Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: cpGZPhqqy4tUdKkBfJ45GmRPEuSegrd+2SCVKJY+79U=
Subject key identifier: 92:61:DC:42:A9:6D:B5:98:17:69:F6:4C:A1:9F:55:83:70:F9:0A:2A
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 019678688C8AA077D0910FD5D5FBA36BE5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 038D
Signing time: Sun 27 Apr 2025 18:00:39 +0000
Manifest this update: Sun 27 Apr 2025 18:00:39 +0000
Manifest next update: Mon 28 Apr 2025 18:00:39 +0000
Files and hashes: 1: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: +qkIvQao1bhIUltm7Hqp5CYSYEyyjLQLZ9+JZSiuJ78=)
2: s8IxW5tuKoaeGci5PMMsvkBpqVA.roa (hash: r/ncpxBVtrl7LSWT4Ir7OLnEXZq1sFDkQ+rRRvqTryo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:8c:8a:a0:77:d0:91:0f:d5:d5:fb:a3:6b:e5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Apr 27 18:00:39 2025 GMT
Not After : Apr 28 18:00:39 2025 GMT
Subject: CN=9261dc42a96db5981769f64ca19f558370f90a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:5c:12:cd:9c:05:40:4b:01:01:dc:c7:00:
f1:04:f0:1a:b6:2c:f2:41:b3:70:13:fc:ec:b8:63:
c3:69:c0:4a:f8:13:e7:a0:f7:6b:93:dd:06:cd:ac:
01:37:21:8a:63:e5:d7:7a:9d:16:14:bd:af:5a:ec:
92:da:37:46:82:c7:12:02:56:07:6b:42:d4:98:22:
f5:98:d7:c7:8d:7c:2e:55:fc:93:0c:c6:a4:ab:fb:
f6:38:1e:7f:52:02:76:74:e8:04:0d:ab:17:3b:23:
1c:3a:1e:3a:1e:e1:43:01:5d:1e:60:ff:a6:2a:7d:
19:8c:4e:fd:c6:30:99:29:a3:85:1f:6c:2e:b0:16:
e9:2e:6f:9d:c1:e1:67:b0:a7:56:05:30:f0:8d:ea:
8c:dc:4f:87:f9:5b:ca:b1:55:b1:f2:e6:88:c1:d5:
4e:b5:1f:ca:fc:9c:4c:08:50:dd:3c:36:b7:50:d3:
1d:72:27:a9:b5:34:50:b9:ee:f1:a1:2a:62:cf:37:
29:02:e4:ae:1a:10:40:2d:ab:58:ee:b5:b2:14:9b:
e3:1d:dd:7e:ab:71:a4:d1:d0:cc:b3:6c:52:1f:d8:
27:0f:ea:52:50:f8:ce:d0:86:73:80:d6:bc:81:d8:
b3:6e:7c:45:9f:fd:a8:e4:2f:83:c4:9b:a9:0c:47:
47:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:61:DC:42:A9:6D:B5:98:17:69:F6:4C:A1:9F:55:83:70:F9:0A:2A
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:11:0c:0d:83:5d:d1:63:cd:ee:3e:98:82:2f:fa:2c:24:bc:
05:bd:93:25:63:9e:99:af:17:2f:7a:4d:b3:4a:6d:25:3b:d9:
04:80:7d:c5:c3:d3:3b:a8:a9:f8:91:c5:a3:81:93:3e:2d:cf:
72:49:61:a2:e6:be:48:23:ca:01:98:6d:0a:ea:48:69:e3:7d:
13:67:0c:85:6b:4a:2e:85:01:35:a2:1d:13:09:c1:bf:9f:55:
68:52:63:0c:7e:49:fe:fa:0a:96:f0:4a:07:8d:de:be:86:ff:
13:36:33:90:82:ee:75:e6:2d:76:36:6e:5d:04:bd:4c:ba:f0:
5c:42:a4:6e:4c:a4:8b:f1:f2:b6:61:53:ac:80:2e:88:c2:a8:
aa:5c:77:b6:64:a9:b9:60:de:7b:c7:24:b0:67:15:45:1b:4d:
a6:53:47:48:af:4f:e3:0b:06:b7:e3:7f:f6:4c:08:70:11:75:
d5:27:02:66:12:72:ad:21:ea:42:82:1d:cf:97:f0:cf:70:f1:
d4:90:6e:58:bd:88:b4:46:ba:2a:0d:2f:0e:56:c4:b1:b7:b9:
4a:bc:68:8c:c1:39:40:68:30:d4:2c:fe:af:71:e3:36:15:90:
c1:65:23:a9:46:d2:3c:4b:40:0c:c7:4b:16:9c:1b:87:45:c3:
f4:90:64:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:17:25 2025 by rpki-client