Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: rHBg5b029LqoqIaBP/vF6b6WWv/NGXYzi9TssBZu7TE=
Subject key identifier: B4:F3:5F:F6:0B:6A:56:6E:45:FD:0D:6B:AD:E6:3F:A2:E6:93:C9:53
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 01967EA1C338A53A458AA953C6D0DA99AFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 1522
Signing time: Mon 28 Apr 2025 23:00:52 +0000
Manifest this update: Mon 28 Apr 2025 23:00:52 +0000
Manifest next update: Tue 29 Apr 2025 23:00:52 +0000
Files and hashes: 1: J6Kzm9-BHVrTMueLm85flmGpBuc.roa (hash: 9/2ACokdd6WeH0EpVJ7k0Vq4xCNM0q7ZPA1hEeNbMHI=)
2: bijRliPCnbFotmMqItnp-5jqXj4.roa (hash: uM/kaOsx/CgALc1h4UDZdPe4HF4oyeAzB65mv4DJvkA=)
3: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: Gnf/p1TvL4u48VuB0g/J3wEZT10mPBktksJs/T71Hhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:c3:38:a5:3a:45:8a:a9:53:c6:d0:da:99:af:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Apr 28 23:00:52 2025 GMT
Not After : Apr 29 23:00:52 2025 GMT
Subject: CN=b4f35ff60b6a566e45fd0d6bade63fa2e693c953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:25:8b:91:b2:63:e0:c7:84:ac:6e:8a:81:4b:
19:62:11:65:bc:0c:62:e1:3c:47:c9:19:7a:c8:5e:
23:1c:07:8a:10:0e:7c:f3:29:92:b6:2d:44:c9:97:
9b:f1:d3:cd:46:4b:fb:08:db:a4:50:62:d5:70:3d:
b9:37:23:4f:28:58:d3:33:2d:17:37:61:06:ea:90:
69:b8:34:c7:57:e6:77:b5:75:97:13:89:65:a4:3b:
73:71:ba:5c:e4:99:0e:31:81:5e:c9:e9:b6:1f:44:
53:3e:78:3a:04:d8:e5:a7:1e:44:0f:a1:35:6b:88:
18:f9:b3:1c:8d:e4:71:03:e5:d8:5f:0d:f5:f5:a2:
57:db:a1:dd:3d:fa:7c:13:92:b7:03:e1:9d:54:a9:
b3:5e:f0:59:a3:b0:35:7c:8a:8b:ee:f9:b3:6c:c4:
fd:be:45:c4:dc:85:a1:b1:a1:bd:75:0d:c4:ff:3c:
a3:39:c8:ba:83:bd:0b:27:bf:df:08:d5:96:7c:18:
3e:b5:e6:c2:a1:a6:5d:dc:0e:2c:0d:e1:90:ec:89:
01:0c:e5:26:c2:54:73:2d:45:51:2d:6a:8a:56:06:
9c:86:38:6a:db:74:65:90:91:6b:2d:9b:02:2a:06:
05:db:ef:4e:f7:b8:17:84:30:da:2a:8a:bd:69:f0:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:5F:F6:0B:6A:56:6E:45:FD:0D:6B:AD:E6:3F:A2:E6:93:C9:53
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:44:34:d4:99:4d:89:8a:e0:9d:ce:14:5e:78:f1:e3:d1:27:
9f:aa:9d:ef:e5:b4:ec:ac:00:57:1a:86:04:95:52:09:5b:d5:
f8:1d:ab:55:cc:79:87:e3:76:f6:a5:9d:4f:52:31:c0:9b:d0:
03:cb:93:16:ca:13:1f:fd:86:8b:06:c7:1c:af:09:09:33:26:
00:e4:d3:6a:f5:d9:2e:32:8e:1a:16:58:cc:99:e5:0d:fc:73:
8b:f1:51:9b:3a:34:01:a0:12:d2:f5:f8:e8:a9:16:99:92:a2:
1e:5b:21:67:ba:20:e8:ca:8e:d2:45:28:e5:5a:eb:13:88:6c:
6a:ac:83:0b:16:ca:af:99:ad:aa:15:6b:4f:3f:f2:34:2d:ec:
5f:3c:f3:22:8c:e9:4d:3a:74:4a:f2:8c:e6:61:2c:34:54:d3:
70:e3:b0:b2:16:fc:fc:36:2a:7c:fe:16:0c:f7:87:fb:54:d7:
f1:a2:a6:c3:71:64:69:50:dd:2b:4c:8c:86:ea:fd:7f:21:5c:
98:da:86:75:4f:bb:76:a9:fc:fb:58:bb:5e:a1:0a:6d:7d:e1:
bb:ad:69:74:88:c4:8d:10:21:a8:04:00:53:4e:83:97:71:3f:
fe:78:ae:c2:8c:dd:80:41:77:7b:48:c2:a1:cf:69:58:d7:9c:
7c:44:c8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:19:57 2025 by rpki-client