Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
File: iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json)
Hash identifier: gBuA9qpzfpQtAbNcgUJDvzCPJPs/3M2Hyerf2V+EQBg=
Subject key identifier: D3:CC:EC:44:FC:00:3B:C7:90:14:BB:F9:CD:AC:87:70:21:F0:19:73
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial: 01967AC4CBF849234E8F8669FA22789F91A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
Manifest number: 14A7
Signing time: Mon 28 Apr 2025 05:00:39 +0000
Manifest this update: Mon 28 Apr 2025 05:00:39 +0000
Manifest next update: Tue 29 Apr 2025 05:00:39 +0000
Files and hashes: 1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: FB8FnvHgFBd52Y85MD7otYLMDLu0m/UER7mQMzs05wU=)
2: ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa (hash: nVfwFtdg/ueuXQpAAMHTHZq3sXCbrECHNWhALLqW2Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:cb:f8:49:23:4e:8f:86:69:fa:22:78:9f:91:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Validity
Not Before: Apr 28 05:00:39 2025 GMT
Not After : Apr 29 05:00:39 2025 GMT
Subject: CN=d3ccec44fc003bc79014bbf9cdac877021f01973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:83:09:a2:24:0a:e8:92:bb:bb:b2:bc:5a:
19:e5:54:ba:b4:c9:0b:cf:28:43:8f:80:cd:98:04:
0f:64:bc:67:fe:fa:8d:19:a2:78:7f:2e:72:45:e4:
00:f1:b9:ef:32:a8:46:70:ed:8b:95:13:c9:db:66:
02:61:c5:bc:c8:4f:c5:1a:72:3c:40:0c:49:ea:c0:
a1:47:b7:eb:65:69:1c:4b:8c:be:b0:7f:a0:27:20:
52:16:0f:82:c6:d7:95:32:91:8b:f2:ad:7e:22:cd:
ae:51:91:33:a5:7e:dd:c5:8e:ec:c4:90:e9:4a:b4:
83:c4:10:85:55:6f:81:7a:5d:64:44:09:b3:f0:13:
d8:5c:0e:db:bd:eb:15:87:75:ec:cf:54:29:e7:26:
ed:21:1d:fb:be:80:53:50:c1:30:7d:ab:61:3c:c5:
20:3d:25:df:d1:4d:5d:48:f0:7a:29:9c:ef:ae:13:
fd:00:cf:42:72:c2:e8:12:11:e6:a1:d1:da:17:ac:
ae:24:96:75:c1:b8:28:9b:d0:7e:5c:77:99:5c:25:
2b:fe:c7:ef:ce:f5:af:0d:8d:f8:26:a8:8d:95:9f:
84:c7:56:6d:b7:fc:71:e9:92:1a:37:e2:0a:0b:a7:
74:1e:53:90:5f:ad:a5:ef:f8:5e:86:e0:b4:8c:18:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:EC:44:FC:00:3B:C7:90:14:BB:F9:CD:AC:87:70:21:F0:19:73
X509v3 Authority Key Identifier:
keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8a:b9:16:50:13:7f:5f:c7:6b:42:ed:01:5a:af:3a:f7:03:
6b:8e:57:86:50:0a:ee:65:89:2a:14:35:fa:f1:5c:72:26:5d:
65:5a:3b:eb:27:21:24:93:8b:0b:32:a5:85:65:e5:d0:3b:d5:
c1:ec:fd:99:92:45:d1:c1:6a:e4:20:23:3c:0f:43:d2:cf:0a:
9f:20:96:da:80:86:4d:26:99:56:00:e4:63:76:32:ea:d4:d0:
06:4c:7f:07:c2:59:3d:38:fe:99:cf:13:bd:7a:0e:aa:05:30:
bf:ee:98:31:31:a4:90:7b:3f:56:dd:50:52:f4:b6:60:0e:0e:
2a:5e:af:4b:5d:8d:8d:f5:7d:15:66:7b:86:8a:57:30:58:02:
d2:72:43:b7:10:68:5a:b5:2d:2f:67:e6:d8:e1:04:21:ff:dd:
c3:f1:b1:e5:9d:f8:76:4c:0f:b4:f3:fe:65:67:3c:d0:4f:11:
e1:17:4e:c7:3f:cc:0d:67:a9:7f:cc:17:9a:e9:04:f1:ea:4b:
52:63:3f:4c:18:e8:c4:ae:ae:1a:ca:04:38:77:57:0b:20:b4:
6c:b1:14:0f:15:25:8c:98:43:28:23:37:32:6d:d7:af:ec:0a:
e6:ce:e8:fe:01:3e:2b:4a:97:4e:2e:c8:59:ab:d7:02:b9:67:
25:de:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:11:38 2025 by rpki-client