Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: 59ZPV8xur9WsWXkaSU39atcYL6uOUmAlugUOZ7UGjUY=
Subject key identifier: 6F:34:1D:34:B0:73:0D:C9:47:32:94:EE:91:52:AB:E4:BE:BF:07:F9
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 01967E6ADCA61E1B87DBE82B4867ED16F5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: 0189
Signing time: Mon 28 Apr 2025 22:00:54 +0000
Manifest this update: Mon 28 Apr 2025 22:00:54 +0000
Manifest next update: Tue 29 Apr 2025 22:00:54 +0000
Files and hashes: 1: NFgVIk3I0OB4aAQE--Yl_E4ZfQE.roa (hash: tZx/juHJjFsZtx/TprO+Ju+VpXMKoq0o38hFCwQ+O44=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: 8G/mCIOzQZQYuSgsYbaPjGiaBNsXztJa+uXQsZfudd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:dc:a6:1e:1b:87:db:e8:2b:48:67:ed:16:f5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Apr 28 22:00:54 2025 GMT
Not After : Apr 29 22:00:54 2025 GMT
Subject: CN=6f341d34b0730dc9473294ee9152abe4bebf07f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:59:8f:a1:8f:9f:da:8d:07:b8:be:7f:87:
21:13:8c:ad:8e:16:a5:6d:39:61:65:dd:68:58:9f:
df:1a:20:68:62:86:06:82:ab:30:fb:f0:28:31:3c:
d8:cb:d6:b0:46:e5:c1:21:7e:e1:42:b8:ab:c9:ff:
e3:b2:51:5a:7e:5d:cc:20:24:35:c9:e0:07:f8:14:
73:92:36:05:3f:20:92:fc:c6:b5:7b:fe:82:f7:da:
a0:2e:08:f1:dd:4f:09:58:56:8e:45:74:b4:a9:50:
b8:a5:1e:6a:8d:db:fe:28:42:7f:f8:d7:5e:5d:05:
e9:f3:6b:2f:90:de:e7:fa:b2:be:d2:0b:d4:98:32:
af:ba:9a:af:71:3d:e5:cc:de:6c:51:56:d6:ac:bd:
20:f2:0c:fd:50:1b:62:b7:9c:52:f6:fe:5f:a0:37:
bb:db:02:02:36:7f:1f:79:78:f8:fa:2f:67:ac:39:
64:03:33:60:a7:2c:24:23:a9:9a:60:59:d3:4c:ab:
2d:da:66:0e:79:89:46:73:e1:a1:7a:9b:a0:66:a3:
a7:22:61:68:0a:46:26:52:90:e4:b0:4a:46:a4:a8:
62:f4:7a:18:b4:eb:a3:39:6e:65:a6:31:55:dd:a8:
fa:18:0d:92:31:36:df:03:76:0d:e3:19:f7:eb:b4:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:34:1D:34:B0:73:0D:C9:47:32:94:EE:91:52:AB:E4:BE:BF:07:F9
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:99:72:a2:b6:a6:6d:e9:ed:87:f0:a2:3e:6a:b3:9e:fc:48:
ff:16:fd:30:51:48:55:e7:9e:a9:90:8c:8f:f4:e1:90:bf:34:
fe:5f:e8:17:68:07:44:68:fe:70:05:5c:4a:05:69:13:4f:ad:
e4:04:95:48:23:1f:fd:ac:d9:d2:49:76:4f:c2:39:36:52:16:
b8:20:7e:0e:27:52:b4:bf:3e:e3:ce:d2:5c:d5:15:9b:e0:8a:
43:2f:ec:20:06:c0:f3:91:58:bd:ef:7a:f6:45:51:ec:3c:25:
c8:85:a6:08:47:74:dc:a8:9a:11:be:ba:06:5f:66:42:ed:79:
81:b2:9e:72:5d:75:2f:aa:81:6e:5b:5b:56:0a:6c:36:9a:8d:
c5:78:20:a7:42:16:a2:ab:eb:1b:88:0a:2d:a5:7c:41:86:1a:
b4:7d:f1:77:ee:84:37:2a:d1:a8:9f:48:56:87:f3:5c:a6:44:
a9:9b:3e:5a:df:02:df:b0:15:ff:fb:17:4a:63:9c:94:02:1c:
21:d7:a7:7e:0c:a2:ba:ab:e6:2a:80:c7:bf:1e:96:4e:b8:49:
45:eb:f6:33:98:63:72:92:f0:99:c1:20:8e:27:9f:90:dc:85:
e6:fb:70:cc:07:82:68:cc:33:ee:69:3f:c9:17:65:70:2b:71:
b3:e9:82:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:27:11 2025 by rpki-client