Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier: Md5QlBCWgMsSu1NYmW276XgtCchV6QFRyuZcRkonXrA=
Subject key identifier: 34:72:85:31:27:41:8A:89:8D:B3:91:C2:03:70:B1:B3:E1:80:18:C2
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 019677FAB0E03E5B564AAC9D5888E65BAE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number: 132D
Signing time: Sun 27 Apr 2025 16:00:40 +0000
Manifest this update: Sun 27 Apr 2025 16:00:40 +0000
Manifest next update: Mon 28 Apr 2025 16:00:40 +0000
Files and hashes: 1: ZQ_LRmwNZ1BIk0LVLv6QE5ADZjE.roa (hash: UwXWOO5wJ2dIiDhF/fwtVEvbn5ihhsplExA1a1SD1Lc=)
2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: 5rJT8LPWslkMcpnoo1Q8PtHigH10MtVkXFx4FE1d5WA=)
3: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (hash: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=)
4: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (hash: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:b0:e0:3e:5b:56:4a:ac:9d:58:88:e6:5b:ae:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Apr 27 16:00:40 2025 GMT
Not After : Apr 28 16:00:40 2025 GMT
Subject: CN=3472853127418a898db391c20370b1b3e18018c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:86:89:a0:01:0e:59:7a:5e:8e:86:0d:15:
b1:86:81:59:bc:3c:f2:9f:6c:0f:9e:5a:ce:3c:bf:
12:78:10:ce:30:c1:70:81:7d:09:c1:9e:31:c6:58:
3b:ac:4a:e4:1e:93:be:d9:16:8c:da:9f:56:1c:ef:
41:12:93:89:4a:0d:c0:c1:01:93:a5:67:91:8c:a0:
1a:2b:65:a6:9e:b4:83:45:5b:89:fb:9d:78:ae:cd:
6a:93:a0:fc:4f:b7:8e:ad:33:d1:1f:11:14:83:0d:
f8:f4:37:7f:2d:82:ad:63:d4:7b:bd:f4:4c:76:67:
84:8a:68:c0:0c:39:ab:10:e0:dd:da:b2:ef:75:e6:
b5:00:45:2c:f7:2a:5e:56:e5:63:31:ae:ed:c9:e1:
49:92:92:d2:31:5e:1d:72:d0:91:69:8d:51:68:b4:
fa:91:47:9b:0e:bb:4f:a7:d9:0b:92:79:bc:56:d0:
86:6d:c8:fd:1f:7e:65:13:94:51:49:ec:47:65:af:
62:2b:25:4a:7c:0a:b9:29:73:17:93:fc:23:a0:fe:
eb:3e:b2:d9:eb:74:57:12:7c:c6:c4:c6:06:57:fd:
94:66:4f:bb:fb:a2:79:1f:a0:da:38:fb:bd:d5:ec:
8c:1c:66:58:e4:84:ca:e9:b0:76:eb:de:65:fe:33:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:72:85:31:27:41:8A:89:8D:B3:91:C2:03:70:B1:B3:E1:80:18:C2
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:50:e2:cb:fa:4c:53:04:ae:09:a2:d8:3a:35:1f:e0:26:2d:
c4:4c:41:ee:2f:95:07:46:8a:bb:a8:52:d7:4d:21:37:a6:a2:
25:02:93:82:4f:25:f7:b8:9f:28:6b:1e:3a:0c:75:76:65:2c:
4b:93:e4:0e:da:5f:a8:53:df:f2:d2:1e:18:2b:90:7a:d6:10:
01:89:34:ef:5d:76:82:19:24:a0:e7:af:b3:7d:9c:f2:df:65:
ca:93:00:88:85:71:e5:f0:7d:21:d3:8b:6d:c8:7e:1b:a7:b0:
1d:01:a2:a3:cb:13:e0:15:be:19:ac:40:3d:6e:4f:0e:bb:79:
1b:2a:9f:1b:85:bf:a9:a7:1c:64:80:29:78:e5:6e:9e:54:ba:
eb:e1:71:62:a2:a2:13:f9:49:2a:6d:75:d1:93:68:09:02:9b:
23:fc:80:23:3d:a3:95:65:95:9e:14:45:31:03:d5:ed:54:28:
fb:15:09:61:94:01:ac:01:fe:ba:8c:41:bd:ef:e7:42:26:51:
64:3a:5d:bc:37:b0:d7:4a:72:ac:3a:26:76:3a:88:a3:90:cd:
ac:7d:4e:6f:13:25:13:c2:fc:58:9d:9b:51:8c:73:4a:66:59:
b6:04:d6:ca:bb:23:9d:b1:fe:02:df:ea:2c:83:7a:16:2a:29:
ff:99:40:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:49:10 2025 by rpki-client