Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier: fH9uFbnvCuK41Q0QRSoC+GIIzKYoWMfCC12rdgoPfio=
Subject key identifier: 13:D9:F5:74:25:4C:06:B2:D5:F5:DF:D8:F7:1E:DF:AC:CC:BC:AE:3D
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 01964D104B1252783809939394D4329ED67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number: 10DC
Signing time: Sat 19 Apr 2025 08:00:35 +0000
Manifest this update: Sat 19 Apr 2025 08:00:35 +0000
Manifest next update: Sun 20 Apr 2025 08:00:35 +0000
Files and hashes: 1: CS45ol94FSh_Y9jvauVA2QKhr9Y.roa (hash: t7+G1e511BkNswCIOIpGI7nXenT7KEeztvYMCep9OgI=)
2: jispgru9Q4t6sawE42wYgPOMato.crl (hash: 0xyaUH78togKSVI94ydHft7Z/BPKsOCPwGNNVT7KJmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:4b:12:52:78:38:09:93:93:94:d4:32:9e:d6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Apr 19 08:00:35 2025 GMT
Not After : Apr 20 08:00:35 2025 GMT
Subject: CN=13d9f574254c06b2d5f5dfd8f71edfacccbcae3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:0e:a5:bd:63:89:c4:cf:1d:29:ae:08:97:
b7:ed:66:74:71:43:0c:14:a0:47:4b:08:df:7a:b6:
13:25:bf:6a:29:25:d4:e6:b2:b3:d8:ef:4f:b9:f0:
aa:1f:a7:9d:97:ee:08:1e:d3:c0:41:25:61:34:44:
45:9f:5d:c9:75:84:9b:e1:7d:40:f3:d2:4e:40:1d:
80:ee:b6:dc:c0:4c:af:5b:43:33:ce:2c:42:06:c6:
89:4c:ae:83:81:69:11:23:41:8f:15:7d:c2:0d:8e:
ee:58:58:de:80:01:4e:a1:4e:ee:53:af:12:72:7f:
92:82:f5:40:76:a7:12:6a:8c:46:9c:52:6b:a4:d1:
7f:a6:47:54:18:ed:7f:27:16:45:00:8c:1a:1d:7b:
b9:eb:a7:e6:f3:e3:34:2c:20:7c:38:bc:36:07:13:
0f:c3:f0:ef:fa:73:07:2f:8c:1d:9a:76:1a:06:a6:
42:78:1b:7b:f1:9d:1f:09:5f:85:87:32:ef:7e:7d:
7f:71:1e:b0:f7:ec:5b:31:12:00:56:39:53:21:99:
c8:d1:84:f3:ca:b6:a7:86:80:f7:a8:d3:f3:57:9c:
36:7b:9d:e1:49:e4:b0:78:50:d3:eb:4b:84:3f:08:
4a:7d:c7:0b:50:17:b0:ab:18:55:75:25:2b:61:ce:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D9:F5:74:25:4C:06:B2:D5:F5:DF:D8:F7:1E:DF:AC:CC:BC:AE:3D
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:32:15:a9:8b:21:f7:84:23:0d:3b:83:3c:91:23:2c:7e:6e:
eb:99:9f:54:8f:20:e1:d3:87:53:be:0c:44:79:59:c0:16:38:
bc:a1:cc:40:e9:5b:0f:cd:d7:ef:a6:a9:64:d3:ef:1b:2d:30:
79:9d:8a:43:d9:be:9a:ee:0e:cc:de:95:91:27:d1:b9:65:be:
d8:67:b7:3a:d8:72:72:84:9c:93:d5:65:55:97:34:a0:18:01:
c7:9e:72:d4:2d:ce:58:ab:54:00:d4:2f:25:5e:c6:46:63:ab:
05:a9:c3:1a:dc:72:94:d9:e2:9d:28:af:f3:97:c6:5e:4a:4c:
9c:28:86:67:6f:00:8e:50:3b:ad:27:f4:80:87:aa:0b:e8:38:
35:55:de:75:84:b9:8c:8e:0b:75:be:c5:4f:fa:3d:15:39:13:
57:ef:8c:82:2a:bd:5a:ed:88:a4:e6:c4:63:48:2c:df:92:c7:
87:e3:81:9e:f4:02:a6:0f:b4:9b:5b:4b:86:af:ed:a8:5c:e2:
76:db:14:c4:30:c5:e8:04:b5:4c:8f:6e:6d:dd:d7:2c:48:af:
71:a6:96:b5:80:e0:ca:21:37:aa:56:f4:68:70:a7:16:ab:3c:
83:f7:5f:7f:a6:a6:c8:83:f5:14:54:75:8b:15:6d:b0:c0:00:
9c:9b:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:12 2025 by rpki-client