Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
File: jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json)
Hash identifier: WYeJjDKPQwTcgKbKpTWDcfix5bJ9tosCfO4thYndUek=
Subject key identifier: 3F:B2:F8:F3:74:75:11:AD:1C:FD:6E:AB:B6:57:61:3F:3A:66:31:9B
Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
Certificate issuer: /CN=8c48dcecbbcc052c659f971609229e3656a3d956
Certificate serial: 01968D39CDCCA543FEFD85A4F54266E56018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
Manifest number: 0438
Signing time: Thu 01 May 2025 19:01:37 +0000
Manifest this update: Thu 01 May 2025 19:01:37 +0000
Manifest next update: Fri 02 May 2025 19:01:37 +0000
Files and hashes: 1: 9Ikrgii6aWEfsxAWAi789vrE9wg.roa (hash: iLnyK1Sj4Jg60yb2gV/nuNI+npfH3YvqxRf21D1k0LY=)
2: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: QZQwKbOxyX0WcTgKLXGsyI11A4nmeQfjmtdyOzzFPYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:cd:cc:a5:43:fe:fd:85:a4:f5:42:66:e5:60:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956
Validity
Not Before: May 1 19:01:37 2025 GMT
Not After : May 2 19:01:37 2025 GMT
Subject: CN=3fb2f8f3747511ad1cfd6eabb657613f3a66319b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6a:80:a6:be:e7:02:64:9c:cc:25:d8:88:b6:
1f:f4:cd:47:9d:76:2a:ea:7d:e1:a3:6a:8b:dd:56:
f2:8e:5f:3f:49:46:0c:17:f1:4d:86:46:62:32:f8:
b1:17:40:2f:4c:f4:db:7f:3f:34:ef:13:24:3e:9f:
26:0b:39:61:45:57:c9:ce:8d:08:d8:36:ca:4e:9c:
20:07:33:1b:ba:23:35:ab:3f:62:0c:ad:b2:75:9d:
d7:5a:98:99:68:08:b8:d5:3a:80:3b:da:72:d4:91:
d1:55:1e:1b:2c:9c:85:a0:51:b0:a7:1a:b5:f6:48:
66:f6:4b:21:ef:8c:f7:66:f1:85:49:45:c5:1d:54:
86:26:04:4a:05:79:43:2f:fb:57:15:81:93:3a:8f:
c6:91:e0:07:92:47:2b:2a:29:a9:e9:b6:cd:f2:d4:
17:ff:95:ee:33:d7:3c:23:95:da:23:85:0d:6b:a4:
82:4b:d5:3e:75:50:5a:9a:bc:81:6f:88:95:a8:44:
54:4e:b8:38:1d:b4:68:ca:ae:bb:30:ae:e3:44:e6:
12:bb:7c:30:dd:93:0f:26:6e:18:46:03:7e:61:a5:
20:e4:f8:17:27:a6:8b:b9:74:51:5d:94:75:9a:b3:
0f:cf:86:9a:5d:63:ff:3a:b9:e0:45:fe:22:ce:b5:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B2:F8:F3:74:75:11:AD:1C:FD:6E:AB:B6:57:61:3F:3A:66:31:9B
X509v3 Authority Key Identifier:
keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:40:9e:d7:c2:d4:e6:5b:e8:7c:42:ad:5c:dc:5a:33:c2:c7:
a7:05:7a:87:30:ce:8a:67:d3:66:03:49:58:e5:24:92:59:1d:
2d:6f:c6:f5:ef:91:f8:e0:f0:8d:39:4d:3c:d0:67:03:9d:5c:
7f:27:62:ba:b5:90:52:67:ec:fc:3f:b8:c5:30:21:b6:b4:66:
d8:b5:05:72:d0:1f:c9:78:4d:90:c2:3e:93:68:ba:34:e0:84:
12:c6:d0:82:7d:62:04:fc:e7:77:46:63:33:4e:b8:d7:b4:5f:
dd:ea:4b:f0:85:0d:14:db:7d:71:85:cc:7a:77:24:cc:32:00:
89:40:4c:ff:ce:d5:1a:a7:4e:31:78:63:f1:60:8f:67:cc:3f:
8c:99:4b:0f:2e:8b:78:3a:d7:0d:ab:c9:5a:ab:44:4d:6b:00:
ef:a9:66:28:45:13:b4:7d:34:04:0a:95:50:44:04:ff:17:13:
d8:b9:d6:9e:24:83:8b:75:92:e8:1b:92:b6:5a:47:5c:1b:6c:
35:e7:0f:0f:b7:8c:53:a9:9d:fc:cb:76:27:29:57:81:3d:26:
f3:65:ec:c4:a0:05:78:bc:a6:3c:c5:c0:35:84:e4:dd:26:b1:
0e:d8:33:44:54:52:0f:51:9a:69:d3:1c:cc:f1:3a:fe:69:74:
cd:f0:4f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:24:57 2025 by rpki-client