Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier: K+o5EZWMK3nJSYK8+U87Lrji2/DAu/862DYMUfoXL7E=
Subject key identifier: FC:93:E5:8A:97:B8:7D:51:41:04:3B:F4:30:B4:E4:DA:5A:17:31:A5
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 01967679B7C37BCC0F67075663F6C0CBF6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number: 0D40
Signing time: Sun 27 Apr 2025 09:00:10 +0000
Manifest this update: Sun 27 Apr 2025 09:00:10 +0000
Manifest next update: Mon 28 Apr 2025 09:00:10 +0000
Files and hashes: 1: CicZBBxXimIHZjGjJxw0-P_TKwA.roa (hash: WCF5D0GYPfyQKw7aRx70x9QWu1BJyay4IJiNMiHqns8=)
2: H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa (hash: VX1SELBTMMOXweJZC3AHO0K6SmWP/UMVdMCZso8oNU4=)
3: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: Clx5cp97OJ2VgD6ERqHkR6B/vrAKMS3NgGG1Y9zwKbE=)
4: KBHAEuTQwMUyiCX_3RfZwtGUVwk.roa (hash: MrQgPzvtmJ1OylGpfrcHItYSdYG/3jwcYZSpyY/5nO0=)
5: Xud5emWKez2CWje3_uKElUeeYZM.roa (hash: JEEaFQSLgyko90PuBT5aCnY8R+bLlVoo/ly+wTonPTM=)
6: aLqHk2UMrsAFp8O_WkYeTwl3zWg.roa (hash: KSJSQQgNlVfvoPK0hF2rIvdyy8wj5LGpw3RQ1LyRxBU=)
7: gQWFEkun2ccvVh53BL0LLh5mo3I.roa (hash: Tz3OrEHIL28w3om3xiZeD8yyhg/V93Fe5zZKo9SAMIg=)
8: lyRiID6blcYjTxuro8RbRo8yBq8.roa (hash: URzaCIkjGunchT54U9dPfC35zUMjoPWxJXeabV1SOog=)
9: yfa_WQD3YpUEPvOqlipnQtZKTbU.roa (hash: aUGBtF0Q+ZPDnjAMxIqBivvu5PiTIPwqlssloFoWyho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:b7:c3:7b:cc:0f:67:07:56:63:f6:c0:cb:f6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Apr 27 09:00:10 2025 GMT
Not After : Apr 28 09:00:10 2025 GMT
Subject: CN=fc93e58a97b87d5141043bf430b4e4da5a1731a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:49:da:5a:e1:21:4f:ef:51:b1:7f:32:89:
8e:95:2b:3b:80:dd:65:b9:3c:97:07:75:1f:2a:fc:
f2:7f:91:60:04:8c:bf:67:08:67:9e:bd:3b:7f:85:
d6:d1:99:8a:42:24:e4:3b:a4:68:e1:71:62:1d:58:
6d:ba:ac:7f:ad:85:e5:a0:8f:78:64:1c:ef:3b:9c:
01:5b:cc:df:d2:db:45:13:44:81:a5:8a:a7:b9:3e:
36:56:e9:ff:72:50:18:be:35:c0:10:30:0f:97:41:
31:d2:5b:a0:27:72:e5:7c:df:e6:df:de:25:84:18:
d4:f9:36:ba:4f:f1:5a:83:9d:de:73:8b:81:30:4a:
2e:3f:48:d6:3e:d8:1e:9f:21:b9:8e:51:b7:f1:67:
de:b3:ac:8f:d7:b8:97:b3:7a:e1:9d:6a:e8:68:d6:
a7:e3:a4:bb:89:fc:c6:50:7c:17:d1:08:27:54:da:
16:0d:ff:10:3d:0d:45:18:13:24:ad:da:81:4d:54:
89:87:21:cf:0b:cf:ff:37:07:87:63:6e:f4:36:c4:
56:7f:fa:a9:59:8c:36:72:73:89:96:92:b3:75:5a:
a3:73:31:26:2e:66:e2:92:dd:a6:4c:c0:90:38:a7:
2c:77:1e:a4:01:4b:98:73:cb:40:1d:88:a6:d6:eb:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:93:E5:8A:97:B8:7D:51:41:04:3B:F4:30:B4:E4:DA:5A:17:31:A5
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7e:7e:78:dc:5f:b4:02:f3:43:9e:91:dd:97:8f:c0:a6:e5:
43:cc:cd:be:b1:0d:fc:1c:c2:f0:40:f4:0d:4b:d0:c7:87:a7:
6d:46:9e:0a:f2:59:8d:77:5e:4a:0e:80:15:01:6d:e4:54:a4:
d8:80:b6:0d:4b:81:4f:79:f2:f6:08:f9:96:96:91:80:82:8e:
39:13:5b:86:70:be:52:d8:26:8b:a6:79:8c:8d:f7:f6:96:a8:
dd:63:c3:de:fd:41:be:62:d6:2e:b9:89:db:c6:f8:2b:77:11:
c6:74:6f:a4:b3:59:2b:d6:e4:fc:f8:9d:0a:bd:5e:7a:b8:00:
7e:a0:5f:b9:ee:21:0f:e2:ed:2e:bc:c4:6b:e4:a7:6b:ae:c5:
d7:da:79:2b:37:4f:85:bb:ae:52:15:71:4a:c4:b4:f9:0f:3d:
59:eb:ca:16:56:31:09:57:fa:9f:c5:12:84:94:19:38:2f:45:
d3:bd:34:de:d0:06:9e:f1:d9:d1:a6:ff:3a:35:91:43:0f:4b:
89:3d:42:7b:8b:a3:df:3c:b3:0a:bb:5d:9a:ae:e1:73:e5:20:
73:6d:f0:d3:93:5a:0e:b0:f8:7e:97:b6:79:b9:e1:ae:e0:4d:
7b:e1:c8:93:89:cb:24:f2:2f:76:b3:88:55:d5:e3:1e:10:19:
aa:5e:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:51:02 2025 by rpki-client