Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
File: jYhinjx4EKzCKOF6GNtnlOvtgZM.mft (raw, json)
Hash identifier: R4b6GW6/7yadnNr5y2qESiYg+sUgfyFQmW5Am+NwkZE=
Subject key identifier: 38:44:3E:0E:B8:9D:62:63:A6:F2:F7:27:83:59:69:4C:EB:80:AD:DF
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial: 0196778D20301E10A7AFAAB3DB8FE2540466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
Manifest number: 11D3
Signing time: Sun 27 Apr 2025 14:00:59 +0000
Manifest this update: Sun 27 Apr 2025 14:00:59 +0000
Manifest next update: Mon 28 Apr 2025 14:00:59 +0000
Files and hashes: 1: ZBTvhiqTow3aNMb2aKed7aOmeLE.roa (hash: Hs63HPHm64omZRW3Iw+4oLNTtYpDyEs3J5diEPbkms4=)
2: jYhinjx4EKzCKOF6GNtnlOvtgZM.crl (hash: d3sdIPNiI7OUKXszkUIqCz5CfaFCXSTUM9vq058nPvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8d:20:30:1e:10:a7:af:aa:b3:db:8f:e2:54:04:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Validity
Not Before: Apr 27 14:00:59 2025 GMT
Not After : Apr 28 14:00:59 2025 GMT
Subject: CN=38443e0eb89d6263a6f2f7278359694ceb80addf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:72:0e:7b:b3:ce:3a:ad:81:9b:d3:74:ba:
a7:02:cd:8d:66:60:58:78:81:e7:ab:64:1f:f7:e2:
e2:13:49:4f:b4:4a:c9:b3:1e:d5:33:5e:85:66:1d:
b6:cf:fb:ba:28:2f:57:f8:5d:50:a3:fa:34:27:cb:
51:6a:bd:b2:28:59:b3:43:7b:bc:3f:4c:bf:63:9d:
a4:39:f8:b3:be:6a:59:1c:82:6e:b4:d9:8e:b2:08:
81:e6:44:41:54:8a:ca:23:e7:7d:98:26:80:c9:26:
43:af:fb:80:58:55:c9:b7:6b:38:96:f0:82:51:e5:
91:56:ed:65:33:11:f3:27:d3:59:11:1e:17:b0:1d:
11:70:71:2d:b9:a0:81:04:73:14:28:d7:7a:a4:bb:
7c:6f:f8:d6:ee:6e:1e:0f:4b:ae:9f:32:c9:9d:f6:
92:78:be:47:02:10:7a:62:50:d0:5e:43:5d:0d:38:
7a:5b:95:82:60:6d:d5:5d:29:60:42:73:15:a4:27:
95:45:76:c3:19:6f:49:f0:1a:4d:c7:34:5a:14:1e:
01:99:39:06:09:15:2c:7d:00:d8:67:fb:f6:c8:97:
f7:5f:77:99:3d:2d:dc:56:7f:1e:d8:9c:54:75:4f:
da:03:3a:17:83:34:41:3b:a6:a5:1a:b9:77:6a:3d:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:44:3E:0E:B8:9D:62:63:A6:F2:F7:27:83:59:69:4C:EB:80:AD:DF
X509v3 Authority Key Identifier:
keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:70:f0:4e:e8:9e:9d:37:e1:e2:ea:24:c0:f8:0d:3f:a7:ed:
d3:f0:30:d2:99:19:50:fc:ea:62:20:9f:ff:1d:e6:df:3c:41:
cf:1c:af:fa:70:46:3a:8e:29:83:b9:ca:04:06:bd:e0:d4:95:
be:87:aa:8e:47:cc:c8:34:62:64:cb:c7:2b:ff:42:c2:2d:70:
43:51:09:c6:9e:30:dd:8b:89:45:54:35:e6:fc:03:d4:74:9c:
75:ff:bb:9c:13:80:10:bb:c8:19:7d:af:c8:79:fb:6f:20:b0:
23:90:23:26:ac:2a:e8:bc:a4:4f:bd:0d:c6:d5:62:f3:64:ac:
7f:35:8c:a8:b6:78:f5:78:10:3b:fb:1c:98:83:16:8b:23:f8:
6a:0f:5f:71:32:3a:72:42:09:3d:60:f7:d9:7d:ae:37:45:dd:
05:a7:04:d9:60:35:05:1f:f5:4a:6e:53:0b:37:74:01:1d:0d:
f6:ba:8d:e1:93:e1:5d:02:c9:ef:e6:59:f9:b7:82:de:9c:3b:
d2:36:2e:62:22:9c:2f:d4:8a:2d:a1:12:22:9a:6f:67:73:a1:
b1:d2:32:9a:9a:e3:7e:08:a4:9e:f0:76:60:f3:d0:98:e5:e1:
c7:a1:ee:90:da:ef:79:45:c5:be:47:51:86:ee:1b:bc:a9:3f:
25:75:a6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:04:56 2025 by rpki-client