Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier: op5yUV5zO/If+It/ObI+Jfa/Xe4OeQxW1zhNG1dK5rc=
Subject key identifier: 72:71:08:B0:AB:D2:69:B7:38:E8:A4:D4:23:04:F2:A5:9E:C1:02:32
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 01967FB40469719C44F21A8E46E89157C8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number: 07D0
Signing time: Tue 29 Apr 2025 04:00:26 +0000
Manifest this update: Tue 29 Apr 2025 04:00:26 +0000
Manifest next update: Wed 30 Apr 2025 04:00:26 +0000
Files and hashes: 1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=)
2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: roNVaQuoIKf+nrenPp9nZIyUc19oplQ7iNMYCMkuE2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:04:69:71:9c:44:f2:1a:8e:46:e8:91:57:c8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Apr 29 04:00:26 2025 GMT
Not After : Apr 30 04:00:26 2025 GMT
Subject: CN=727108b0abd269b738e8a4d42304f2a59ec10232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:34:84:24:57:48:5c:2f:26:03:8e:4c:90:
4a:20:23:95:52:4b:20:1f:96:a9:0b:9a:02:36:6a:
13:cc:0d:87:a4:48:87:8b:e2:57:3a:4b:cd:ef:a0:
cc:91:10:f2:0a:85:ee:2d:a8:9c:59:8c:da:10:04:
56:3c:b0:0c:f3:24:c3:33:16:f7:b2:5e:43:8f:69:
d1:da:38:16:f1:34:a3:e0:40:f0:a8:7b:7a:9e:12:
00:8b:92:44:37:fa:f9:86:49:c2:f2:7b:d1:32:c2:
9e:78:b0:ae:b4:cc:de:c4:85:1f:64:6c:5e:81:0e:
2d:9f:a2:83:98:01:cb:f0:cd:8f:5d:0b:2d:31:b9:
1a:fd:e8:a0:c8:87:dc:f9:1a:8a:99:53:e0:e4:30:
57:45:de:ec:2e:b1:c7:ef:6b:5e:02:59:27:fd:79:
86:2e:93:9c:f2:c3:76:78:8b:45:61:5a:3d:2f:d6:
2d:5a:28:2d:5f:dd:48:52:d2:c7:fa:2f:e3:79:63:
25:bb:98:26:d0:2f:0b:98:17:70:91:37:29:b4:2b:
ab:92:15:85:e6:65:2b:ca:36:eb:15:3e:92:13:5e:
1f:64:91:1a:7b:59:14:ae:24:cc:68:cd:c0:c4:e6:
6b:ae:e9:d2:b6:19:ff:64:d6:d8:58:98:bd:ff:4d:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:08:B0:AB:D2:69:B7:38:E8:A4:D4:23:04:F2:A5:9E:C1:02:32
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:36:ea:37:4b:42:40:bd:57:5e:f7:c7:e0:d7:de:c1:f8:5e:
7c:a7:2e:4e:ef:62:bb:77:f3:e1:2a:07:44:16:af:24:ea:6c:
f9:e4:e9:97:d5:a6:7a:d6:e2:89:75:41:7b:4d:40:43:01:17:
27:ff:e3:05:89:4b:93:2a:5c:51:03:5a:5b:47:ac:8d:45:a2:
f2:8b:27:f3:5e:1a:33:c2:8f:ed:68:ce:7c:dc:a0:c9:47:26:
b7:4b:3d:90:2f:5c:7a:61:68:85:44:73:d0:eb:2e:06:2b:8d:
5b:a7:1a:31:75:1e:48:4d:0e:fa:8b:e9:2e:73:1e:04:7c:14:
7b:00:c9:1f:77:6a:94:b6:3b:ba:b8:9a:4e:37:af:48:31:57:
77:df:13:d1:9d:5a:18:f0:e2:ae:a2:32:31:c9:08:88:2c:9c:
bc:9f:c0:a5:0d:f5:88:4c:36:31:49:cb:95:8d:14:fc:6d:28:
c2:0b:55:9b:91:1f:4a:d1:70:c3:61:97:52:8c:ea:53:c1:80:
6d:17:92:51:78:89:1f:cd:e1:88:38:2b:bb:f8:02:b6:db:0b:
f4:54:08:05:90:5d:e8:63:bd:66:b6:23:35:3c:e6:7e:bd:ba:
bd:b2:07:33:33:f4:58:3d:da:fb:30:7f:a7:e0:32:66:62:42:
39:9c:ff:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:50:51 2025 by rpki-client