Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
File: j7YgpIOO9uIbzCatNRJi11ZusnU.mft (raw, json)
Hash identifier: /Glqu5tFPC0Q5dJ4MUGCWVvCCe/WXXkOwaAjiJonyqk=
Subject key identifier: 33:46:C5:B3:E0:A0:7B:65:76:99:56:27:A2:44:E2:8C:5C:B4:40:46
Authority key identifier: 8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
Certificate issuer: /CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Certificate serial: 01968F5E4783C5A7F227DDEF58A12D327705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 05:00:42 +0000
Manifest this update: Fri 02 May 2025 05:00:42 +0000
Manifest next update: Sat 03 May 2025 05:00:42 +0000
Files and hashes: 1: STLMqI9B0bmg1HnzIFgocG7Jchs.roa (hash: nUpzGifMhuTClZtTuwuW+kY+JzHd2eUa3fEsyXVesAc=)
2: cOhtow46e90nlng9i61VmuKnZMk.roa (hash: 9ntslscCHsPGSEl0s6DMTT/r9BfyLOJ9a2yKRC4G0hw=)
3: j7YgpIOO9uIbzCatNRJi11ZusnU.crl (hash: EDipOnsRSHP/8GRBdTeJTJf6wPdMsCQtzU2fpMkhN3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:5e:47:83:c5:a7:f2:27:dd:ef:58:a1:2d:32:77:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Validity
Not Before: May 2 05:00:42 2025 GMT
Not After : May 3 05:00:42 2025 GMT
Subject: CN=3346c5b3e0a07b6576995627a244e28c5cb44046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:4f:ee:c0:91:9e:1d:b6:cf:4f:b1:01:f3:
76:90:02:df:56:4e:40:d9:d8:bd:74:69:03:79:03:
e7:11:6b:c5:0c:1f:c2:72:cf:44:fd:9e:3b:13:e0:
5e:2f:f9:d5:85:44:b1:91:34:4e:2d:72:4a:40:da:
9a:53:f7:e2:da:71:5d:5b:f5:ef:47:a5:33:3c:df:
f7:50:5c:1a:e0:64:12:26:ad:ab:b1:63:01:8f:6c:
b2:b7:c7:25:d9:1a:99:cb:96:24:19:0a:f5:6d:89:
9d:68:ce:9d:d5:e7:38:85:3c:58:48:39:6d:ca:19:
a0:10:0e:a2:37:d4:cf:78:9a:fe:52:d3:07:d5:5e:
12:32:80:b2:a4:3b:53:da:69:c8:5f:c7:63:39:8a:
ab:e8:da:34:cb:73:d8:79:bf:06:82:6f:2b:15:19:
2e:fc:f1:ed:eb:7b:7a:63:55:e5:1c:45:2b:4b:bf:
f4:66:40:7a:f0:bd:d9:9f:1b:f4:c6:5a:e6:58:c9:
8a:f1:56:b7:2d:6b:12:b8:a2:3a:4d:d2:c4:e5:ec:
40:20:74:cb:ea:39:ce:69:02:b2:6c:92:3c:3d:98:
10:e6:b6:7e:46:b3:e6:a3:62:3d:53:5e:4d:46:d4:
ae:bf:88:d4:e0:25:7a:d5:49:94:d3:a2:48:f9:a4:
5c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:46:C5:B3:E0:A0:7B:65:76:99:56:27:A2:44:E2:8C:5C:B4:40:46
X509v3 Authority Key Identifier:
keyid:8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f8:ec:b9:5a:79:bf:cb:45:8f:c4:9a:ff:ac:6a:17:ce:2f:
46:b4:2f:ae:01:d2:c5:0c:7d:9d:ed:cb:a4:75:71:19:90:d1:
47:a3:90:2e:b6:ca:3d:29:63:bf:43:60:f4:c9:86:c6:33:83:
37:b5:04:f6:b8:2f:8f:88:63:c6:30:b9:ec:41:04:bc:b1:6c:
72:be:bc:bf:08:3f:61:bc:ca:6c:c7:72:10:d2:d3:89:6c:6d:
78:10:f2:0f:b6:66:e8:9b:95:53:bc:db:5c:01:1a:91:26:0e:
d1:60:51:02:f7:09:3a:6e:af:83:dc:4f:b9:ee:ad:cf:ac:89:
d5:7e:d5:ba:21:68:a7:26:8b:32:31:e5:9e:4a:c2:72:d3:4b:
22:18:33:07:f3:ba:4c:e8:41:00:b4:87:90:22:98:00:bf:d8:
60:d8:fa:3a:e4:9c:0b:68:4c:e1:e2:7e:6b:2e:b3:39:b3:da:
c1:1b:ff:98:37:22:91:6f:b1:ff:ce:94:0c:c2:f0:4b:f7:70:
fe:82:49:c0:e3:f9:be:3a:09:15:57:f4:1a:8c:c8:8b:80:6a:
df:ae:4a:b1:47:ef:d2:a2:a5:dc:61:b8:d8:bc:66:83:d2:77:
e7:db:44:84:f4:30:d2:43:04:55:d4:d2:19:05:f4:14:98:4d:
f5:cf:59:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:07:23 2025 by rpki-client