Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File: j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier: uO0iIm8BkjBT8/UzvTII3ZT694DaFVGfbTc2tUBmym4=
Subject key identifier: 4A:B1:C2:9E:DC:BB:79:F9:8D:EE:32:55:7B:CE:68:68:D5:96:93:20
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial: 019683FFDA2891E8D3545942B8C63C26B755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 00:01:44 +0000
Manifest this update: Wed 30 Apr 2025 00:01:44 +0000
Manifest next update: Thu 01 May 2025 00:01:44 +0000
Files and hashes: 1: DSv-iSXA3wX9nDodPQXtYNJDYLQ.roa (hash: rLpTuxbTjwB1kMP3m7oQHgnYLtGjlIXTCssqGQyXU8s=)
2: abJHppOXbNRTL5BB9_dNqlKen94.roa (hash: yyWwgZa5PLui39TWj5tUmAj6wvoO0anzfsZ9NlvSNwI=)
3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: yKOWitXDIKkPreybzLzPFcFdqdGR0jMKxM3tnURe90I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:da:28:91:e8:d3:54:59:42:b8:c6:3c:26:b7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Validity
Not Before: Apr 30 00:01:44 2025 GMT
Not After : May 1 00:01:44 2025 GMT
Subject: CN=4ab1c29edcbb79f98dee32557bce6868d5969320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:7e:05:9b:80:60:8c:1e:78:56:53:95:de:
fe:22:35:fa:4d:6b:b5:89:82:92:23:86:24:00:32:
28:e2:0e:c6:5c:79:cb:e5:ae:1b:d2:96:e4:82:69:
e9:71:3d:4e:0a:86:41:0f:fc:5e:b6:cf:d3:37:9f:
bf:92:95:c8:1b:86:95:35:49:a9:cf:76:d7:01:87:
7b:e4:b6:48:af:56:a3:4c:5d:74:07:0a:30:3c:c5:
5a:a7:aa:d3:ae:7a:11:55:52:af:71:21:e6:c9:36:
c8:92:bc:2b:57:f2:c6:93:6e:9f:50:79:00:5a:ef:
9f:7c:ce:48:53:c0:3e:6e:26:f4:42:07:7c:1b:ba:
cf:db:61:62:ab:43:58:0b:c8:32:66:2e:3a:db:fb:
b4:df:9b:8d:a9:fb:a3:cb:59:50:a6:10:c1:68:ed:
07:d5:c7:dd:ce:9d:59:7e:22:88:99:35:5a:4d:74:
78:ff:4b:55:07:7f:e2:09:77:1c:b4:bb:dc:ed:2b:
44:4c:c8:1f:3e:42:58:c1:4f:f2:d4:9e:42:b0:e7:
d0:04:0e:bc:4b:33:d2:42:7a:10:85:4c:b8:65:ae:
dd:3f:a1:13:f1:6d:fc:3d:c1:6a:da:17:ff:53:b1:
ae:7f:7c:0f:89:4c:1a:3f:87:3d:dd:89:40:ae:b0:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:C2:9E:DC:BB:79:F9:8D:EE:32:55:7B:CE:68:68:D5:96:93:20
X509v3 Authority Key Identifier:
keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3e:71:09:25:71:e7:52:e4:a7:12:e4:f0:89:46:4f:1f:07:
f9:cd:0e:3d:31:cc:b1:a4:c4:39:21:09:68:c8:2f:e1:c0:99:
5f:e2:06:89:8a:a1:48:a5:f9:a2:e9:61:74:84:0e:05:dc:aa:
5a:73:5d:5e:18:da:97:d8:62:74:0e:00:dd:e8:10:01:72:fd:
36:8f:4f:0a:3e:39:57:2d:89:8a:dd:79:d4:db:69:8e:9a:d8:
55:82:4c:d9:92:0b:11:7b:1f:2f:1b:3b:5c:3c:f4:ca:4a:d5:
12:d6:f4:28:b3:f5:86:7e:b1:29:02:c9:fe:e7:d2:f7:3a:65:
a4:6c:ce:36:22:33:6c:4c:44:e9:9c:84:52:fd:18:d5:7b:ed:
1b:82:72:22:cd:71:70:a2:0f:c9:53:66:2b:8a:22:3c:04:ef:
1a:7c:7f:d7:19:f6:a0:90:49:4b:68:d8:40:00:a5:4b:6c:dc:
93:33:ae:7e:4f:35:b6:08:02:af:72:fd:8e:e5:c8:0a:71:5d:
c6:5b:12:3e:67:0c:d0:7c:4f:82:ae:2a:0f:75:72:29:75:bb:
5f:2a:6a:70:0b:66:de:bd:d0:0b:48:53:db:77:d7:94:1a:a2:
33:56:0e:6e:05:a3:c3:a8:25:0c:13:30:86:5a:94:ca:4b:58:
a4:1b:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:27:12 2025 by rpki-client