Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File: jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier: CHy+rqF1/u26pmunxsAyjhVfR9QEYxreq/PufodpE+g=
Subject key identifier: 2E:89:AA:AC:F7:94:8F:97:AA:8C:55:C9:B1:F7:76:50:B6:F6:51:3D
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 019675D53163D7FA5AC7EE7DB8C62884EC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 06:00:28 +0000
Manifest this update: Sun 27 Apr 2025 06:00:28 +0000
Manifest next update: Mon 28 Apr 2025 06:00:28 +0000
Files and hashes: 1: grXRQpT1aZeaC-n0N849AfZZ_V4.roa (hash: x7JYnVR7QlEIld9EwbA1Mq0qnt4Qvkq7/cYHdkassRc=)
2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: CaWmCF26Pvcz0WPjNKF/awrm0NWHyHDQXLmUBoqaR/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:31:63:d7:fa:5a:c7:ee:7d:b8:c6:28:84:ec:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Apr 27 06:00:28 2025 GMT
Not After : Apr 28 06:00:28 2025 GMT
Subject: CN=2e89aaacf7948f97aa8c55c9b1f77650b6f6513d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:6c:f6:fc:62:24:5d:67:63:00:67:55:4c:
92:d3:cc:87:e4:6e:e0:70:bb:7a:c7:36:2e:ce:9a:
cc:60:a3:c0:7b:ea:2f:e6:01:12:84:af:09:63:57:
63:5f:fc:e9:21:77:07:29:70:d7:ec:d0:42:21:36:
1e:9d:b0:9f:ea:1c:5c:e3:f6:41:a6:7e:5f:09:5f:
4a:9b:f0:01:0a:ab:f9:a4:fa:5f:c4:43:44:91:2e:
2a:da:5a:5c:58:14:21:ef:99:b2:f1:45:d0:03:3a:
57:e7:25:7b:85:24:10:97:40:24:0f:10:de:f7:3d:
5d:00:50:20:d5:8f:d1:6c:07:49:7b:1e:02:dc:d3:
25:1c:f5:bd:c6:26:39:67:7e:52:1e:09:db:8f:9f:
7c:be:08:ff:42:7d:0b:4c:87:2f:13:94:b9:11:1a:
a9:40:de:68:3b:7d:39:95:50:39:06:b4:6b:ce:78:
02:9e:f6:e9:60:b1:74:48:21:e9:35:91:13:77:8a:
05:9e:42:33:30:e6:5f:fa:1c:6d:20:28:b7:c1:c0:
9e:06:a4:73:d1:e9:4d:0e:cd:8d:a7:56:de:a2:4a:
c3:2a:20:10:9a:f8:6f:44:36:b4:66:9a:f6:ab:16:
ba:cb:77:9d:0e:12:a5:c1:2e:8c:34:a6:3b:61:3c:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:89:AA:AC:F7:94:8F:97:AA:8C:55:C9:B1:F7:76:50:B6:F6:51:3D
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f6:9b:39:b2:56:05:d2:9e:ca:f5:66:80:d8:08:db:2a:51:
09:10:81:03:a4:45:a2:1c:8f:e3:a8:a4:c1:e6:3d:3b:a5:82:
ca:ce:eb:22:c4:25:74:4d:bd:ba:fd:ae:4b:dc:9a:a0:8d:3f:
a1:68:91:0c:2a:2b:49:2f:53:38:75:15:80:e1:36:5d:5d:1e:
34:0d:c6:21:c0:ca:a3:c8:cd:41:3e:e7:92:95:6e:60:68:36:
aa:3f:13:93:15:35:1a:3b:52:c5:46:73:43:f1:f3:62:b8:ec:
3d:16:97:67:af:47:67:ba:64:72:74:af:29:c9:b1:60:2a:c7:
a5:bd:04:e3:f7:00:8d:e9:df:d9:19:fe:85:70:3e:78:d7:98:
e0:7f:6e:8b:cc:f7:ec:a6:8c:51:1b:f8:a5:f7:fd:7f:9a:cf:
2d:87:cb:1a:66:c4:15:6a:ec:90:34:6e:67:9d:8c:67:a5:ca:
7a:1a:31:10:da:fe:9b:29:d0:b3:ee:b1:ba:2e:e4:8f:9c:1a:
4f:67:69:87:5e:24:4c:df:04:27:e0:7b:29:8e:a1:87:17:ea:
ca:5a:b5:cc:40:74:3e:7c:f4:c3:a8:dd:24:e9:fb:d7:3e:33:
55:dc:b5:60:1c:60:c9:0a:fe:23:bb:97:18:20:94:21:25:87:
d8:96:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:07 2025 by rpki-client