Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
File: jqzH87IYxJLYjb68nNy5otLTDtE.mft (raw, json)
Hash identifier: DVgN4O6UM+nAEjbPrmNj0e7t4CggClZLjnZUE3XGV84=
Subject key identifier: F7:E7:E9:82:8E:58:D1:CE:03:B8:2C:47:B4:59:76:CD:37:FA:7A:FE
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 01967F7D04F7506CBA4BEE1E66F2D7319C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 03:00:21 +0000
Manifest this update: Tue 29 Apr 2025 03:00:21 +0000
Manifest next update: Wed 30 Apr 2025 03:00:21 +0000
Files and hashes: 1: G4xGjeiK9NbX0jXJY8uDkRmJuDc.roa (hash: muHuLGPiPatokQGw15YR2MNayDycTrh2aeAcpqtHkYI=)
2: _bjBL5LK2WVAfL5nxIuCTdAEYdU.roa (hash: hu7dwrJP9WhWK3glmNV0xBWx3TcYlk14ctZGu4bZyLs=)
3: jqzH87IYxJLYjb68nNy5otLTDtE.crl (hash: M7IQ3ON3qJOgevzLSVUlSfvpV2b6ZXoVqIkm7PnfouU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:04:f7:50:6c:ba:4b:ee:1e:66:f2:d7:31:9c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Apr 29 03:00:21 2025 GMT
Not After : Apr 30 03:00:21 2025 GMT
Subject: CN=f7e7e9828e58d1ce03b82c47b45976cd37fa7afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:fc:7e:d0:80:79:23:d6:36:a9:ed:cc:05:
c8:86:0d:74:29:a1:ba:eb:17:87:d5:e6:85:ac:01:
3d:51:36:92:f6:e7:45:bc:48:cf:56:4e:b6:dd:8d:
4d:94:23:63:39:bd:dc:69:54:58:d4:ec:68:21:d7:
f1:de:4e:db:e9:d3:1d:6b:83:67:cd:d9:f3:f6:58:
46:93:d8:c1:7e:44:85:11:2b:db:58:59:62:df:e6:
75:af:45:06:17:70:ac:2b:38:0a:ac:f4:ca:48:47:
13:95:df:99:6b:01:2f:1c:14:f7:cd:68:34:89:bb:
86:76:19:19:98:5b:02:32:68:73:13:ee:4a:1a:bb:
5d:bf:1f:54:18:28:ef:f4:8e:32:76:a1:01:c7:ef:
10:2a:d3:f4:f9:db:49:7a:c9:ae:54:85:1f:23:51:
1c:2e:d4:e3:f1:7f:ac:82:f5:eb:ca:8a:da:69:6a:
3a:4c:e4:a4:0a:b5:a4:da:d2:01:c3:1b:0b:d1:ac:
0c:b3:3c:c7:83:89:fa:c0:be:ca:17:fc:3a:4e:c2:
60:5c:d6:5c:33:95:db:d3:ce:74:b8:6d:f8:9e:61:
7f:31:64:ab:bd:97:70:82:d1:63:ca:96:cc:0d:1f:
fa:a7:63:6a:29:26:a2:7b:93:88:51:25:44:4d:1d:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E7:E9:82:8E:58:D1:CE:03:B8:2C:47:B4:59:76:CD:37:FA:7A:FE
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0e:28:84:80:3d:42:ea:c9:d2:65:60:3d:93:e7:30:e0:f4:
93:37:f9:2f:64:61:7a:a6:a7:1d:54:2c:e5:a3:5d:86:09:23:
33:65:88:81:db:5d:49:b9:30:1f:81:d1:3e:1c:d6:3c:9a:a9:
03:6b:b8:a1:8a:9c:e3:43:fc:fd:50:25:81:c2:fc:39:c7:68:
26:7c:57:d3:73:ae:f5:90:c3:d5:51:1d:17:76:00:cb:7e:9b:
ab:6b:47:f2:ce:f8:e4:1e:38:2e:9e:d0:d6:c3:69:eb:d1:af:
2c:0a:dd:66:2d:be:6b:95:2a:d8:d4:f6:ef:2f:bb:6a:a0:9e:
77:34:1c:63:d7:2d:84:ed:29:f0:b7:aa:26:79:5b:59:5b:b0:
0c:32:d0:88:dc:a4:82:d8:41:bc:74:89:23:18:55:0c:37:e0:
6c:64:51:13:41:c7:41:f5:37:26:6e:80:69:16:e1:0b:5e:32:
ca:9a:a7:97:c8:83:cc:91:4b:53:b7:49:7d:69:b5:3f:b5:6d:
82:5c:10:6c:38:e6:d1:95:9b:0c:72:75:1c:22:0f:3e:81:18:
eb:6b:9c:cb:48:42:d5:0c:7c:a8:cb:6e:67:37:14:29:bd:b7:
0f:8e:74:9a:e3:ad:ae:bc:e9:17:1f:8b:42:b5:ca:c4:ef:fa:
ce:c3:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:25:25 2025 by rpki-client