Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: x8RBgxdQ7cmNrvwYrVgQbOMx5/l423hHg3saxg92YSo=
Subject key identifier: 94:0B:26:EA:D6:CE:19:ED:E6:AC:76:65:AF:7D:72:5B:3F:D2:13:1A
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 019649D803E73B40CB55B68041C2271F9C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 088E
Signing time: Fri 18 Apr 2025 17:00:15 +0000
Manifest this update: Fri 18 Apr 2025 17:00:15 +0000
Manifest next update: Sat 19 Apr 2025 17:00:15 +0000
Files and hashes: 1: hFUKeYVJZQidWIC3boS5B2MmNkQ.roa (hash: orWyk1nD9ke9cd+4s/S82r9At33d+yTlOwM1l+sczkc=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: z8yHfRkVaG1271NxUNSqlt+cTDivg0BZMQS0Bv6uVCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:03:e7:3b:40:cb:55:b6:80:41:c2:27:1f:9c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Apr 18 17:00:15 2025 GMT
Not After : Apr 19 17:00:15 2025 GMT
Subject: CN=940b26ead6ce19ede6ac7665af7d725b3fd2131a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:6c:9c:77:95:e3:4a:f0:db:3e:49:a9:8f:
71:9e:af:d6:65:f2:53:93:44:65:2d:05:39:78:f1:
81:7e:09:f9:ea:22:52:f5:ca:f8:6b:3e:96:d9:40:
6d:18:8a:a5:82:fd:28:fe:82:73:fb:bb:26:02:41:
40:f1:95:b6:e8:e9:48:50:7a:15:a1:e9:1f:ac:a8:
73:cb:cf:ce:2b:1d:1e:ef:6e:ea:8f:07:89:b6:7b:
54:30:2b:47:71:23:c6:1f:dd:c4:28:65:ec:dc:5d:
b8:10:3e:40:5e:89:5d:71:77:1e:f7:a6:3f:0b:dd:
3e:7d:8b:b8:34:8f:71:90:4c:d4:03:f3:06:d0:3f:
2f:a5:49:67:a1:8f:4e:c6:1c:01:7f:db:ef:42:de:
1a:ff:5e:f5:9d:bd:b8:80:e0:eb:3a:42:e3:36:f2:
28:c3:85:b7:9f:42:c4:bb:67:e6:8e:a2:49:54:68:
dd:c1:a5:25:3e:c1:c4:a3:8d:bd:7a:ac:d4:6e:9f:
0a:6f:c8:14:c8:71:08:e5:15:a2:be:a4:99:8b:b8:
e5:6b:3d:03:cb:78:38:b3:0b:30:0f:0d:fc:08:f7:
fd:04:6f:c0:60:27:13:7d:f7:fd:f0:6d:45:62:37:
46:7d:02:55:be:69:18:74:18:44:81:4e:4f:50:72:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0B:26:EA:D6:CE:19:ED:E6:AC:76:65:AF:7D:72:5B:3F:D2:13:1A
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:99:c1:1b:35:1d:21:2f:e9:ef:64:af:51:eb:b0:91:4a:1d:
f8:9c:b0:d3:a0:fe:13:05:4c:f4:1c:d8:a0:2d:eb:cd:94:48:
c7:be:bf:11:97:0f:a2:0d:84:2c:ba:3e:91:c7:b3:38:2e:4e:
36:39:20:03:77:8e:be:93:f1:e5:ab:a1:b0:78:53:6c:33:f2:
a8:ae:7c:97:d3:bf:00:bf:80:98:59:ef:6e:64:99:4f:ff:6a:
58:f7:42:cf:1b:9e:42:44:da:4e:e9:96:15:26:e2:cd:9f:cb:
08:f7:37:6b:18:49:22:5c:cd:01:ab:74:de:6d:dd:af:29:3b:
c1:8b:f5:b5:ca:ab:1e:d9:17:13:c5:69:2f:7d:8b:81:57:25:
ae:3f:e3:a4:7e:86:c4:69:c8:54:1e:0a:f0:d5:d1:d2:40:35:
4e:70:9b:68:b3:ec:1c:40:4e:ff:3a:27:38:16:71:45:5c:cd:
b5:3a:a6:e7:59:eb:33:21:88:f2:5f:73:fb:92:9e:1e:dc:39:
c7:d7:81:e8:90:a2:92:ee:60:e2:75:9b:a0:8d:f1:35:c7:62:
47:63:3f:f2:89:f7:12:2a:55:21:ee:b9:e0:70:43:4a:f8:74:
23:cf:0b:cb:71:67:77:1d:7a:be:8e:86:f7:97:1a:c0:a9:d5:
83:fd:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:16:05 2025 by rpki-client