Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier: 84LGPl8iqm3TEApcrJ2AHmXVAKz6uqME+WnQT+IkBIA=
Subject key identifier: 6F:F0:9E:15:63:66:34:23:15:39:7A:6B:D4:69:07:F5:D1:AD:ED:45
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial: 0196816BB00DC75C1FBE7846319DB0FB94D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 12:00:40 +0000
Manifest this update: Tue 29 Apr 2025 12:00:40 +0000
Manifest next update: Wed 30 Apr 2025 12:00:40 +0000
Files and hashes: 1: Gx-ly2juqLldMOF7Xn_MRXBNcbk.roa (hash: vl2kBJo+wEJWBn3iWXf8tuoZvKzL8W4USM3kT2sx3NA=)
2: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (hash: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=)
3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: B/5i3eksukVBftuLhJm903jrQzlOEo9AXIyPMAFpBjg=)
4: w-squKUM0pkBXWozorbDSe8zF0U.roa (hash: LdeqPdzvqZ0x54H5/mODQ0shRZ6NKgUzNLLxUs7yuRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:b0:0d:c7:5c:1f:be:78:46:31:9d:b0:fb:94:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Validity
Not Before: Apr 29 12:00:40 2025 GMT
Not After : Apr 30 12:00:40 2025 GMT
Subject: CN=6ff09e156366342315397a6bd46907f5d1aded45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:e1:cb:08:0f:6e:52:44:93:03:60:d6:3a:
a1:c4:07:eb:f6:8a:99:cf:02:f9:0a:fc:e7:39:d5:
59:ee:92:65:6d:21:75:00:8f:79:e5:2a:bc:c6:86:
4b:cb:6c:ce:7b:71:f1:8a:0a:7f:0e:3f:50:39:21:
56:9f:ea:3a:49:6c:63:a8:52:6f:06:ba:7f:36:9c:
7f:8f:d8:76:d5:f6:0b:3f:bf:9e:2f:f8:1b:fb:4c:
39:94:dc:a9:39:d3:2c:08:d9:cd:d7:52:dc:d2:5e:
4d:8b:09:8a:ad:0c:f7:cc:25:a7:d1:97:62:de:37:
19:1b:33:4f:1f:ab:17:0d:d7:70:fe:1b:c2:b4:26:
8f:af:e1:8c:ae:18:3b:00:66:bf:08:d7:13:f6:58:
c8:c7:2a:c0:d1:cb:c9:22:ca:ab:a2:ed:08:32:d4:
2a:ab:84:51:85:6c:c8:7b:a3:47:75:e6:f1:0e:a0:
f9:d6:68:26:9d:df:e0:69:c5:c8:31:c2:3c:95:9d:
94:68:80:7e:0a:d2:75:92:1a:d6:a0:d9:f9:87:4a:
a4:3c:9a:d7:01:7c:aa:fa:a4:60:0b:0b:00:15:c8:
32:f8:d0:df:97:28:e0:c3:be:29:6a:66:64:26:71:
0f:8e:a6:d4:c2:f9:6b:08:58:0c:a9:53:44:25:26:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F0:9E:15:63:66:34:23:15:39:7A:6B:D4:69:07:F5:D1:AD:ED:45
X509v3 Authority Key Identifier:
keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e9:e1:67:0b:c3:e9:ae:18:34:36:4c:aa:ba:b4:a1:58:bc:
e3:78:e2:5f:e6:fe:f3:77:e4:08:08:ab:72:2f:93:36:3c:eb:
92:f6:56:ea:7b:e3:a5:b2:cd:7e:8c:20:3f:7b:3c:61:c3:c0:
d8:48:9b:43:2f:98:f2:fd:2a:2e:1f:80:d2:97:31:02:15:ce:
11:35:72:0d:82:c6:38:36:62:a6:11:e1:e4:ba:4e:9c:3c:e5:
03:34:ab:5e:c5:46:df:87:aa:d7:49:0c:51:2d:ef:7e:b8:2b:
98:eb:45:0a:8e:b5:a7:e8:bc:ea:0e:93:81:74:aa:32:fe:fd:
11:62:46:4c:8f:70:5e:23:c3:3d:e8:4a:99:22:02:ba:0d:13:
d7:45:ae:f3:49:ac:d7:e7:d1:fd:9a:35:1c:c7:b1:7d:e7:62:
d4:9b:df:ba:07:d3:8d:9c:48:36:bd:03:83:a0:f2:ba:d0:ca:
35:ec:1b:d4:a5:a1:e7:7f:69:24:cf:07:b9:38:03:25:e7:e2:
6b:c7:68:ff:ba:15:57:b6:4b:5a:c2:ce:93:5e:20:a7:23:ca:
64:bc:f3:b6:5f:8f:30:05:e6:69:a8:1d:1a:66:44:a4:d6:e3:
f8:9f:3c:7c:49:32:a3:d3:5a:83:15:75:99:a4:22:46:1a:42:
e6:6e:91:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:55:58 2025 by rpki-client