Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
File: 5_JhNIMO4g3CKYbcinNm0JcrKTA.mft (raw, json)
Hash identifier: dSp+PZsXQf3XHXyuRLam+YPfR6RCpEEhayNUrkCDTik=
Subject key identifier: A1:76:07:61:B1:DF:8B:17:75:39:68:CA:44:0B:57:0B:26:5B:9B:C9
Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
Certificate issuer: /CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Certificate serial: 019679446084276D0EA6B919740C4D6EA543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
Manifest number: 0842
Signing time: Sun 27 Apr 2025 22:00:46 +0000
Manifest this update: Sun 27 Apr 2025 22:00:46 +0000
Manifest next update: Mon 28 Apr 2025 22:00:46 +0000
Files and hashes: 1: 03YOknvLzuLtecipQHEM9oUgfnY.roa (hash: Y9pc0KjN0jtXN7PMd6pV/+HMwsV4kn+UyMORZ9TrI7A=)
2: 5_JhNIMO4g3CKYbcinNm0JcrKTA.crl (hash: /jnvfA9q1hNXhFVCkbGE3SlbWveoBu0LWpz1WN+oc1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:60:84:27:6d:0e:a6:b9:19:74:0c:4d:6e:a5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Validity
Not Before: Apr 27 22:00:46 2025 GMT
Not After : Apr 28 22:00:46 2025 GMT
Subject: CN=a1760761b1df8b17753968ca440b570b265b9bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:80:d6:5f:ed:e4:b3:a5:b1:ff:d0:32:d8:
46:66:31:d7:ac:ea:76:3d:49:05:19:c8:dc:09:6b:
ec:53:ae:08:14:18:e9:a6:74:57:9a:be:5a:3c:3a:
fe:92:34:e2:0f:51:0d:0a:87:49:b3:3c:f4:77:65:
11:cd:9f:94:12:d5:5c:8f:30:07:81:94:65:d0:44:
ca:2a:d1:d2:85:eb:58:1d:94:2b:7c:b9:b7:d1:a4:
0f:ff:2c:6c:55:f3:7f:c8:cb:0f:1f:bb:0e:55:9e:
21:39:22:cf:93:81:c2:29:2e:01:44:9e:b1:27:3c:
68:6c:8f:d2:fc:88:9c:07:17:d0:93:fc:cf:e2:e7:
72:24:c9:df:87:78:ca:80:56:3d:1b:59:db:45:7d:
6c:83:e6:38:62:32:b5:45:19:85:e2:ad:98:67:33:
d2:48:82:5f:00:f6:04:c9:6e:6f:1c:20:c8:af:6c:
8e:ef:50:6e:df:d9:c3:84:a1:a5:e6:ac:91:0c:c5:
74:78:55:85:90:f8:ce:a6:e8:44:62:1c:d2:fa:dd:
72:d0:f2:d5:17:37:aa:31:3c:80:62:85:f0:87:59:
30:58:4a:89:f2:95:26:a5:15:36:13:90:fa:54:97:
99:c9:2d:df:c3:06:84:90:58:30:b9:38:df:3e:ad:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:76:07:61:B1:DF:8B:17:75:39:68:CA:44:0B:57:0B:26:5B:9B:C9
X509v3 Authority Key Identifier:
keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:76:1f:6e:d7:52:38:e5:57:2b:89:24:92:1b:68:78:d6:37:
f3:f7:03:cf:a8:40:21:1a:ca:39:ec:68:33:45:0a:77:bd:93:
11:fa:3a:b7:79:03:b8:c9:9c:b1:ef:03:b8:b4:9e:0a:a8:a0:
0f:96:df:d3:c7:13:f3:07:fb:df:13:70:a0:94:e1:61:dd:08:
1c:6f:da:33:09:97:0f:ba:ba:9d:6c:15:8c:39:41:c8:96:37:
9f:60:82:2d:f1:68:35:0d:a8:39:59:d9:5f:5b:cc:87:82:ef:
8b:68:bd:45:00:e5:d6:c3:91:75:74:4e:72:61:92:b8:0e:c7:
0f:ac:7b:1b:6b:5c:c1:cb:6b:8c:04:ed:c4:86:13:f0:ba:cd:
b8:5e:51:dd:76:28:79:72:75:54:12:56:b4:b5:26:11:46:ba:
53:27:31:1a:89:49:24:7c:07:23:2d:7c:fc:e2:13:ca:d8:b1:
80:13:a9:f7:82:48:bf:b4:4f:a6:f7:6f:46:da:b2:8e:36:81:
a0:a8:22:0a:b8:52:c3:58:7c:9b:97:69:42:71:b5:da:fb:49:
47:a6:3c:62:1a:5c:f3:af:c2:44:e2:bd:4c:64:35:47:49:67:
e7:3e:0f:81:fa:e9:e9:8a:98:8d:bb:b5:6d:17:8c:e3:a8:26:
70:fb:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:54:56 2025 by rpki-client