Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
File: jxdSJfOGzpgBGfaYhPm-fGorOzM.mft (raw, json)
Hash identifier: FpYUSmVjNgrh/CIHv5kNy3YL+mU8jd6gzX5Hy4Fck1Q=
Subject key identifier: 4E:F7:41:51:73:2B:C1:85:98:45:94:4B:45:A2:60:D3:4C:A5:8F:23
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial: 01958B843C5BFFF069CAB8653B7CB978F0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
Manifest number: 1498
Signing time: Wed 12 Mar 2025 18:00:54 +0000
Manifest this update: Wed 12 Mar 2025 18:00:54 +0000
Manifest next update: Thu 13 Mar 2025 18:00:54 +0000
Files and hashes: 1: 0wXhq5qyXfkxahUnRpc42r86Obg.roa (hash: iJgORc5+XQ2Zcc4gwCZH8+de662Bp1/JSMzKqQ8qz0w=)
2: jxdSJfOGzpgBGfaYhPm-fGorOzM.crl (hash: txhknZL+Tiol4WdWfrHtTRZ7LwR/nF4ELoYPgWciFVw=)
3: wqj7UB7atlo4UtptagO8D4QVpv4.roa (hash: ylN4r0wdJFKjI8FqYNMjzdJ19nbuA10o9E8/faFnnKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:3c:5b:ff:f0:69:ca:b8:65:3b:7c:b9:78:f0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Validity
Not Before: Mar 12 18:00:54 2025 GMT
Not After : Mar 13 18:00:54 2025 GMT
Subject: CN=4ef74151732bc1859845944b45a260d34ca58f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:6c:f1:39:8e:6a:11:dd:43:8f:29:07:30:
b1:9b:ef:e5:b3:87:70:e0:48:0e:0d:f3:48:9f:a7:
da:0e:34:76:1c:e7:81:f7:8b:30:9f:1c:de:8c:66:
5e:14:b4:56:a2:68:fc:23:c2:eb:3a:82:99:89:0c:
f6:2f:e3:c8:bb:21:ae:e0:b5:79:96:86:25:8e:37:
f7:9a:eb:dc:64:6c:36:22:db:bd:af:77:04:d9:79:
cb:54:61:b1:43:06:a0:28:31:4b:00:61:8f:b8:45:
38:49:f2:db:cb:79:c2:45:2d:a6:e5:c3:38:d7:c6:
54:38:cc:62:dc:78:92:42:c4:4f:84:6a:9a:7e:2a:
e6:fb:32:b7:79:38:3e:6d:6d:ee:a3:f6:20:46:b7:
66:17:26:68:3e:55:a1:e2:2b:9e:90:8f:09:d3:7c:
df:69:1a:e8:8f:68:24:52:29:26:cc:e2:5f:80:d4:
70:13:41:5f:71:a5:bb:f0:f8:f1:9c:ca:ef:30:b6:
d0:69:b0:bb:d4:e2:e8:f7:f7:97:8d:02:9e:16:65:
bb:0c:53:68:72:f2:d8:84:fc:31:87:e6:31:b6:82:
30:c5:23:cc:f4:3d:5b:fe:02:76:f8:ca:4a:54:ef:
44:ab:f7:6e:ac:54:a9:cd:9e:75:54:59:6b:7a:38:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F7:41:51:73:2B:C1:85:98:45:94:4B:45:A2:60:D3:4C:A5:8F:23
X509v3 Authority Key Identifier:
keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6c:19:fb:c4:7d:e8:0e:31:df:9d:ad:a7:f1:b8:5c:79:fd:
b3:a3:a2:27:f5:82:9c:e9:f0:4f:fe:1c:67:96:ea:5d:19:8c:
fd:a1:9f:83:56:60:c9:70:b6:0e:72:6b:af:05:56:7a:0c:4f:
9f:e8:7a:8f:ec:3a:88:bd:8b:f7:b8:41:79:21:3a:ed:47:a4:
38:cc:6d:dd:53:82:2f:d4:3d:b7:6b:e2:55:c6:18:47:77:50:
25:fd:cc:7a:03:e3:e0:b4:10:30:1a:8b:cf:5c:fe:ab:34:76:
b3:16:51:1e:d2:fd:c9:28:93:a8:90:18:64:0c:fb:6d:ad:32:
b5:d5:1a:c5:be:5a:63:68:bb:71:36:69:c0:d0:bf:49:38:e7:
1c:30:d7:74:0f:bd:52:46:0b:91:22:1e:a9:64:26:59:bb:33:
4a:e5:86:59:00:ec:3c:ec:e2:54:f6:28:82:ec:00:ca:de:05:
fe:2f:df:3e:ad:93:d7:ae:92:8d:ed:ed:b0:36:73:26:b5:7e:
07:40:94:2b:a7:ce:27:67:f4:88:64:94:47:f1:04:53:55:36:
d8:2d:31:f3:8e:6f:fc:b6:1f:8c:82:32:e9:1f:a1:fe:bd:49:
03:c1:36:0a:89:93:af:48:8a:8c:a4:b9:ae:85:a6:f0:63:2d:
0b:79:55:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:58 2025 by rpki-client