Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File: jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier: byG9pWe/lkqwPhfpWg/zvGAoA7xqna9zwHp4mVc8e3s=
Subject key identifier: 2B:85:DF:4B:A6:1B:C8:11:37:6C:40:CD:4D:B7:C3:D7:EC:D7:BD:38
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 0196C1CB0DF5969A10F50456F4F46375C261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 00:00:32 +0000
Manifest this update: Mon 12 May 2025 00:00:32 +0000
Manifest next update: Tue 13 May 2025 00:00:32 +0000
Files and hashes: 1: Zwk791BjXFiWW_GWZuipoheVevk.roa (hash: 98bTEWSKCgsr9ScLAh15mZ7s1p9cPoDYzZZ0PPizWyo=)
2: ebKQop9j6C8Jd62F7ue25JuDgWs.roa (hash: FqOT4Eu6V5AfcUcuw2gXk+K+VJY6kHg+9mF4TAN1HTA=)
3: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: aLCCA/xAgsaXiMjh2PB9aaIMRuj2g2ppBHt9+ElLNJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:0d:f5:96:9a:10:f5:04:56:f4:f4:63:75:c2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: May 12 00:00:32 2025 GMT
Not After : May 13 00:00:32 2025 GMT
Subject: CN=2b85df4ba61bc811376c40cd4db7c3d7ecd7bd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:fc:21:78:be:a6:64:69:5d:c4:85:45:fb:
0c:91:92:2c:b5:aa:17:34:6f:1e:af:13:25:79:79:
5f:48:f8:0d:99:c9:18:c2:c1:e6:d0:d5:e0:3d:0a:
a7:4b:f8:6b:59:10:ab:2e:e8:27:f2:5d:ee:37:47:
58:fd:33:c5:48:e7:4d:e7:fe:f2:15:50:7a:23:4f:
5a:22:43:47:d4:13:12:ec:0f:85:2c:3a:2f:c0:8f:
b2:3c:16:ec:a8:9b:37:d6:b0:50:aa:de:2d:35:41:
23:a5:a3:ef:d5:4a:64:31:9a:26:d9:27:4a:8b:53:
74:a4:2a:43:bf:6e:60:9c:2c:59:de:95:3b:f2:a2:
db:59:26:82:53:d2:f7:83:ed:9d:65:06:f5:56:4a:
66:5d:dd:b1:54:63:52:09:c7:5e:8f:1e:c4:d2:b2:
c4:a6:33:8e:db:ce:3d:af:64:57:7a:19:57:f7:b4:
9b:8e:b4:c1:7a:43:0d:f1:56:d5:22:cd:04:bd:fc:
b5:99:e2:0a:cc:ae:cd:c1:5b:da:be:bf:96:a5:c4:
3a:dd:c9:46:35:26:42:c3:fa:b3:a9:c9:aa:30:c4:
1a:2a:db:2a:5a:1f:40:79:a0:9b:e5:e2:5c:2b:7d:
48:c4:74:0f:4b:56:a9:a7:2d:53:f3:5b:d7:70:e9:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:DF:4B:A6:1B:C8:11:37:6C:40:CD:4D:B7:C3:D7:EC:D7:BD:38
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:29:ab:8a:79:05:4b:2d:f4:5b:25:1c:03:5f:ec:f5:f3:d2:
06:d1:a7:b4:ae:92:9b:ff:a5:81:e0:19:88:e7:91:ce:88:95:
80:90:1e:31:d9:4a:57:77:d0:35:1d:1c:ef:37:5c:b5:ab:46:
9d:82:56:61:01:b1:44:51:fb:70:de:7b:b4:52:e1:64:61:d6:
e8:8f:7d:8c:17:35:92:60:6b:e1:7b:cc:dc:ed:84:f0:44:67:
f8:be:11:f4:f2:4b:14:61:0a:e0:1f:cb:a7:ca:0f:8e:fc:1c:
63:1d:1f:f9:e2:7c:6e:5d:6d:aa:2a:04:3b:73:98:cf:3f:ed:
07:36:f0:5b:33:38:d8:be:1d:0c:b1:40:be:0f:0d:5e:02:77:
45:dd:a7:0e:8c:9d:b2:83:88:c5:5a:3c:87:9e:8a:05:85:af:
6e:12:36:ab:e0:27:b7:e4:03:a0:7b:18:1c:34:62:83:3c:45:
c3:bf:2e:5a:9c:89:ec:f8:26:56:e6:de:7e:06:73:fd:9e:d9:
40:00:b0:2e:0c:8c:cd:3f:b0:9e:6f:24:3b:2b:5e:f7:22:8a:
c5:d0:f1:ec:dc:0f:c6:84:31:ca:de:65:f3:12:63:28:c6:b2:
f6:b9:ec:52:d2:18:94:36:d4:e8:73:d8:d4:70:eb:e5:c5:42:
a2:64:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:50:16 2025 by rpki-client