Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: mKqNITsohAuPvvsuZKnUEWOn7sYrDtY0pKyygDcDRtY=
Subject key identifier: 3C:97:00:21:F5:7D:48:37:77:6B:00:6C:9B:30:34:A4:34:3F:60:38
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 019681A266474D7BDFBBAC7EE599BB676A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 151A
Signing time: Tue 29 Apr 2025 13:00:25 +0000
Manifest this update: Tue 29 Apr 2025 13:00:25 +0000
Manifest next update: Wed 30 Apr 2025 13:00:25 +0000
Files and hashes: 1: 6xQfGOt_4QRi194ctt1Yy_IpWvk.roa (hash: Zeq/X7clOOaPFxvhWK8RPC5T2Ckw08yRW0DPBjzvh6E=)
2: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: GiDkVWmn+TvwbOANjTZxEjW7WbmRuCeQKxhlwDJujjc=)
3: nMDCAx4S7BvyRseCP1AtruhoXlQ.roa (hash: MzKXqieiYhEALeqU1AUv5CMaIkFtOJxEDtJDUquvAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:66:47:4d:7b:df:bb:ac:7e:e5:99:bb:67:6a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Apr 29 13:00:25 2025 GMT
Not After : Apr 30 13:00:25 2025 GMT
Subject: CN=3c970021f57d4837776b006c9b3034a4343f6038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:99:c0:97:a8:ac:1f:98:e6:d0:7b:a5:a0:
8b:46:1d:f1:19:ff:fb:99:fa:4e:f2:3e:3a:d1:f6:
72:ad:1d:4a:77:51:f8:56:80:ef:23:37:15:dd:d8:
93:b7:53:cc:df:5a:80:a9:c0:51:a3:cc:16:28:3a:
f2:ce:ce:e3:6d:32:b9:2d:22:dd:6f:8a:b1:b7:17:
3c:e6:be:78:b0:5f:97:67:50:c0:de:c1:cb:9d:af:
bd:4a:65:d4:60:8a:e3:2f:2b:de:ce:f0:89:89:61:
23:80:c8:85:15:69:f6:d7:5c:4b:e6:d8:71:1c:36:
01:7a:96:68:4e:4c:5e:b2:00:87:e5:6e:22:ea:ee:
35:ad:1e:83:8c:5c:d6:22:24:e0:25:d1:b8:e3:8f:
30:ac:29:00:98:e0:09:59:2f:b7:68:7b:98:9c:c0:
c1:5e:c8:a7:52:51:0a:f6:68:d9:98:71:1c:c8:fb:
b1:b1:7e:6e:6f:31:9e:4f:32:ac:ce:f5:d5:c9:24:
68:bd:7d:48:55:48:5e:96:fe:fc:15:9f:ab:38:18:
92:69:67:fb:42:36:51:58:1e:d3:1b:9c:46:93:67:
76:99:2b:9e:64:3b:3b:b4:d5:db:c0:ea:8f:00:d8:
4a:8d:89:b2:31:77:b3:9c:2c:26:57:44:fb:6c:86:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:97:00:21:F5:7D:48:37:77:6B:00:6C:9B:30:34:A4:34:3F:60:38
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:15:d3:d9:10:8f:c6:54:64:64:8a:4d:26:f7:0c:5a:84:86:
bc:2c:8c:6e:44:5b:9d:d7:85:a8:52:f8:5d:8c:80:d8:f4:6b:
42:e7:ad:71:bd:49:c1:be:c9:52:9a:bd:d8:c3:49:29:0c:b2:
22:41:6e:c9:f2:34:d5:24:0c:e3:a9:6d:a0:05:dd:9e:f9:08:
10:cd:2a:71:77:2a:65:ad:28:75:38:38:9b:2c:a0:56:43:d4:
1f:28:cb:eb:37:04:0a:ca:a9:2d:d6:a7:12:2d:86:04:90:58:
a9:de:17:b2:72:f8:d0:ca:c7:f2:9b:8c:7d:15:0c:b5:ca:9d:
6e:6e:28:80:f4:e5:99:28:7e:0e:80:a3:f0:73:7a:da:fa:68:
ee:7d:53:d8:86:7f:68:9a:33:c6:67:31:ad:72:b3:40:6e:f7:
df:2a:a7:a5:6d:30:9d:fc:aa:88:ad:b1:2b:7d:2b:82:63:e8:
95:33:02:54:b6:0d:fa:88:28:a8:1d:38:72:65:f0:cb:03:70:
d4:5b:25:e4:86:82:26:d7:aa:b5:13:49:99:df:e8:65:4d:75:
1e:e4:ca:b3:a8:f3:f1:5c:c7:eb:f4:98:ac:1c:20:44:30:8b:
a4:57:6b:f2:43:62:b0:ee:9e:14:6c:8f:86:40:8b:75:1f:5e:
11:aa:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:16:07 2025 by rpki-client