Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: xMKbnTYMn7P8PTE935NGCRnWDm1WVaxPhlZ0hlIRlMc=
Subject key identifier: 1C:B2:3B:C4:A9:9E:48:0C:18:A6:9B:2B:4B:20:ED:EB:5B:56:91:73
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 019681A32A2461C8EBB2D06102F40E6F2D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 1413
Signing time: Tue 29 Apr 2025 13:01:15 +0000
Manifest this update: Tue 29 Apr 2025 13:01:15 +0000
Manifest next update: Wed 30 Apr 2025 13:01:15 +0000
Files and hashes: 1: 0UHdcMJlJhG3oZKabqSdR28w2GU.roa (hash: c4S1i8VzMNkAak+YpBSVo9bfa8POuJI9pEw8vgNIjtg=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: tgC8ljzk1WrSlr2hmtbF/jZAxzVTpFhXm9dOAF4guI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:2a:24:61:c8:eb:b2:d0:61:02:f4:0e:6f:2d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Apr 29 13:01:15 2025 GMT
Not After : Apr 30 13:01:15 2025 GMT
Subject: CN=1cb23bc4a99e480c18a69b2b4b20edeb5b569173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:43:bf:ad:d6:42:b3:e3:ae:49:8c:65:1a:
e7:1d:c0:9e:3d:20:7f:0d:e1:66:a7:9b:0d:97:5c:
80:92:95:5c:e2:57:fc:14:55:53:46:ff:c7:41:72:
06:1c:28:dd:90:89:06:5f:8b:7a:53:a0:10:0f:07:
76:53:4b:2a:75:aa:33:3b:62:f6:fb:1b:ca:a8:2b:
53:ca:9e:7c:d1:5b:a8:30:4d:9b:39:e9:43:3e:9b:
2f:a1:37:1a:2c:7d:0c:7b:63:1c:35:6c:14:fd:a9:
16:e0:c9:6b:b0:37:66:05:4f:2f:a4:5e:c3:28:7a:
12:54:97:6f:32:74:bc:d3:df:3a:eb:65:3d:09:c3:
e4:23:11:6c:7b:24:16:09:cb:8b:bf:5e:8c:3d:87:
6d:99:f3:2d:24:93:2e:fa:12:44:d5:10:7a:10:b3:
ce:26:0b:72:26:76:81:d8:e2:e8:8e:17:3b:ef:65:
28:9d:fd:91:2e:ec:12:4d:f5:04:45:db:a3:da:6a:
1d:1b:89:01:73:11:a9:61:92:dd:3c:d0:1d:59:3c:
59:35:b3:a8:02:04:93:ac:56:ab:ab:88:be:9b:44:
95:cc:ff:62:3d:6c:cb:a7:f7:c6:24:06:56:4c:84:
98:1b:01:58:91:9b:41:54:40:02:e3:3f:48:0c:57:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B2:3B:C4:A9:9E:48:0C:18:A6:9B:2B:4B:20:ED:EB:5B:56:91:73
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6f:59:52:4c:f3:c7:9b:18:ed:24:37:f3:61:5b:c1:60:f6:
8a:ff:58:03:a0:8a:68:a3:0b:9d:2a:53:87:2b:a6:f4:0f:93:
03:75:6f:70:98:5d:24:ad:8a:c7:23:80:58:09:3b:3b:c6:96:
08:58:be:b9:d5:8e:d9:9c:82:8c:64:50:71:54:a9:a2:93:33:
72:53:66:c8:c9:18:50:f4:88:2c:39:31:1c:38:23:44:1c:39:
70:33:ba:c4:81:bc:93:7a:61:bf:78:21:0e:b4:92:c6:c9:29:
a9:5d:61:a4:90:7c:ee:08:db:f9:fe:15:97:35:00:fd:47:02:
89:91:96:73:53:ed:e1:b3:5b:cc:39:ce:ab:5e:e4:cb:d6:ac:
48:5f:02:c5:a7:a7:b2:52:e8:cb:c5:bd:5a:62:66:70:94:03:
b2:be:3e:32:60:d9:ea:a9:5d:5a:5c:0f:1d:82:79:3f:c1:ae:
a1:a7:d1:65:0a:0d:d2:f7:1b:f7:b2:0e:8f:93:cc:71:26:17:
43:98:83:af:dd:98:83:48:92:4e:40:8b:5e:bc:80:25:f0:0b:
4b:71:d7:7c:20:67:50:be:c3:50:fe:1b:d8:35:0e:56:33:9d:
7d:f8:20:74:d2:e2:34:5a:a1:7a:ed:87:1d:9b:65:16:e6:d6:
4a:af:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:28:54 2025 by rpki-client