Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File: jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier: ZJLK48zoTa03KlISkKYoz9ToYdr44rEBlhrRweSUgGo=
Subject key identifier: D1:F5:5A:65:FA:58:BD:8B:22:B1:D9:7B:88:55:6B:AB:01:28:78:DD
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial: 01967B69C6C46EA53827CFD30A7A6B51CB57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number: 0106
Signing time: Mon 28 Apr 2025 08:00:51 +0000
Manifest this update: Mon 28 Apr 2025 08:00:51 +0000
Manifest next update: Tue 29 Apr 2025 08:00:51 +0000
Files and hashes: 1: DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa (hash: 4MMSMGpFYTj64gvYvAI9aZYJdovl51CVqQfi4na/C5A=)
2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: ib55+iQl7Z0jtE38oez9+yfgRNEo8sscnUQqfArNCFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:c6:c4:6e:a5:38:27:cf:d3:0a:7a:6b:51:cb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Validity
Not Before: Apr 28 08:00:51 2025 GMT
Not After : Apr 29 08:00:51 2025 GMT
Subject: CN=d1f55a65fa58bd8b22b1d97b88556bab012878dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1e:8b:b3:60:ae:80:0d:65:33:ed:24:df:cf:
8f:c6:e3:cb:1a:6c:de:4f:dd:b7:93:0d:3f:d1:73:
58:56:95:09:67:4a:da:6a:60:89:bb:d2:ba:89:b8:
cd:2a:db:c2:67:3d:3b:bc:84:86:9e:80:ad:f7:d1:
11:5f:b7:c5:6a:1f:6c:83:3c:b3:25:32:37:2d:95:
42:a5:1b:14:50:f3:69:3f:e9:f8:14:61:60:4a:1e:
f5:f7:b0:bc:4c:53:65:24:39:d1:d7:af:8f:8c:ac:
75:6c:f1:4d:75:dc:23:cc:09:20:2f:ed:b8:b8:25:
9a:26:05:20:34:ff:54:c9:01:4a:41:3d:62:5a:00:
21:19:dd:dc:3e:e8:e7:e3:ca:65:d6:e4:7b:e7:1d:
83:84:11:cb:a7:e3:b6:a9:46:66:28:25:87:4a:d1:
a8:37:77:bf:2e:1c:26:dc:61:89:ab:ba:7a:8d:fa:
ce:f9:c0:dd:1b:ab:44:bc:ec:92:44:33:ff:66:9c:
d0:91:eb:58:ca:a7:62:5e:9c:3b:d5:e3:cc:8f:98:
3c:5c:68:e3:57:15:f4:41:35:a6:51:bd:47:0f:4f:
dd:a7:4d:24:ea:3b:92:c3:d2:60:18:ed:8e:86:24:
6b:f9:9f:77:a5:ff:70:63:ce:2f:54:e0:66:bc:45:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F5:5A:65:FA:58:BD:8B:22:B1:D9:7B:88:55:6B:AB:01:28:78:DD
X509v3 Authority Key Identifier:
keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ce:ea:e4:13:9e:7b:09:1e:20:4c:33:d8:ad:ce:a0:4b:51:
03:fc:9f:ca:60:c6:27:8c:64:be:4c:3a:1e:cb:51:a1:7c:3f:
ee:ed:2e:38:b9:cb:c7:7a:9d:4c:b8:6c:3b:67:b9:d1:7d:f1:
c2:92:eb:86:50:75:a0:4c:c1:71:92:3b:0a:bf:81:61:d5:d9:
ba:66:ed:c0:ad:8e:d2:35:e3:38:a1:14:fa:79:2b:43:13:36:
a3:fb:f5:84:66:d2:fd:60:21:f1:a8:a1:d3:38:40:da:9f:46:
a3:23:8d:de:f8:dd:69:5a:0d:66:29:4b:2a:47:85:71:e8:70:
89:f4:38:ea:28:ce:05:12:df:d4:38:cf:0a:b6:fb:73:c7:df:
9c:39:68:0d:b9:0d:32:d6:88:3a:dc:72:06:79:19:81:02:83:
79:2b:57:6d:e5:3e:d2:76:3e:85:6e:f4:1b:f8:d7:10:2b:f9:
4b:cc:6c:65:f9:67:4a:70:f4:f4:7f:28:47:d5:27:5d:f3:f2:
b0:be:fa:6e:5e:11:c4:3b:32:67:a8:62:b6:af:da:60:de:21:
ed:f1:98:9e:ef:c5:0e:a1:0f:51:bf:de:43:ee:7b:af:1e:53:
fd:af:e8:b4:11:2e:e5:f4:5a:0c:f2:39:ab:6c:5b:31:59:8f:
7e:65:10:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:25:19 2025 by rpki-client