Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
File: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json)
Hash identifier: dX2ZlsSlt0wwIhyLPsYKai0EjvMRVmz7+zMTo8+y3lg=
Subject key identifier: A6:39:F4:25:A9:B4:6B:21:D9:C1:A6:DD:88:03:0E:4A:30:80:B9:2D
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial: 01958B84BAC0F0934E94ED570F131C141E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
Manifest number: 111C
Signing time: Wed 12 Mar 2025 18:01:26 +0000
Manifest this update: Wed 12 Mar 2025 18:01:26 +0000
Manifest next update: Thu 13 Mar 2025 18:01:26 +0000
Files and hashes: 1: 2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa (hash: 0bQuiH2aHkDAf1rtJEQ6AsC0osUnBUOUl2vPm0WmrnY=)
2: IfAzv2xamXQmXpt0GBd13kn7nCM.roa (hash: jbzJm1UfZ+dpmS3iaSw271pkPBOa1r0axTofijj8Fjs=)
3: jPqjPZ927oU6pe2k5ljy1515_Bc.roa (hash: 1wwmQ4EiI2fcY7sas0ylQShSCsBsDc+FRheBv820+D4=)
4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: zTRr3Z5l5A7xuq1xFbYAKUr3NSqkvirvjZvo9M/aNUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:ba:c0:f0:93:4e:94:ed:57:0f:13:1c:14:1e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Validity
Not Before: Mar 12 18:01:26 2025 GMT
Not After : Mar 13 18:01:26 2025 GMT
Subject: CN=a639f425a9b46b21d9c1a6dd88030e4a3080b92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:e3:9e:eb:b3:91:a7:00:94:1f:7b:a2:3e:
bd:a7:58:b7:21:56:f1:80:ea:14:b7:98:12:9c:bf:
ea:88:20:27:8f:90:df:e5:7c:0c:f8:e8:80:f2:2a:
60:f9:8b:63:a0:16:6b:9c:d1:c5:2f:40:f5:78:ec:
04:29:d6:3f:c5:ac:9a:f0:c0:9d:ef:ff:cc:a4:0d:
46:46:84:39:ae:6a:1f:4f:93:09:cf:5a:24:a8:16:
7d:c6:c2:03:a5:aa:ec:7b:50:5e:ab:e0:d9:98:44:
56:d4:4f:09:ad:c2:74:4a:fa:5b:83:0d:78:b4:d8:
f7:31:b2:fe:4d:b7:82:e2:35:1d:0c:30:4a:cc:eb:
83:ae:bc:96:6f:a3:a8:3c:a9:ef:ef:99:f5:95:a3:
d7:18:ec:95:f8:79:79:78:59:68:73:69:c1:1e:de:
8b:35:87:2e:78:c7:e7:b2:10:2c:3f:58:7c:e8:b9:
85:fd:d5:c5:8a:17:a3:c2:d7:98:34:1b:17:4d:be:
98:36:06:99:a9:79:92:73:dd:77:35:11:06:2b:ec:
91:72:36:6b:59:ee:45:2b:b4:16:7b:60:e2:5d:56:
70:56:aa:d7:09:6a:a4:98:22:53:7b:69:63:88:6f:
b3:07:94:22:05:40:50:3f:80:41:b5:81:e1:69:12:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:39:F4:25:A9:B4:6B:21:D9:C1:A6:DD:88:03:0E:4A:30:80:B9:2D
X509v3 Authority Key Identifier:
keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:60:1e:d5:83:ec:56:b5:9f:ce:a4:4f:e4:e9:7c:d2:4d:9f:
66:d1:3b:92:46:5c:89:94:7e:66:40:b9:d4:84:7c:34:a8:28:
f2:8e:2e:25:ff:c4:a4:f5:58:50:58:4c:ec:61:56:3b:21:ab:
eb:4e:b0:2c:44:78:a9:95:f2:35:ea:52:bf:8e:6e:dc:2f:c4:
ab:ef:3e:de:d3:21:6d:57:7a:46:80:9d:2c:ed:75:bf:10:95:
76:bc:77:e4:27:13:70:94:3d:7d:85:d6:80:6d:a4:b2:f9:fd:
53:7c:10:51:da:0a:cd:b2:f9:e1:60:c4:ad:5c:61:d5:7d:09:
b1:2c:d3:6a:04:ce:13:6a:17:15:a6:b3:ab:c1:37:72:b9:a1:
d1:72:66:48:6e:00:10:21:e3:75:bc:e3:bb:72:af:8f:f9:1d:
e5:7e:fa:83:7c:3c:59:48:14:57:0b:02:d6:b1:e6:cb:45:5f:
7f:f5:ac:ab:e9:9c:fb:f3:92:61:88:cf:72:13:5d:5e:86:00:
cf:29:45:85:be:42:a9:4a:91:18:5b:18:a7:51:14:87:e5:5a:
3f:df:2f:fa:95:74:7d:72:7e:34:cb:5a:18:da:db:56:0b:d5:
cb:7f:65:e8:5a:06:cb:c0:3d:95:da:aa:97:df:97:ee:27:0f:
9f:0e:73:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:53 2025 by rpki-client