Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
File: jQtYT2A1_loofFZ_HjhUuPvCoMI.mft (raw, json)
Hash identifier: YOb+J3CUxCw0KOjQcTnLpD9+rWT1UME7G7HVlhRZ3s0=
Subject key identifier: 58:34:A1:D9:A2:93:87:8F:76:44:D5:EF:36:49:A7:20:34:F0:B8:CB
Authority key identifier: 8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
Certificate issuer: /CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Certificate serial: 01967E3352EDB816FBBDC1AF9EDEB2FDE9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 21:00:14 +0000
Manifest this update: Mon 28 Apr 2025 21:00:14 +0000
Manifest next update: Tue 29 Apr 2025 21:00:14 +0000
Files and hashes: 1: 4QNIL4c6Gz_sxHoIV5bmO3J-yRY.roa (hash: hUEgN9PKhux4KaNWV6X/MwNUuCaPOczFnXagh0lAR1c=)
2: jQtYT2A1_loofFZ_HjhUuPvCoMI.crl (hash: 24ZHnGifoNqjk+xZgtGKyDQpbxvAFQewDsOx/P6eet0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:52:ed:b8:16:fb:bd:c1:af:9e:de:b2:fd:e9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Validity
Not Before: Apr 28 21:00:14 2025 GMT
Not After : Apr 29 21:00:14 2025 GMT
Subject: CN=5834a1d9a293878f7644d5ef3649a72034f0b8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:19:99:ce:e3:c0:60:aa:ab:37:36:d1:dd:
d6:38:2f:9e:c4:ee:6b:06:54:dc:47:62:49:8d:56:
d1:51:ba:e8:a1:d3:e4:f0:38:24:3d:68:31:06:1c:
82:0c:f8:7a:7e:c4:95:9f:2d:75:4e:aa:51:09:d0:
93:1b:ad:7d:81:f5:1e:1c:e3:fc:bf:5a:ad:63:1f:
ac:00:57:e1:6a:7c:42:34:2f:e7:b9:77:35:1c:ce:
72:b4:d2:c2:2e:d0:31:06:ab:ea:de:6a:70:52:31:
3f:75:df:68:19:c1:1f:5c:37:69:db:6e:a3:fa:ad:
76:cb:8d:44:df:69:75:f6:d5:8e:f7:86:d3:27:ea:
f6:1c:78:21:0e:42:c2:46:5d:f7:6f:0f:5b:04:87:
74:ff:d3:d1:c6:ce:ad:57:74:98:5e:b3:f8:08:71:
57:3e:a7:b8:ae:be:c4:c6:c9:55:39:17:03:a0:de:
f5:25:3a:b4:b3:bf:d7:d9:34:5c:46:3b:23:46:5f:
0c:5a:ff:94:65:86:3f:70:0d:9f:8a:be:f0:14:da:
c6:d9:fd:de:f7:31:c9:99:56:5e:35:00:f0:8a:3e:
c5:be:f3:ca:1a:36:ee:dd:35:86:3c:b4:27:5e:d7:
64:f1:3a:74:72:fe:4e:4e:a3:f1:c6:f6:3b:87:bb:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:34:A1:D9:A2:93:87:8F:76:44:D5:EF:36:49:A7:20:34:F0:B8:CB
X509v3 Authority Key Identifier:
keyid:8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:93:05:b3:6b:af:1a:45:b7:13:c2:74:b8:46:b4:b4:06:bd:
b9:69:69:30:09:57:17:0d:e2:62:6c:de:af:ad:7a:71:b3:30:
c0:6e:d3:37:c7:14:ff:c5:29:37:09:61:cf:87:50:de:32:33:
e8:fe:bb:9a:11:f7:fb:9f:3d:2e:df:5f:f7:d6:24:a5:28:10:
38:da:c4:dd:54:4f:ec:23:cf:fd:cb:5c:03:8c:f5:a4:34:4d:
3e:2c:af:b7:70:61:c8:4c:48:8e:cf:e7:4c:6f:8f:d6:e1:ce:
3c:5c:bf:ea:03:d8:99:01:70:c2:1f:c9:06:8c:3f:ca:34:e4:
a8:db:7f:f0:3c:89:0b:e6:3f:09:dd:e1:89:98:74:df:24:76:
d8:58:ba:1b:84:a5:b0:fb:63:a3:71:39:e1:39:e9:79:1d:74:
88:62:bd:4b:d0:54:04:79:96:6c:16:ad:f3:1a:80:b5:76:dc:
f9:f5:e3:f9:11:9e:ea:a2:51:5e:d3:e9:d9:30:b3:32:32:1c:
a7:43:4b:e4:61:26:a9:11:9c:dc:87:0f:aa:be:65:6c:72:b8:
eb:d6:22:54:a5:6e:f6:7a:8b:de:2b:0a:7a:12:0b:26:1c:71:
43:da:0d:d7:18:31:20:c7:99:f9:02:1b:0e:99:e7:ba:3a:2b:
42:83:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:10:06 2025 by rpki-client