Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
File: jxy5c3UkxDf2-nUhF2uwq3H77mM.mft (raw, json)
Hash identifier: SdA9eFPpVWto4KNIKp8LaHgVpRjhE/rkFojyr15Fg9o=
Subject key identifier: 17:D0:3C:D3:65:1D:19:31:F1:92:5A:A9:67:49:18:32:ED:56:CA:4F
Authority key identifier: 8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63
Certificate issuer: /CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
Certificate serial: 0196741E72DA8E84D02DA8FB5B244DA10FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
Manifest number: 068E
Signing time: Sat 26 Apr 2025 22:01:14 +0000
Manifest this update: Sat 26 Apr 2025 22:01:14 +0000
Manifest next update: Sun 27 Apr 2025 22:01:14 +0000
Files and hashes: 1: jxy5c3UkxDf2-nUhF2uwq3H77mM.crl (hash: 3lNhHKimR90WMMv1hp8PAH36LDd61nKk21ADwaCppkU=)
2: rhQc5qUM2MDBH4p36Kio4nVEz6k.roa (hash: awMdOXUFz2DrxlzCVZjnG6myrcErsUVUML7kWjxlY24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:72:da:8e:84:d0:2d:a8:fb:5b:24:4d:a1:0f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1cb9737524c437f6fa7521176bb0ab71fbee63
Validity
Not Before: Apr 26 22:01:14 2025 GMT
Not After : Apr 27 22:01:14 2025 GMT
Subject: CN=17d03cd3651d1931f1925aa967491832ed56ca4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:0d:8a:9c:fb:39:43:49:d9:a0:b3:91:43:
57:05:34:2e:d2:e2:6a:00:bf:4d:88:a8:ae:17:bb:
bc:e2:38:85:96:e2:47:00:d4:e4:a4:78:35:03:1e:
b8:02:e1:3a:eb:25:ff:dc:23:ca:6b:1b:e9:d7:82:
4a:62:76:7d:f1:78:24:75:7e:50:83:aa:8e:80:4b:
1e:e9:20:c7:84:79:87:56:e0:0b:de:2d:b3:73:54:
88:62:8f:c3:a7:d2:1e:84:99:36:5d:d6:2a:d3:7c:
08:24:ae:ec:80:c0:9a:12:40:b5:6a:98:e6:df:ba:
22:32:81:e3:9f:c8:78:a9:ac:76:94:da:e1:6f:fd:
61:30:c6:df:4b:0f:d7:f7:c2:5f:56:3f:ef:75:3c:
e5:87:e5:52:4b:61:23:33:5e:15:d1:c4:1f:d3:de:
5b:67:a8:72:69:05:f0:e1:3c:26:01:ca:d5:ad:5b:
75:e6:19:01:83:13:bf:34:0b:9f:f4:0b:e3:e1:15:
58:aa:e1:c7:8a:54:b4:ca:55:09:0d:ae:08:93:a0:
b3:fc:4c:29:1f:65:93:62:f7:eb:7b:be:98:18:c9:
52:a8:b0:8b:99:22:9d:e5:54:40:0d:49:0e:99:aa:
ca:ce:a7:a1:4e:a8:ca:19:b8:f4:81:22:bc:64:4c:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D0:3C:D3:65:1D:19:31:F1:92:5A:A9:67:49:18:32:ED:56:CA:4F
X509v3 Authority Key Identifier:
keyid:8F:1C:B9:73:75:24:C4:37:F6:FA:75:21:17:6B:B0:AB:71:FB:EE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxy5c3UkxDf2-nUhF2uwq3H77mM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b11de-900f-4378-84eb-7870c645e219/1/jxy5c3UkxDf2-nUhF2uwq3H77mM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:16:36:68:cc:42:15:a3:fc:ad:7d:9d:3e:66:84:34:3f:04:
b2:c9:85:ac:fe:b2:2d:ed:6c:a5:9a:b2:cd:39:10:20:0d:ce:
58:33:3e:b8:a8:bd:4f:ee:83:e4:1f:71:c9:1d:28:10:7d:0a:
2b:5f:b9:0f:1b:6e:86:f6:02:4c:8c:ae:d0:31:bc:25:e6:62:
9d:c4:6e:39:5e:e1:f5:e7:33:79:fd:9a:e5:98:55:51:db:c9:
2c:09:0f:07:f9:b1:10:89:8a:23:17:1f:7f:ee:83:99:db:50:
ea:03:f2:22:99:91:4b:70:7c:5f:ce:9d:c9:9c:3d:d5:c2:47:
9f:94:01:84:3f:fb:93:8b:8f:90:e3:dc:15:85:36:5f:59:24:
30:b1:5c:61:2c:91:64:c0:3d:d8:07:6e:e3:49:aa:05:0a:2f:
2d:81:e0:ba:84:72:23:e1:2c:3b:f5:1d:a2:33:65:76:8c:03:
77:58:35:4f:28:8f:26:d1:aa:10:20:f4:91:68:f6:00:13:66:
9c:d0:95:5d:0b:5f:b7:84:e5:0f:92:e3:68:4d:8d:cf:82:f2:
d7:59:4e:d3:30:35:d1:88:ee:a6:66:d0:70:70:08:ac:b5:e2:
fc:94:ec:c1:ab:85:f4:bd:eb:ef:fd:f4:c2:57:36:75:79:4e:
2b:53:b9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:26:26 2025 by rpki-client