Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
File: jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft (raw, json)
Hash identifier: uM2obPdIA314+a+IFBSLwYos7toOHN2nKGom1/jPabE=
Subject key identifier: EC:D8:A0:0C:AF:D4:4A:D1:3D:09:D9:4B:F4:97:BC:00:65:B4:A3:85
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Certificate issuer: /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial: 0196778CBF8455DE28F39AAA2749087BF9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
Manifest number: 11A6
Signing time: Sun 27 Apr 2025 14:00:34 +0000
Manifest this update: Sun 27 Apr 2025 14:00:34 +0000
Manifest next update: Mon 28 Apr 2025 14:00:34 +0000
Files and hashes: 1: Kt2ksaxPkIjtDoeyg1P8yernNDc.roa (hash: wfAd3vob2ra8znve71igmwtD5TyA3SG1S1RzxivWZj8=)
2: byPwkkahLGpxY_tW1OLYNjMyZ_Y.roa (hash: QA9SayE2KiT0c9dHKY7N9OrSbz3bY915oFBo7q1THjo=)
3: jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl (hash: grFIojYZKQrDAOi1bYo6kWZskkEBv7oS5c2HCwpUxR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:bf:84:55:de:28:f3:9a:aa:27:49:08:7b:f9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Validity
Not Before: Apr 27 14:00:34 2025 GMT
Not After : Apr 28 14:00:34 2025 GMT
Subject: CN=ecd8a00cafd44ad13d09d94bf497bc0065b4a385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:10:47:31:e4:63:41:5f:d5:8c:83:46:58:60:
ec:81:10:34:2a:16:57:52:8d:e1:12:92:8d:4a:18:
8c:09:e4:e0:95:ea:49:08:90:55:66:f3:ec:00:92:
46:7c:87:67:c0:03:19:9e:3e:8d:5c:0a:80:6c:cb:
c4:8e:ad:9f:8b:df:9b:32:90:28:d6:eb:55:dc:9d:
d7:d9:f3:ea:b3:14:6b:5f:3d:ae:d2:b9:e0:dc:ca:
ea:fd:2f:13:04:29:ac:5b:d3:9b:05:7d:24:52:83:
09:14:a8:02:f7:9b:2d:aa:90:23:f8:78:ab:b6:c9:
64:b8:d9:99:ca:0a:43:48:77:49:10:0b:f3:b2:3a:
8a:86:2d:db:52:e5:ac:09:43:02:7c:84:46:65:ab:
d2:c0:92:a6:8c:95:7e:f6:a3:28:4e:4a:40:78:4c:
72:a0:37:63:0a:3c:a6:66:d5:24:af:13:d8:64:c0:
3b:a6:ca:e6:a3:25:be:6b:90:bf:4f:0c:f8:4d:fe:
42:13:03:78:e3:8b:67:96:ba:6b:cf:c5:de:29:d1:
df:ca:08:49:31:ca:98:a0:12:37:4f:23:32:f6:3d:
be:26:43:ae:cc:d5:35:eb:48:70:91:ec:3d:5a:f6:
af:91:c5:08:1e:28:32:b0:cf:4b:30:9e:81:3c:49:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D8:A0:0C:AF:D4:4A:D1:3D:09:D9:4B:F4:97:BC:00:65:B4:A3:85
X509v3 Authority Key Identifier:
keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a6:17:36:90:db:8f:3b:46:02:65:ae:b7:b5:50:7c:23:b5:
6d:63:38:5e:1b:75:8e:9c:85:27:22:41:64:56:f2:37:c0:c7:
bb:ac:36:8d:10:46:32:5f:cc:e3:8e:14:49:32:bb:22:13:4a:
0d:da:bd:66:f0:1a:b6:d9:c7:00:fc:96:29:17:7a:c0:43:36:
cd:17:47:7e:3d:69:97:2b:12:ef:e3:fb:6f:44:8e:22:9b:32:
b5:50:dd:8f:3c:d5:d7:4a:c1:cd:52:90:9f:3e:94:45:08:4b:
28:d5:4b:e5:d1:95:b2:09:7b:45:fc:b9:09:e9:56:a2:fc:3e:
9b:c1:54:60:5d:73:f1:79:01:58:85:fd:71:d2:d3:ca:04:04:
b3:57:a5:ab:ee:61:05:16:dc:1c:78:f4:98:63:d4:40:f1:e7:
aa:01:e5:43:ee:41:ed:3d:25:56:a7:4b:04:7c:2d:c5:ad:96:
bd:d7:be:f2:9d:d1:71:da:93:4f:5e:d3:46:21:33:b8:b1:5e:
c5:a1:01:63:60:b4:ba:db:c1:c6:09:7e:c6:00:55:a0:3b:df:
6d:c4:88:46:7e:3e:cc:7e:0c:31:39:81:a0:36:b5:f2:d2:83:
8f:57:05:8b:23:e2:f8:df:3e:0e:57:e5:72:5b:0d:95:3d:2e:
64:f4:e4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:51 2025 by rpki-client