Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
File: JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json)
Hash identifier: 2lcT7swIXRNPTybGxEpFMnJEd2Sf0WTy4tgPKlxGOQc=
Subject key identifier: FB:81:4F:FB:4B:03:CA:21:B0:A3:E5:B6:3D:4F:B8:43:CB:46:7E:CA
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Certificate issuer: /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial: 0196778CAD07B2679DC5AC182777EA02920A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
Manifest number: 02E8
Signing time: Sun 27 Apr 2025 14:00:29 +0000
Manifest this update: Sun 27 Apr 2025 14:00:29 +0000
Manifest next update: Mon 28 Apr 2025 14:00:29 +0000
Files and hashes: 1: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: aW+XKPLOV4p7KU9WirZn4KSp2j09m54ZrgbGBYKWzUE=)
2: hcERp-n1CdH9dpVt3PfnUZqY1zM.roa (hash: cu5zTSvQ8FcA7bEX+Ahl9PjJO9BlJ5Pb1ZUU2INhdXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:ad:07:b2:67:9d:c5:ac:18:27:77:ea:02:92:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Validity
Not Before: Apr 27 14:00:29 2025 GMT
Not After : Apr 28 14:00:29 2025 GMT
Subject: CN=fb814ffb4b03ca21b0a3e5b63d4fb843cb467eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:49:1b:da:8c:ab:9c:9d:6c:5b:a9:72:04:
80:40:65:69:3b:01:db:0e:60:3d:93:54:3f:6e:da:
4b:24:13:8f:04:ad:ae:50:c5:9c:6b:64:9c:d2:a8:
74:5b:7e:ad:71:1a:c2:72:68:dd:b4:b7:9d:2d:2d:
bf:19:fd:5b:89:9d:87:fe:96:3b:08:5c:0a:c2:83:
80:1b:ac:68:06:b4:18:3f:1f:76:55:29:d9:bf:91:
c8:76:de:e8:d5:1d:6a:9c:ab:a9:67:d4:77:87:8c:
18:90:fb:76:da:05:2f:dd:8b:be:84:55:09:cf:e5:
b9:d6:a5:4f:43:a6:53:01:13:3d:f9:d6:36:80:2e:
31:34:2a:89:22:f9:2e:b6:71:63:ee:8f:13:90:cb:
71:32:6d:e1:93:b8:a4:61:83:12:81:5b:ac:d3:1e:
b1:c6:d4:ba:ad:2c:e9:a6:6d:f8:9c:d6:dd:79:b1:
c7:5c:4a:27:db:0b:2f:da:7a:6b:2f:d1:b1:e3:48:
d1:59:6a:24:a3:be:49:70:66:45:0d:51:36:97:40:
6a:8a:8a:20:d4:35:d8:b0:f5:77:77:eb:70:5b:e1:
06:af:8c:cb:d2:42:dc:fc:76:70:a1:5e:62:42:7e:
ca:2a:95:cc:a7:02:dc:72:5d:bd:9d:03:06:be:ee:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:81:4F:FB:4B:03:CA:21:B0:A3:E5:B6:3D:4F:B8:43:CB:46:7E:CA
X509v3 Authority Key Identifier:
keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6b:24:e1:b0:62:ee:36:92:35:d6:b0:7f:18:97:74:af:57:
e5:37:26:36:ff:79:5e:8e:e7:ef:df:ae:5f:d4:5a:8c:ec:1d:
83:44:8e:36:4b:61:63:3b:9f:8b:f8:8c:ef:0f:b5:c1:56:d7:
49:92:50:6d:34:7d:37:73:53:49:1e:c5:8e:d8:5d:2f:a7:ce:
e6:e5:ae:ec:a0:0f:58:c3:7d:cb:eb:fb:a1:05:fa:e5:0d:f7:
28:bd:76:12:73:79:1c:b4:cb:b8:2b:91:bc:2b:83:c0:83:55:
69:b1:01:22:99:57:a5:82:59:3c:14:13:00:3f:1b:50:b2:46:
65:b8:b5:12:06:80:fc:92:3d:bd:b3:1e:b8:94:c9:9f:90:2d:
05:0b:15:84:d8:92:0f:82:26:b5:97:4f:a9:f3:01:a1:3b:a8:
f6:44:49:e8:48:7d:ea:f0:f8:9e:40:84:73:59:89:82:71:4e:
93:56:41:92:b5:9e:68:51:b5:84:d6:36:8b:f6:2d:c5:43:5a:
e2:ae:3c:2c:31:9a:34:9f:a5:79:a8:a0:f2:50:00:89:82:c1:
ff:26:c0:82:c9:d3:33:d3:90:8e:b9:55:02:9b:f9:87:cd:8f:
92:e2:3d:de:91:93:d4:de:cf:58:ae:aa:66:6b:bc:50:3e:bd:
15:26:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:55:23 2025 by rpki-client