Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: Z1cZcjqwqX68HLcofR7HMmu+EZguFqEhr19MEFNk92w=
Subject key identifier: 78:CA:3A:09:33:65:F9:D1:88:58:DC:2E:9A:37:90:CF:03:6A:AF:3D
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 01968A38468A0B2B225510B63BB15DAE4634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 05:01:05 +0000
Manifest this update: Thu 01 May 2025 05:01:05 +0000
Manifest next update: Fri 02 May 2025 05:01:05 +0000
Files and hashes: 1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=)
2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: VJp3jixzkvYa2sgN2jVGSy+5z+7FOWxwOMbb7GXk3A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:38:46:8a:0b:2b:22:55:10:b6:3b:b1:5d:ae:46:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: May 1 05:01:05 2025 GMT
Not After : May 2 05:01:05 2025 GMT
Subject: CN=78ca3a093365f9d18858dc2e9a3790cf036aaf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:bd:e9:9f:1f:51:d5:bc:b1:42:80:c6:ba:
9d:b1:d5:f8:32:cb:cd:5d:66:81:ed:2e:ef:aa:bd:
0b:1a:fc:02:ba:66:e8:ff:9c:ed:4d:86:34:a2:9e:
8d:db:e1:e0:06:19:36:06:e7:a4:4d:de:c0:aa:35:
d1:79:96:20:17:66:89:e8:37:56:2a:1b:df:c8:30:
d5:38:6d:52:c0:07:be:5e:6e:e9:95:f1:7e:a5:01:
75:2b:5b:bb:bc:db:2f:41:cb:c4:5b:b7:57:95:94:
58:b4:b3:a1:0d:95:34:1d:96:b7:1c:f8:af:5e:ea:
c8:23:31:7c:63:c8:77:35:13:96:59:08:c7:9a:85:
01:ef:59:89:77:00:b3:68:9a:02:9c:39:df:bb:9c:
25:31:61:30:88:e4:03:93:d4:47:d0:4f:49:74:54:
3e:38:3c:2b:44:dd:3a:9b:0b:2d:9b:fb:ba:e0:c9:
64:63:ee:cc:31:f3:50:4d:fc:d2:00:5a:fd:11:23:
6a:aa:e7:8e:81:52:99:9d:ea:ba:e5:11:bb:fc:b4:
5a:80:25:53:91:30:62:f4:e9:c2:d5:c8:49:89:56:
38:fe:e6:ee:c3:a8:b0:7c:fb:f7:74:e5:b3:89:68:
75:19:9a:cf:76:c2:bf:43:03:b2:2b:96:0a:06:c8:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CA:3A:09:33:65:F9:D1:88:58:DC:2E:9A:37:90:CF:03:6A:AF:3D
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:30:c8:9a:eb:e1:0b:8e:6a:e2:77:81:36:e6:f7:4e:eb:bd:
f1:bf:57:18:5f:a7:b8:06:27:46:96:2b:b1:e6:fb:e9:22:d4:
bc:1c:9f:49:da:4d:1c:64:c5:11:12:9b:81:7c:21:d3:19:15:
d1:d3:14:6f:32:83:23:65:ab:ca:18:69:79:48:26:fc:81:be:
b0:10:a1:d5:c0:77:90:1b:ef:07:91:07:f4:c7:0a:97:cc:80:
a1:da:ce:1c:66:38:b5:7f:22:69:f3:c8:da:37:be:f0:28:d5:
c9:5a:c3:47:ff:30:32:ad:ad:e7:2c:48:df:5f:11:02:b4:46:
22:af:fb:96:97:54:46:20:d8:b1:81:4e:a9:98:5e:91:f7:0c:
2d:7d:a4:b8:72:11:09:32:49:f0:c8:1e:8e:06:3c:13:ee:74:
92:0c:72:0d:5b:f8:a5:37:5c:94:7f:87:6f:2c:30:7a:a8:71:
e2:88:62:89:f3:d7:cb:5c:25:36:ad:22:b5:bc:a6:5a:06:13:
17:2a:45:1c:c6:1a:aa:34:eb:04:bd:ab:ca:31:24:1e:a8:27:
8c:a6:01:43:14:5a:51:4d:e0:49:1f:9b:d0:c2:e3:e4:69:5b:
5d:32:81:32:91:47:d6:12:89:29:2c:0c:9a:22:00:ce:9e:f4:
a8:71:49:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:31:34 2025 by rpki-client