Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
File: jVhAatOLFVwZjjhanC9iG84h-Hc.mft (raw, json)
Hash identifier: Nx+RX3H5WL+SbCndMUsjpEOyE7j5eb6RHDkyshHGXNE=
Subject key identifier: 5E:F0:4C:D5:5C:B5:08:52:6E:3D:7D:D4:33:8F:5A:EA:87:D3:1B:3A
Authority key identifier: 8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
Certificate issuer: /CN=8d58406ad38b155c198e385a9c2f621bce21f877
Certificate serial: 019678316F0FBE445750414AF6F86F4D2A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
Manifest number: 03D3
Signing time: Sun 27 Apr 2025 17:00:27 +0000
Manifest this update: Sun 27 Apr 2025 17:00:27 +0000
Manifest next update: Mon 28 Apr 2025 17:00:27 +0000
Files and hashes: 1: ZQAyFws7DTZX8u1fY_j_CXtWmSw.roa (hash: rqxW0DHYx0WB4ZZV6XWEMvjksg8LNQ4dfFaekkzMvBk=)
2: jVhAatOLFVwZjjhanC9iG84h-Hc.crl (hash: cMF5iHUhji5t/IInErn0f0VcIydi73lqWBCxSSaLxIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:6f:0f:be:44:57:50:41:4a:f6:f8:6f:4d:2a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d58406ad38b155c198e385a9c2f621bce21f877
Validity
Not Before: Apr 27 17:00:27 2025 GMT
Not After : Apr 28 17:00:27 2025 GMT
Subject: CN=5ef04cd55cb508526e3d7dd4338f5aea87d31b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:cf:27:58:c3:ae:de:b3:d3:2d:3e:c2:37:
45:42:a7:2f:12:56:d9:ba:36:43:77:3b:fe:b2:fa:
65:4a:6a:8f:30:8e:e4:6f:b1:58:8c:55:f9:56:53:
05:2f:85:16:19:1a:bb:32:22:eb:5f:c4:65:6a:ed:
a2:08:7c:cc:a8:7b:eb:65:46:a0:4e:ae:f0:57:25:
7f:37:62:d5:d8:40:80:fb:c6:11:55:e6:f0:36:17:
8b:39:71:e5:6b:ee:ea:fc:ba:98:1d:95:ca:39:21:
10:e0:cd:66:7a:b8:21:70:e7:6b:d8:fe:61:6d:af:
69:ef:0d:c4:dc:16:8f:60:be:f1:e6:3d:c9:df:c7:
27:13:b7:3b:dc:2e:be:a4:75:2f:eb:ce:02:9c:6f:
af:50:13:5f:8b:58:b6:20:5f:3c:64:98:da:aa:ab:
7e:ef:d3:00:f6:7f:af:84:8f:fe:80:05:62:b5:2b:
d0:08:34:30:af:0d:eb:e6:1d:36:38:ed:62:99:9b:
1d:a3:98:ba:c8:f1:ea:c9:5c:e1:35:67:28:92:3c:
81:ab:3f:e5:e1:ac:bb:dc:86:ff:a3:09:26:e5:e2:
b2:a6:63:e1:c8:44:4e:af:95:2a:c5:76:43:c9:00:
69:d4:ba:58:93:64:55:bb:a0:4e:3b:14:e9:bb:de:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F0:4C:D5:5C:B5:08:52:6E:3D:7D:D4:33:8F:5A:EA:87:D3:1B:3A
X509v3 Authority Key Identifier:
keyid:8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:cf:0d:f5:95:f4:25:a8:5d:62:f5:67:0a:a5:56:ca:cb:45:
50:81:24:f9:1f:6b:4d:d2:e1:e2:77:78:26:63:d8:1e:49:f0:
e3:3e:48:7c:f7:c9:82:00:dc:5d:9a:40:aa:70:79:79:cb:20:
26:33:36:9d:f1:ff:ef:35:27:01:99:8d:87:27:16:e2:0c:f8:
c4:1c:e2:39:8f:38:99:d2:1f:87:79:cc:c1:db:3e:a1:69:af:
17:a6:20:8c:69:4b:31:db:d5:cf:fa:1f:58:24:0e:57:a6:39:
ae:dc:53:7c:e0:81:55:e8:cc:da:88:e7:3e:bd:36:0d:67:b9:
e8:d8:52:4a:f9:3d:5b:69:8f:b3:24:70:19:c3:16:1e:1d:8b:
90:7c:66:a5:8b:43:f3:51:b4:0c:99:33:36:9c:72:a8:1b:89:
6c:9d:e3:97:da:6a:fc:92:b7:cb:0c:2f:09:e5:40:d2:b7:e3:
2d:aa:4f:cf:d6:7d:93:35:1a:1d:33:03:a0:5e:92:5d:b8:6f:
3c:f5:dd:94:de:cd:de:1a:f3:a8:f0:9e:ba:d8:23:8b:f7:08:
d0:6d:46:73:16:02:03:96:f6:d7:be:86:46:98:87:a8:3e:54:
df:39:c7:9a:66:34:e5:66:33:74:2c:79:d8:89:8c:41:b8:86:
be:7f:49:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:11:02 2025 by rpki-client