Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
File: Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json)
Hash identifier: 5wg1hIbloPPRrXrSFTJcmTusSObR3k4BKQAMmRuDbJA=
Subject key identifier: B0:4E:8C:AA:17:4C:E9:3C:80:ED:5F:81:C1:56:20:09:B4:60:CA:C4
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 019680C6ED3439947570F6E839B21C97BA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 09:00:42 +0000
Manifest this update: Tue 29 Apr 2025 09:00:42 +0000
Manifest next update: Wed 30 Apr 2025 09:00:42 +0000
Files and hashes: 1: E5UqsHXI4rxEYamOG66v7YvvX58.roa (hash: 58pJlWEPXnRDyDfxMzNI3/SbQdUBvyaiOkTUhmV+dLw=)
2: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: gPtg2zGP9RaPbT2JrTOod6iVMji73SRuCXow84qnqwc=)
3: on-RtWMULYhntqitPVzhY7lgnl8.roa (hash: N1GhLpfbUDUJ0gIZbjVbPi/X8FRKHkZMNhXw3o2Pm+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:ed:34:39:94:75:70:f6:e8:39:b2:1c:97:ba:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: Apr 29 09:00:42 2025 GMT
Not After : Apr 30 09:00:42 2025 GMT
Subject: CN=b04e8caa174ce93c80ed5f81c1562009b460cac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:e9:cf:fe:82:17:c9:a4:03:ca:b1:61:b4:
c0:2f:5e:5d:35:b1:da:98:89:1f:8f:3b:9a:a5:ed:
9b:a4:e6:e5:05:9b:58:c5:47:27:52:10:4f:28:f1:
59:3e:af:a1:fc:6c:6d:20:5b:f5:06:0f:06:b9:6e:
f3:22:0d:e3:fa:3e:f5:3e:84:6e:5e:b5:11:86:d5:
56:0b:f5:6d:bb:36:4d:97:9f:9b:d5:3d:bf:5b:6e:
b1:b2:20:75:aa:07:99:83:bf:ef:fd:85:dd:54:c5:
56:d2:c7:45:c8:10:ca:ec:36:a5:8c:ec:34:e2:bf:
65:e2:6d:bc:b7:ec:dd:13:0c:78:ba:26:e3:e7:ce:
c7:88:3c:54:4c:b0:9c:c6:8e:4b:aa:96:a7:4f:9f:
62:77:66:4a:8c:7e:fc:82:3e:2c:30:45:e9:a5:6e:
f7:50:d4:21:81:ea:b0:f1:2c:a9:e3:09:26:fe:23:
48:62:09:3e:eb:e0:27:ca:68:6e:2e:ee:8c:83:e1:
25:29:cc:31:e2:6c:d3:1b:4c:da:fb:c9:09:3d:6e:
81:dc:f7:61:eb:64:39:02:1c:4e:18:9f:7d:3c:72:
70:15:3c:c3:76:9c:5c:68:ed:5f:68:01:7c:e4:48:
ce:3d:ae:4e:1b:83:43:10:66:57:68:7b:21:a4:5f:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4E:8C:AA:17:4C:E9:3C:80:ED:5F:81:C1:56:20:09:B4:60:CA:C4
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9e:04:41:a7:b4:55:35:76:cc:54:ce:88:55:96:65:50:04:
23:10:45:ed:73:7c:dc:29:db:d2:3f:25:da:a4:f6:40:93:07:
80:cb:99:42:b2:fd:b0:62:0c:91:d3:25:d1:60:5a:2e:98:dd:
72:b4:b6:58:28:4e:ce:e5:98:b2:16:95:d2:c9:b0:fa:28:ed:
5c:be:14:5a:01:c9:ca:a7:83:01:78:98:0e:67:bb:d0:70:5e:
ea:38:36:cf:d2:bd:3a:32:da:28:70:91:e7:ad:d5:53:f9:d6:
11:c3:92:29:d3:e7:32:d1:b6:15:be:a1:65:11:cd:1c:fa:dd:
38:87:8b:18:95:f9:c2:08:91:de:40:77:90:c2:03:9a:f1:6d:
34:eb:bc:02:1a:a0:db:4d:72:4e:ff:83:7c:22:d0:bb:88:8f:
e7:59:b4:5e:28:da:da:c5:6a:79:f5:1d:5c:f8:cf:5d:9b:db:
ae:7f:66:00:a9:49:b5:40:7c:29:b3:37:a0:71:19:2d:d9:0c:
43:60:c4:a9:59:28:ed:72:97:35:34:19:e5:c8:99:36:7b:11:
51:55:a9:12:ef:24:8a:10:41:ea:c3:53:25:1b:d7:84:d4:ab:
f0:79:aa:5d:95:55:b5:25:b6:93:65:4f:b9:8e:c7:bb:64:70:
ff:c6:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:26:59 2025 by rpki-client