Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: FwW2ZztSoI876/wgNlm5yFoGcdd/0aR8IDCyq7qYEPA=
Subject key identifier: F4:64:A4:46:12:0F:5C:3D:AC:36:D7:88:27:1D:3A:CA:8B:96:72:86
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 019644B1DC632929BFA61C353D9F0329B488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 10DA
Signing time: Thu 17 Apr 2025 17:00:28 +0000
Manifest this update: Thu 17 Apr 2025 17:00:28 +0000
Manifest next update: Fri 18 Apr 2025 17:00:28 +0000
Files and hashes: 1: U32_Sc22WvD7Fv16LTG7iyrHJKk.roa (hash: HDMDgZcXReJr66n8qO4cBkBwOaGGNGz+zcAfJfe/HW0=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: XamOfj/9514HcnoGijFet3kDlLS8ZJK8jazbZQ2VaM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:dc:63:29:29:bf:a6:1c:35:3d:9f:03:29:b4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Apr 17 17:00:28 2025 GMT
Not After : Apr 18 17:00:28 2025 GMT
Subject: CN=f464a446120f5c3dac36d788271d3aca8b967286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:ab:c2:f7:21:96:90:1f:3c:4a:6c:b5:33:
b5:06:58:2e:4b:38:d7:69:07:41:87:b6:a1:42:87:
09:44:e6:0e:f1:72:c5:b7:34:7e:1d:22:d5:c9:5a:
7f:d1:a2:7d:b5:4b:c9:ba:45:4e:31:d5:cd:8b:8d:
97:3b:66:03:ec:01:0c:f1:3a:b8:8e:d6:77:63:4b:
79:73:cc:ac:5d:6c:19:e3:e4:e3:cf:08:b5:73:54:
3c:64:50:5a:d8:de:d0:b7:5c:7d:2b:de:bf:1b:58:
65:ce:65:7c:4d:3f:c0:21:f8:f2:e6:87:73:b9:ae:
cf:ed:72:59:33:07:a2:79:34:95:b2:68:ab:f1:87:
74:b8:c9:db:b0:1a:12:b5:59:81:1d:94:42:88:fc:
df:ad:54:fe:ff:30:3d:88:31:06:ff:76:e6:28:6a:
46:96:42:43:4b:d3:00:95:38:78:0a:ad:09:33:d3:
56:84:05:8e:38:68:1e:3e:a9:69:6e:cf:6c:fc:55:
62:16:fd:63:6c:9f:3e:3e:a9:72:43:7c:49:60:99:
d6:12:3a:67:68:82:14:07:b3:60:79:38:ac:14:e4:
b7:d5:f9:13:58:86:99:96:8e:19:7e:44:15:55:f8:
92:2e:5a:32:dd:4b:98:4f:52:1b:f7:12:c0:46:3d:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:64:A4:46:12:0F:5C:3D:AC:36:D7:88:27:1D:3A:CA:8B:96:72:86
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:58:33:6e:c2:68:95:8f:25:65:8e:65:be:fe:9b:49:e4:76:
7d:ce:74:6e:22:26:04:83:de:93:09:5a:65:bd:89:2e:5e:1c:
a5:54:56:b9:cc:22:b1:3c:40:15:b3:b6:0a:04:8b:d8:56:5b:
79:da:2b:33:f0:a1:54:3b:8a:95:c6:2b:15:d4:5f:eb:8c:f8:
6b:81:b4:a1:35:ab:9e:8b:de:33:de:3a:a3:bd:15:c8:6e:c5:
fc:78:e2:05:ec:90:36:5c:94:30:42:f5:c3:c5:4b:99:6b:16:
a7:3a:13:2c:06:88:ac:7b:b9:ef:b2:a9:8b:c5:56:2f:f9:40:
1c:5d:66:6a:66:58:dc:e5:92:ec:36:73:a5:40:df:d0:96:55:
ff:c2:ac:a2:48:da:cc:7e:00:1f:d0:51:e2:17:50:c6:6c:33:
1b:c3:d4:01:7b:d8:61:ee:c9:90:60:81:32:75:03:da:89:e9:
aa:27:f1:52:a4:ab:3e:8f:80:e2:63:db:46:9e:c6:a6:c5:32:
ae:93:65:60:17:d9:b6:0a:19:56:1b:25:8d:e7:89:c7:65:87:
4f:6d:c1:0b:11:55:16:b4:7a:f6:89:e7:81:ab:92:5b:9a:c3:
da:55:8c:99:ae:91:61:27:af:97:96:e4:f8:42:fc:ed:e5:f8:
67:59:2e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:23:18 2025 by rpki-client