Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: FrM+GAC7BHTG+w29OPFmLFK5auEFU/DF6iMnnQPLVZU=
Subject key identifier: 07:67:34:58:6A:D6:0B:D3:3D:17:10:93:A0:4A:A0:B5:53:C2:BA:44
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 0196846CFC0399FB841647FD92D857172C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 02:00:56 +0000
Manifest this update: Wed 30 Apr 2025 02:00:56 +0000
Manifest next update: Thu 01 May 2025 02:00:56 +0000
Files and hashes: 1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=)
2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: gGZ3nPrBXwwbbkttGEM+DGw8QAHks5z96IJRmknng3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:fc:03:99:fb:84:16:47:fd:92:d8:57:17:2c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Apr 30 02:00:56 2025 GMT
Not After : May 1 02:00:56 2025 GMT
Subject: CN=076734586ad60bd33d171093a04aa0b553c2ba44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:14:eb:f9:a4:c6:d4:ca:11:b6:62:96:50:
63:47:25:5e:ef:a7:63:40:e0:9c:58:dc:11:05:93:
ed:c0:0c:f6:11:0a:65:02:bb:93:08:e3:1a:47:6e:
dd:41:16:e7:3a:2e:41:e2:2b:e3:4c:58:75:ac:e2:
17:32:69:ce:fe:da:32:df:33:7a:85:c1:25:00:5b:
14:a1:fa:eb:1f:e4:f0:ee:3f:cf:04:42:9f:c5:68:
98:ae:e6:30:ba:37:36:ae:ef:95:c8:18:52:ab:58:
c4:6b:dd:df:84:04:81:88:a0:8f:26:3c:79:1b:63:
84:9b:bb:cc:d6:24:9e:17:f1:98:4d:91:f0:69:1e:
55:1a:97:43:fc:41:47:35:45:da:ba:b5:d2:46:16:
12:bc:c8:ee:74:f6:ae:65:b0:05:13:d6:b7:71:3a:
29:14:11:b4:d6:44:0e:0a:12:89:84:b2:c9:dc:44:
48:62:1f:14:75:eb:b5:61:c5:40:0e:ab:9f:d2:1f:
86:ab:d0:5b:32:c8:3b:86:e0:ff:33:bf:73:d7:fd:
dd:9d:68:60:35:a3:2a:89:30:c8:a8:bf:44:76:b0:
f8:51:1d:f9:e5:35:70:02:a7:08:f4:9a:86:92:38:
47:5d:64:bf:e7:25:e7:c1:40:3e:a3:8b:f5:31:77:
07:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:67:34:58:6A:D6:0B:D3:3D:17:10:93:A0:4A:A0:B5:53:C2:BA:44
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:01:42:8e:78:35:9b:ea:2b:ad:58:1d:93:38:cd:7a:e5:af:
bf:41:4b:98:a0:2e:98:58:1b:7e:ad:8d:55:fd:2e:09:75:1e:
b0:d2:4b:fe:0e:5e:e5:4f:82:86:43:9b:32:9b:8b:3e:7e:e1:
d4:e0:d2:f5:8e:42:29:cd:ad:13:4b:fc:25:ce:78:70:17:fa:
2d:0e:61:4e:cf:46:da:8c:46:78:90:e5:08:c6:84:0e:e8:a9:
81:ca:d3:6b:6c:db:de:26:00:12:75:7f:0b:84:02:02:80:7e:
b6:7e:e1:71:b3:96:b7:af:c9:c6:a9:8b:65:d5:f4:8a:a6:9c:
d1:c3:2a:e1:ce:96:6a:07:51:13:70:7f:18:16:f5:f5:4f:f4:
2f:97:a7:70:bf:a0:ae:fc:ef:ec:0d:9b:16:0b:97:bb:6e:33:
46:82:27:f7:8d:bb:d0:b6:3b:a7:fa:21:c2:e1:cc:06:fc:dc:
87:43:2c:2a:ae:e1:ea:dd:d7:27:34:a5:29:85:bd:e1:8c:d3:
98:64:c7:e5:4d:46:3d:86:86:5c:fb:d8:93:33:f6:a7:70:59:
76:3f:0c:bd:0d:f7:b8:6e:3c:dd:25:c1:6f:b1:93:1f:54:29:
f6:4d:dc:f4:f8:69:f2:d1:e3:ed:21:50:85:0f:4a:74:41:38:
9d:ed:4e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:30:07 2025 by rpki-client