Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: jNSbKBno1FfuXO56NYywFtQPlHCNUyaD0BV5zdLAVxc=
Subject key identifier: D3:FE:0D:A1:9B:66:C3:8A:E4:1C:AC:60:54:39:5A:C3:96:E5:C6:9A
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 01968ADC439C42D0615F1AEC8023825A3CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 10C7
Signing time: Thu 01 May 2025 08:00:13 +0000
Manifest this update: Thu 01 May 2025 08:00:13 +0000
Manifest next update: Fri 02 May 2025 08:00:13 +0000
Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=)
2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=)
3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: ZhkYTQsXjbLrQWVG+10Q5ilL/s2jVuzFeKzsS5y34Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:43:9c:42:d0:61:5f:1a:ec:80:23:82:5a:3c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: May 1 08:00:13 2025 GMT
Not After : May 2 08:00:13 2025 GMT
Subject: CN=d3fe0da19b66c38ae41cac6054395ac396e5c69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:e6:99:29:d7:10:a7:66:f0:e4:48:ce:14:
f6:f9:2e:70:23:2c:90:c2:3a:25:fb:e1:17:07:87:
29:21:83:80:51:c1:5e:03:a2:80:5d:15:0e:a0:6e:
0f:2b:55:64:9a:c2:8d:f6:50:3d:f6:b6:ac:2c:e6:
0b:92:bc:8f:e6:dd:00:50:e8:cd:41:af:80:1e:47:
be:33:ce:20:a5:3c:94:38:ab:67:ee:73:5f:e8:38:
ac:d0:a9:9c:c5:50:8d:7e:87:ed:b8:c7:01:75:58:
a8:3b:a6:96:33:0a:e8:68:63:bb:97:c8:67:c9:fe:
d9:83:42:cb:af:b1:e1:6c:91:a7:88:f1:53:36:38:
1b:d5:ef:90:97:c1:2a:88:82:9c:68:3c:1e:11:1c:
23:3b:dc:fc:71:c0:df:7e:69:35:98:4b:35:56:ba:
af:a9:ce:b7:86:44:68:dc:54:16:12:5d:c7:e9:44:
6d:fc:9a:3b:48:ae:c3:ed:6c:0b:76:de:32:ab:d9:
5a:bd:0a:96:aa:3a:d5:1c:e1:3b:f8:a8:e6:1b:bd:
e1:dc:68:55:ef:17:82:09:89:fe:2f:62:fc:24:4d:
b0:94:d8:a7:ec:31:ef:52:8c:fa:aa:a9:c3:d2:97:
4b:58:1a:fd:f4:60:92:cf:08:f7:09:94:78:ec:68:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FE:0D:A1:9B:66:C3:8A:E4:1C:AC:60:54:39:5A:C3:96:E5:C6:9A
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c3:61:86:20:f4:35:e2:ff:60:dc:b6:0c:9c:1d:e3:9e:0d:
21:75:67:50:e9:93:fc:d4:5a:01:db:bb:8f:23:40:10:37:30:
ec:e5:da:d2:15:1e:8b:e8:34:57:38:88:fc:12:7e:76:3f:b6:
0e:92:85:51:8e:56:be:dd:c6:b9:82:a9:8d:9e:e5:6f:d5:a4:
37:4f:f4:13:0c:b8:55:ef:2b:90:a6:e2:03:f5:2f:d7:91:4b:
95:c9:38:37:3c:a3:b7:18:85:dc:f6:83:4e:ba:b4:b6:1c:a0:
7f:f3:a6:70:a6:22:4c:f9:0f:ec:d1:a6:e2:49:83:b7:ac:a8:
4e:96:aa:bd:2f:cd:af:3f:fd:95:ce:8d:d3:94:47:b1:9f:4c:
8c:72:8a:fc:32:ab:54:4e:2c:28:50:da:f2:51:9a:6a:ed:c8:
43:17:9e:cd:d6:1c:ac:3b:8d:10:78:f2:30:da:c5:de:95:c5:
24:62:2b:30:af:92:ad:87:67:9a:aa:ef:67:4a:57:c0:04:8a:
17:78:bb:dc:c2:35:c8:4f:ec:3f:09:e4:f3:a0:ff:4d:09:a3:
59:5a:29:1a:05:9f:df:99:61:7f:09:8e:8d:cb:31:5f:65:29:
a7:d8:16:b3:cd:7e:bd:c4:75:b4:e4:c5:9b:11:8f:c4:2c:97:
99:40:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:03:58 2025 by rpki-client