inruiVih5EBCVj6ZjI9SCWuJ/TuQ5KyFEPVY6V2Z9e0=)
3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: GV7fEdwEi2VoH8DXmjDxTq0RthN9FSSBqWlkIDya+U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:9d:5d:ff:2c:b5:cb:7d:9b:2f:f9:19:0a:cc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Apr 19 01:01:30 2025 GMT
Not After : Apr 20 01:01:30 2025 GMT
Subject: CN=935644988096c0a2d8a732b79337a6ab35ad2ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:21:08:2b:eb:7d:c3:b0:d8:29:5d:3d:b7:
42:6e:12:08:fd:64:20:bb:16:84:60:a6:2f:62:13:
05:55:95:3e:d3:6a:f9:fd:9b:c8:9d:0c:bc:30:8f:
f0:1b:38:3a:57:3b:e6:6b:7f:51:d3:9c:df:6d:58:
61:8c:75:21:7f:31:08:f3:c7:ad:84:e4:a1:ee:ba:
f0:f4:cb:14:9e:82:07:b4:ef:21:62:57:b0:51:31:
1d:6a:df:c4:95:94:b3:8f:92:f1:40:88:19:a2:21:
1d:6c:5d:48:75:67:3e:a2:7d:0a:c8:c4:b1:95:10:
2f:15:27:55:6f:c1:8b:46:39:0f:eb:cd:46:b1:7d:
29:ac:44:33:60:dc:48:33:eb:e1:15:92:20:3e:ad:
ce:b1:bb:7a:a8:44:2e:17:8a:4b:46:36:10:97:d1:
9e:cd:6f:6a:6b:35:8a:ed:c7:95:27:e6:02:94:b8:
91:87:33:2e:f0:6e:ab:26:68:c2:59:78:33:0d:91:
9b:44:a6:36:2f:f1:a0:89:98:de:7f:8a:64:6c:6a:
a6:af:77:f4:33:2b:40:72:41:9b:89:f3:fd:93:7a:
90:06:c7:cc:1f:78:64:44:e9:82:a8:87:fe:1a:3b:
37:00:85:5a:69:8c:29:9f:7f:6b:3c:6d:33:8e:8a:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:56:44:98:80:96:C0:A2:D8:A7:32:B7:93:37:A6:AB:35:AD:2F:F4
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bb:08:76:36:89:6a:65:ef:b1:00:f4:b7:f3:00:03:6d:1a:
79:6f:5e:25:f8:40:bd:c4:ef:90:75:bd:33:7c:aa:26:52:68:
af:c7:f5:37:ed:52:f9:ec:3b:11:3b:7f:a6:85:66:bf:fc:ea:
cb:ef:1e:1d:c7:cf:38:bb:9b:62:4c:26:cb:42:1b:36:98:04:
40:18:ae:ff:3b:98:e6:51:2a:2b:e2:bb:73:37:2a:db:85:30:
b3:f3:12:63:06:9e:82:b4:ed:b4:b1:a6:83:15:2b:54:45:1f:
c9:22:d5:e0:2b:ce:3c:32:4a:3b:d9:0f:bc:11:26:f5:dd:b1:
a6:2d:c3:f7:8c:23:ef:3f:34:f5:6d:34:dc:9b:c3:b7:dc:2f:
6b:3f:2d:2a:4d:8c:ad:e2:1d:3f:c1:9a:4f:01:3f:14:e3:0f:
af:1c:62:6a:b9:c0:39:bb:63:5c:a4:54:25:62:74:2e:2d:c4:
3b:73:01:9d:d7:8e:52:ae:2d:90:5f:0f:f3:97:41:eb:cf:44:
7b:1d:74:81:e1:da:9c:d4:15:bc:0e:cb:93:ac:de:2c:a9:f9:
43:be:08:8d:2a:1b:fb:58:ff:b3:81:d0:07:04:34:80:93:95:
97:08:9d:d5:fb:94:ea:ac:94:ec:23:fa:9a:cc:73:34:dc:d1:
97:27:f4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:03:14 2025 by rpki-client