Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: mPSamh4paEgQX3aEihUXkzfRfAK1CHr3ELsMoaFDSGY=
Subject key identifier: CC:4B:C9:89:2D:81:8C:00:21:57:F6:8D:89:1D:B7:75:D2:0D:5D:A8
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 01968BB86EEE1E8D5B18E43BA5D711C130DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 12:00:42 +0000
Manifest this update: Thu 01 May 2025 12:00:42 +0000
Manifest next update: Fri 02 May 2025 12:00:42 +0000
Files and hashes: 1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=)
2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=)
3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: 3BTGEvJ48Iw8uQIOrhfY80tL/Z8YjKNzXXDOAkJs7mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:6e:ee:1e:8d:5b:18:e4:3b:a5:d7:11:c1:30:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: May 1 12:00:42 2025 GMT
Not After : May 2 12:00:42 2025 GMT
Subject: CN=cc4bc9892d818c002157f68d891db775d20d5da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:48:49:f1:b7:16:64:5a:ed:d1:1d:e1:c9:d4:
80:66:3f:8b:bc:cc:6a:2e:ef:b0:2b:d9:4f:41:c5:
45:b0:31:1e:f6:e6:ed:b4:80:b4:21:00:cd:79:3a:
a5:29:e6:63:b3:47:e4:6c:b6:57:9f:15:b2:eb:5a:
80:bc:40:9d:43:71:f7:3d:e4:af:0c:1f:e2:15:f9:
a0:47:4e:c7:f6:5d:53:e2:5a:22:f0:55:ff:22:44:
9a:39:4b:b0:55:ef:94:02:b9:95:dd:f8:44:c0:21:
4e:d1:6a:b2:a4:a7:2f:5b:6f:34:f6:fa:2f:a7:2a:
77:7a:df:92:93:84:84:20:f6:93:38:db:20:c7:48:
bb:0d:43:d2:2e:11:fa:cb:20:5b:31:f3:74:af:ef:
fc:49:c5:67:b8:3d:50:9c:7c:e9:fb:48:a3:16:08:
0d:63:f1:3b:c4:ae:93:6c:22:46:76:b6:b8:02:8a:
50:0c:48:7b:fb:b6:d6:45:d8:94:f5:4c:dd:42:84:
38:b4:47:14:95:2c:de:ba:bd:e2:50:8f:7a:00:44:
f3:11:6a:93:ae:d6:0c:ae:d8:76:b7:5e:e4:b4:46:
82:25:6d:8c:d9:a8:ad:13:17:c0:bc:8c:dd:d2:1c:
fe:b2:47:c5:47:11:cd:b8:f2:05:f7:c0:f8:6a:da:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4B:C9:89:2D:81:8C:00:21:57:F6:8D:89:1D:B7:75:D2:0D:5D:A8
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:25:c9:f6:1b:88:a4:84:8e:0b:50:26:4f:1a:a8:e3:e0:cc:
60:27:bf:56:f8:80:b8:23:a0:8a:36:92:d7:c3:9c:77:98:cf:
81:a6:6a:d0:40:26:5a:3b:d0:0d:80:e0:ef:51:6c:d9:f2:9c:
76:9f:59:a1:c0:1d:56:7f:e4:3b:a6:3e:3e:92:12:ea:df:d2:
cd:64:0a:e4:d6:e8:08:eb:60:e3:a5:56:03:1f:04:7a:74:01:
23:10:d5:18:af:19:a3:fd:08:c4:aa:ef:60:ca:00:94:59:cd:
ad:0b:99:b4:91:b8:50:6e:b5:e7:a1:19:c5:6e:7c:0b:ab:6c:
29:ed:98:b7:47:74:5c:a1:d3:2a:22:03:0d:2d:07:02:f7:6b:
f4:3d:97:e7:83:53:5e:0e:56:a5:a4:1a:d1:cc:d7:37:a0:35:
cf:04:88:05:a5:c3:09:a1:cf:5e:00:38:28:21:b1:e6:6d:da:
bf:a4:b6:ba:b5:4f:ea:d6:18:4b:8b:4c:40:ae:95:14:cd:58:
b8:46:55:bb:b8:50:5f:81:9d:51:fe:dd:1c:d1:25:0a:1d:a1:
45:c0:59:e1:6a:7d:f9:00:9f:77:61:84:bc:75:ab:92:5c:7f:
d1:a8:78:82:05:b3:19:08:5e:66:c6:b5:ff:6c:bd:f8:7e:6d:
eb:dc:41:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:06:35 2025 by rpki-client