Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: T1cnxLI+L43p/SXUeg4AyvewBsD0KelbE+ZtmYexRY0=
Subject key identifier: A0:86:31:C9:25:50:40:19:9C:3F:9C:A0:35:5B:6B:F7:69:7E:2C:60
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 0196741E8E8037934C1BFDE01894A1BD9B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 151F
Signing time: Sat 26 Apr 2025 22:01:21 +0000
Manifest this update: Sat 26 Apr 2025 22:01:21 +0000
Manifest next update: Sun 27 Apr 2025 22:01:21 +0000
Files and hashes: 1: VgDY9zN_B3grCrz_H8xjNykqXTQ.roa (hash: V5RUWHdPXufxGeDHhevmGSEqGhIbGyboqgCFXxKzrT8=)
2: eWNwoG2gNqVOl4jxtgq3km86-j8.roa (hash: tuYXWwSXyhuCjeV5A6/luy4IrIPezyScgsOJmMQtw38=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: RuxHMP7WHLwAD8MqxOnR9S6ricUQYhSZ16M7DoflSdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:8e:80:37:93:4c:1b:fd:e0:18:94:a1:bd:9b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Apr 26 22:01:21 2025 GMT
Not After : Apr 27 22:01:21 2025 GMT
Subject: CN=a08631c9255040199c3f9ca0355b6bf7697e2c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:9f:7e:77:8e:fe:9c:31:df:ff:25:d3:d2:
e5:81:36:52:03:7b:72:b3:f5:54:a2:7c:a7:8f:50:
69:1a:10:75:b2:dd:06:7f:c0:1c:65:01:ee:e2:d0:
51:22:6f:39:13:7a:5d:e5:1b:56:f5:ce:18:01:36:
9c:38:6a:6b:4d:59:29:5e:b7:c6:4e:9e:70:ed:71:
98:ce:fd:28:56:59:50:d2:d3:23:a8:a2:12:71:f8:
70:da:87:dc:51:f9:14:86:e4:c9:7d:d3:4b:d5:b4:
70:63:09:6f:ea:b3:c5:7b:22:02:13:ce:ac:e3:52:
fe:d8:ca:48:56:60:01:70:51:94:54:a7:bb:4e:38:
f0:5d:65:61:32:bc:c4:e4:46:38:03:4e:de:20:54:
59:00:6c:4f:34:4f:ca:21:df:d3:be:51:fc:a1:67:
71:3f:f9:ce:28:ec:39:a7:76:5b:b2:c4:e8:47:85:
d1:94:83:e9:1a:1e:d1:04:39:9a:80:ef:b1:9b:e9:
18:27:aa:40:b0:a4:1a:3e:47:4e:de:88:5d:12:02:
d5:81:bf:f9:9d:a5:b3:b8:4c:56:a9:1d:77:19:ca:
68:b9:3d:20:2c:be:27:1e:f5:1e:ce:4b:3a:ec:1c:
7f:0d:b4:bc:94:59:74:92:4c:7e:25:de:6c:b8:a2:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:31:C9:25:50:40:19:9C:3F:9C:A0:35:5B:6B:F7:69:7E:2C:60
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:72:40:ec:c2:79:12:6f:40:88:72:13:df:80:16:08:03:0b:
8d:f5:b7:05:bb:13:10:92:fd:77:a7:aa:38:07:50:7d:e9:72:
72:b9:86:64:75:2d:23:ed:b8:85:d2:0b:56:87:8a:60:df:07:
cb:72:2a:e5:9e:51:cd:35:e3:e6:e1:cf:07:e3:1b:c1:d7:29:
ca:fa:4b:f5:ab:25:80:e6:1f:ad:7c:54:a0:2c:e5:09:3f:49:
c8:d6:89:01:52:ba:65:4a:e8:3a:bf:9d:f3:51:2d:ce:ef:66:
dd:96:a8:7a:94:c4:ab:2d:58:6e:2e:72:31:da:59:ad:ef:9a:
50:58:ae:7f:66:ee:a9:4c:c4:61:38:80:8d:55:f4:5b:9e:c7:
19:ea:79:40:86:17:91:67:1f:c4:44:28:23:27:c3:bd:1a:a1:
69:ca:d4:bc:3e:c4:93:d8:bb:f2:19:c7:ff:98:4b:6e:62:ff:
22:29:50:e9:1d:5c:f4:8a:8f:82:8d:11:12:9e:ee:e6:82:2e:
3b:84:a0:e9:3c:6f:1d:22:8e:6e:ff:66:32:bd:ee:4b:29:4b:
dd:6a:79:f2:6f:8e:01:b7:83:3e:e7:9f:53:91:1a:58:99:cb:
da:4a:62:86:eb:c3:f8:e5:04:f8:11:dd:de:46:3d:72:4d:e2:
e3:ee:42:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:50 2025 by rpki-client