Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
File: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft (raw, json)
Hash identifier: mTbLSH5YUHbqzZxE5JuihyVHRx8POH5Dr/n2uokiUAQ=
Subject key identifier: 4D:76:74:DE:AF:F6:C5:13:D0:C9:86:4E:6F:C3:BD:66:58:2F:2E:46
Authority key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2
Certificate issuer: /CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
Certificate serial: 019680FDE4CB94DC9AF30D96CBABF7B4C407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 10:00:44 +0000
Manifest this update: Tue 29 Apr 2025 10:00:44 +0000
Manifest next update: Wed 30 Apr 2025 10:00:44 +0000
Files and hashes: 1: F7MJ36J0uiDKy-M_vXjmJdbP4fs.roa (hash: 8zleOD6aN/r+slAEa8mt1l5gM5SF8gtFDMiJe9eHZeU=)
2: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl (hash: UOBBCOu20NGbKRDO795M30TE3WnTkRpC6peZtnu4+Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:e4:cb:94:dc:9a:f3:0d:96:cb:ab:f7:b4:c4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
Validity
Not Before: Apr 29 10:00:44 2025 GMT
Not After : Apr 30 10:00:44 2025 GMT
Subject: CN=4d7674deaff6c513d0c9864e6fc3bd66582f2e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:b6:d6:ab:5a:bf:7c:37:bd:de:0a:e4:34:
1f:56:8e:bd:d7:31:98:3b:8b:68:b5:c0:86:09:60:
ca:18:ed:af:57:74:8f:9d:51:8b:27:b1:5d:a6:4b:
9c:df:94:a2:dc:b0:25:c9:68:c2:9f:7c:dd:84:55:
47:ac:5e:18:60:98:38:aa:ab:91:54:5f:64:12:b4:
33:76:45:9d:49:56:0b:71:a3:46:9a:08:a8:aa:0c:
7f:2c:7a:50:d7:8c:59:fc:12:9d:c0:52:e2:5c:43:
3c:cc:8f:dc:fc:eb:50:e9:26:f3:b1:a4:69:15:ab:
8c:88:30:24:bd:b0:1b:b1:23:d3:28:7a:0d:14:7e:
0e:28:c5:ba:cc:08:a5:cf:89:ec:00:ff:d9:f9:74:
1a:7a:5e:34:be:00:39:85:53:07:ff:7f:75:3b:0c:
d5:6f:da:7a:ec:8b:67:ab:09:40:08:d3:41:b6:8c:
cc:e1:7f:43:3e:fa:a8:97:1d:b5:46:96:61:2b:2d:
28:59:4a:e3:15:83:81:47:ce:72:81:6a:bc:dd:da:
a0:05:50:e7:95:4b:5b:f6:1c:4e:01:3d:5e:f7:b4:
d3:9a:56:66:1c:34:52:a7:e9:1d:fa:65:30:37:28:
d6:90:32:c6:29:a2:13:f3:43:d0:2b:78:c6:40:e8:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:76:74:DE:AF:F6:C5:13:D0:C9:86:4E:6F:C3:BD:66:58:2F:2E:46
X509v3 Authority Key Identifier:
keyid:27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ba:a5:34:5d:04:14:ce:1c:0f:04:cb:46:bb:9e:c3:a0:5d:
db:a2:73:b7:22:12:d7:a3:fd:10:df:2d:8f:0a:68:3c:0e:cb:
58:c8:af:9a:c6:af:df:0e:1b:e0:f8:d1:08:c6:fc:48:e8:b8:
ae:0a:8d:40:f4:37:c0:e6:bd:86:78:38:28:60:57:d0:b8:62:
06:5e:ba:cf:48:90:2a:2a:6a:f6:8d:2f:95:0b:22:53:0a:61:
11:9e:f9:63:89:4a:8a:21:f0:4e:3a:d3:e2:21:ad:fe:56:28:
de:51:5b:ba:ad:f7:64:9d:87:9a:2c:ff:78:cb:bd:6e:f6:a2:
4e:df:46:d8:eb:29:54:65:59:24:84:99:ff:1c:be:b3:07:97:
42:6a:d1:f2:3e:14:3b:47:c9:55:b0:fb:2f:a3:88:66:1a:f3:
43:e0:1c:33:fb:3f:f1:48:7c:46:ae:bb:71:7e:f8:77:6a:4a:
67:8c:4e:dd:cd:54:d2:78:71:6a:bf:a5:cc:8c:7e:51:d1:3a:
c9:ab:ff:ff:eb:a9:19:3d:0f:b6:19:8e:d6:51:71:c7:a2:e8:
ee:47:69:66:2d:05:98:0f:1b:ce:44:94:12:a5:7c:a4:88:fb:
59:7f:91:e5:b9:b0:62:5d:99:d7:db:22:56:65:4a:ec:36:f9:
1d:c4:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:22:39 2025 by rpki-client