Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
File: jTQC6uAnq82SYJDMDd7_gKq5LDU.mft (raw, json)
Hash identifier: M/Fpa30oUjmsWC/nqU96D69LzIpYUWyVY7baWag8QIw=
Subject key identifier: 84:40:18:F1:6D:ED:11:D6:9C:52:78:C6:D5:B1:2A:C6:F9:99:83:47
Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Certificate serial: 01968AA5A9909B19DA8D7D2BF720CF6997F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
Manifest number: 06B3
Signing time: Thu 01 May 2025 07:00:34 +0000
Manifest this update: Thu 01 May 2025 07:00:34 +0000
Manifest next update: Fri 02 May 2025 07:00:34 +0000
Files and hashes: 1: jTQC6uAnq82SYJDMDd7_gKq5LDU.crl (hash: LV5xsOBrcv+7k4gOHGCbUt1dKTeMyS5EvMrY4OSUV2o=)
2: rOnq86dV2BXa4tQU-vqcTAdf2VM.roa (hash: nUAAXheN4rY8m+/9k6ldoGDPKA5ssts8flzhVGQ+fHk=)
3: sExC59C2viDQKDDYj8CusH8J5Lg.roa (hash: cOWFAprr/QGP2vQ6eCaPmf7CyWdmOoqQ/ISFnDFZTmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a5:a9:90:9b:19:da:8d:7d:2b:f7:20:cf:69:97:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Validity
Not Before: May 1 07:00:34 2025 GMT
Not After : May 2 07:00:34 2025 GMT
Subject: CN=844018f16ded11d69c5278c6d5b12ac6f9998347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:b3:6a:ea:fc:e0:50:bb:33:f3:ef:90:11:
a7:03:26:97:26:db:42:f7:b2:ae:8e:b0:33:2c:0e:
9c:44:6a:6b:3e:69:13:0b:ee:77:e4:59:43:09:4c:
f1:29:46:22:73:b4:11:42:9e:8c:63:50:f5:40:b9:
ed:c1:35:cd:b2:42:52:82:63:ea:48:f8:fa:9d:45:
ec:91:96:0f:1e:78:03:66:b0:08:31:73:4e:d4:78:
6b:91:92:eb:55:be:1b:a9:9d:80:ba:c4:02:a7:a2:
bd:31:81:4e:8f:ec:9a:db:52:34:03:c8:c7:47:3c:
d1:3b:3a:28:89:94:a6:4b:8d:d3:6c:07:00:23:ee:
f0:50:99:cb:8b:50:06:be:b7:a6:ce:7f:d5:72:d9:
00:ee:74:cf:ab:57:0b:f8:80:96:0c:68:b8:bb:53:
bf:d6:fe:2f:3f:6c:8b:8d:7f:ee:ac:46:c3:b5:8e:
12:aa:61:d5:aa:9f:6f:f0:a2:bd:d1:6a:2a:5e:10:
99:c3:b0:0a:75:17:76:63:92:86:2f:81:f7:15:ec:
2d:df:44:81:06:74:3c:54:2d:45:3d:f5:e1:ba:bd:
0f:b4:90:e3:f5:22:52:df:3e:a8:df:73:87:b9:36:
5b:9d:21:26:47:e6:63:8f:d9:ad:0b:1f:c5:71:a8:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:40:18:F1:6D:ED:11:D6:9C:52:78:C6:D5:B1:2A:C6:F9:99:83:47
X509v3 Authority Key Identifier:
keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:49:3a:e5:cb:2a:72:6c:a0:03:74:ca:00:f5:b1:79:5a:e4:
6a:8e:ad:c2:13:b3:be:53:44:84:c0:89:98:35:a8:a3:da:6c:
b3:e8:9e:01:85:3f:4c:76:fb:8a:3e:db:00:1b:c7:6f:6e:96:
17:e8:76:9b:68:53:70:df:0e:d9:9a:04:b8:64:bd:5f:07:2f:
d9:ab:53:60:ba:29:e3:ae:6e:0d:96:b1:26:c2:6b:bf:cb:dd:
e8:a8:f8:a2:3c:4a:20:05:2f:4c:2c:54:31:aa:91:19:ec:a3:
0f:ee:6d:a9:8c:72:3c:1b:f2:22:d7:3c:9e:d0:11:89:cb:f6:
a4:9e:47:06:80:7e:77:e4:f2:61:21:c0:1c:fd:2c:cb:1f:ff:
d5:98:40:af:70:46:29:06:84:ef:d4:01:c3:5b:89:a3:b3:de:
ef:ed:78:1e:3f:c2:d5:94:f6:fe:e5:6e:18:56:23:30:93:76:
9e:82:2f:a2:d1:f9:68:94:7a:ea:96:16:26:c8:4a:2d:a9:5a:
f2:3b:8c:56:2f:8f:56:d0:fd:8c:b4:a6:3f:4a:3c:2c:ca:a1:
2d:22:ba:89:75:b4:93:94:fa:3f:5f:85:f4:55:b8:a9:42:cb:
73:a7:b9:fe:6e:95:17:64:76:50:72:14:2a:07:d4:69:4d:f0:
dd:a9:a7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:41:54 2025 by rpki-client