Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
File: jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json)
Hash identifier: dSvpaYrnKijo91soiTG4UCzIeksmG1L8p1xjG38OX2k=
Subject key identifier: 83:1B:D0:D8:BC:86:4F:3C:FE:20:A3:B8:26:5B:1F:5B:E2:06:01:8F
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 01964F6C37CB705FF9E6F312138D0DD5D044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
Manifest number: 11C1
Signing time: Sat 19 Apr 2025 19:00:14 +0000
Manifest this update: Sat 19 Apr 2025 19:00:14 +0000
Manifest next update: Sun 20 Apr 2025 19:00:14 +0000
Files and hashes: 1: gEYhgGeiO3CvO7L61btMp6FMtUk.roa (hash: t7slYmPenDTs/a8GzhHgCqRYrDeOIVUNfoJ1LIoBLf8=)
2: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: XdAEQ5O6Rdb5lC8IyR6DeXveKpBmC6ibyVmAOAEMkDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:37:cb:70:5f:f9:e6:f3:12:13:8d:0d:d5:d0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Apr 19 19:00:14 2025 GMT
Not After : Apr 20 19:00:14 2025 GMT
Subject: CN=831bd0d8bc864f3cfe20a3b8265b1f5be206018f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:43:eb:4a:2d:f4:41:97:e3:13:e1:c2:3b:
33:e3:ae:5c:c6:ed:0f:f2:db:5a:02:2f:bc:10:5c:
74:37:ec:a3:b4:7e:c3:10:49:a8:cc:a6:9f:bc:16:
8c:87:60:60:cb:ba:20:d8:99:a4:59:fa:ab:90:4c:
6e:60:ed:e8:0d:ba:26:7d:bf:c3:30:b9:6c:58:e2:
bb:68:6b:ff:f6:77:72:22:f2:4b:e7:59:04:6e:bd:
07:50:d6:9c:88:05:c2:c5:0c:0c:ba:ec:37:2c:70:
11:db:02:de:97:f0:1d:3f:b8:6b:bc:01:d3:86:b9:
d4:be:5e:78:1f:e0:1e:ef:91:66:68:41:87:80:64:
95:d1:42:e3:1b:ff:e9:14:bc:a5:89:ef:e0:be:40:
9d:3c:fd:37:43:48:77:d8:4f:ba:e3:b3:52:bf:2e:
90:49:8c:09:5d:3f:c4:05:04:c2:da:ba:0f:b7:1b:
2f:4e:4b:70:23:aa:72:26:d3:68:83:83:0d:d9:e2:
74:b6:0c:85:31:29:94:11:04:ef:7f:3d:37:9a:24:
a4:88:8d:dc:9a:95:77:b9:aa:4d:a9:da:7f:02:e2:
8b:bf:07:94:3b:4e:a3:86:77:26:14:36:9c:2e:df:
d8:6c:8d:72:9a:5d:cf:31:35:f6:91:13:b1:8b:d1:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1B:D0:D8:BC:86:4F:3C:FE:20:A3:B8:26:5B:1F:5B:E2:06:01:8F
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ec:78:81:7c:c2:0a:b4:eb:f9:15:ec:4d:c6:1d:3b:f4:b2:
c5:85:86:41:30:af:ba:58:6a:d3:a3:8f:c8:7f:66:af:f9:f8:
75:4e:9c:8a:25:d4:80:f7:cc:af:b4:1f:bb:61:f4:ce:76:87:
41:a1:43:72:46:5a:e6:71:a2:cb:9c:25:65:17:f3:bb:c1:81:
6b:8c:27:e3:b5:74:5e:a2:aa:20:00:99:d3:21:7d:91:82:9b:
0e:e1:c0:f7:cb:7b:53:35:05:cd:7f:9a:de:6d:15:45:84:4b:
95:66:76:8f:93:16:37:dd:ea:1b:ba:84:da:bf:86:52:77:ee:
6c:72:4d:7a:90:9a:c9:8b:f0:f6:14:5d:e9:23:34:e5:7e:ec:
8e:e4:c4:c9:ff:d9:5e:1e:93:83:8d:fa:7d:cd:d4:70:d8:c8:
a9:76:f1:71:04:70:0b:50:34:d6:c7:41:7c:da:6c:89:d2:2d:
df:26:c9:14:3f:8c:3c:35:42:2e:6c:94:b8:80:98:5d:0f:6e:
ed:10:ff:37:93:dc:a1:22:ec:d5:fb:e8:09:39:0f:68:54:9c:
0e:31:3e:1e:33:0a:3b:5d:3d:ad:5f:30:14:e3:bf:7c:11:94:
ae:cf:fb:dd:c1:62:5e:a8:ba:36:29:14:93:86:81:9d:c7:8a:
a9:e4:fb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:57:26 2025 by rpki-client