Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
File: JHQF6c7jnXGUTV4xSesBth-a2x4.mft (raw, json)
Hash identifier: 1u3ZUgf4vs1SrE8eekxMjDLggEfpHyjvPUX23Mqw90M=
Subject key identifier: 46:D2:48:DD:7D:4B:77:7E:72:83:64:CD:64:AD:89:4A:BF:20:6B:5D
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 01967378DAFACE0251C9AE42B300D7FE4A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
Manifest number: 101A
Signing time: Sat 26 Apr 2025 19:00:22 +0000
Manifest this update: Sat 26 Apr 2025 19:00:22 +0000
Manifest next update: Sun 27 Apr 2025 19:00:22 +0000
Files and hashes: 1: 0MRJhU0Qnhazf3uEIVGNielpVjo.roa (hash: QbTItXwb+MhiN+jNSFdFEHfTLMbgundvD0ftmWJwj5k=)
2: Ab1tskS4Q67Z2YctzJLxqj53W9g.roa (hash: AZCXpUJa1dgUBTX+Q3S9ZNI6U7aZKWGmwFCH40STagc=)
3: JHQF6c7jnXGUTV4xSesBth-a2x4.crl (hash: 51U8/3QSd/jm6aoyURnj7bamz08j8y+M3S/RxuQHifo=)
4: ZwMecEU89iNwlEPNMqqdNK21CRk.roa (hash: FTqQ+R8RJ6dWUyPAN/1xgiMPp5vc51aB62sTFqdJ7bA=)
5: f_0cBwbRlTos3u7H8bwrPKcXUN8.roa (hash: xaHHsjfR8A17jN6pVVS9xdai2iZp05T7G1TibqlcLQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:78:da:fa:ce:02:51:c9:ae:42:b3:00:d7:fe:4a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Apr 26 19:00:22 2025 GMT
Not After : Apr 27 19:00:22 2025 GMT
Subject: CN=46d248dd7d4b777e728364cd64ad894abf206b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fc:49:a6:b3:06:9a:82:bb:49:37:72:69:49:
0f:e4:0a:65:23:7c:94:8e:09:34:14:66:1d:62:3f:
19:d3:2f:fc:be:a2:32:b5:6b:eb:4e:77:63:9e:0b:
bf:ff:69:f1:ce:dd:c4:c3:4e:76:ec:7f:e9:0a:87:
aa:90:f7:7f:53:f9:63:d4:e9:38:52:8d:83:bd:f7:
71:d9:3c:f1:09:20:2c:a9:f5:f2:93:21:05:24:d7:
b9:5a:76:68:77:00:71:fc:07:1f:24:e4:02:ba:ea:
ab:0a:14:b1:e6:ad:a9:50:2e:1d:28:11:20:69:1e:
52:bb:e5:e0:b4:00:42:0d:ad:6a:cf:96:78:f1:90:
76:0c:9c:89:86:23:38:82:fc:7f:a2:d0:31:01:cc:
0f:58:ba:6a:d4:a4:7d:6b:e0:9e:da:70:3f:13:c0:
00:6d:7d:da:a2:5b:0f:e1:5e:8e:72:b7:79:58:69:
76:35:a9:b8:a1:b7:04:da:4d:f9:1b:85:a2:7f:dc:
70:4f:8f:db:6f:00:a0:06:21:fd:c2:a3:2b:23:09:
c7:9d:4d:00:5c:a0:2e:2d:85:98:ed:f2:82:49:96:
e1:eb:0d:bc:89:70:69:99:df:5f:f1:4b:33:48:90:
fe:d5:be:02:1b:76:56:c2:93:1b:de:24:89:22:c3:
e9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D2:48:DD:7D:4B:77:7E:72:83:64:CD:64:AD:89:4A:BF:20:6B:5D
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:e3:3c:87:b2:02:65:f2:ed:66:20:8f:31:90:8c:4d:98:ed:
1b:31:fd:9c:3f:b1:cb:f7:0d:17:70:1c:45:b0:cb:43:f2:a7:
de:b3:88:4f:17:80:31:cc:d0:40:57:5c:ca:17:fc:06:a1:fc:
f1:22:62:22:ef:63:d4:26:a0:f2:3d:d3:b8:7c:c6:9d:ea:5c:
2a:15:69:80:59:56:48:e4:29:1f:75:69:24:fb:fc:93:04:07:
b6:51:6c:d9:a5:6c:1a:f7:ec:e6:9e:28:73:19:78:c0:d1:27:
89:fa:16:3f:c6:0c:96:2f:53:48:41:02:0d:2d:ba:4b:9c:28:
47:b7:a9:6a:5d:18:2a:13:1d:b2:e9:1d:00:0f:93:4a:e0:36:
16:81:e0:5b:a3:4b:67:08:c6:9a:c5:b3:c9:83:91:09:97:61:
a3:54:2b:70:8d:fa:fc:41:41:fd:26:dd:31:40:25:da:33:93:
3e:83:31:5d:f1:fc:cd:d3:0e:e5:b5:c8:3f:69:88:f6:ca:df:
2a:a2:c1:f7:b1:81:9d:3b:9d:8f:5d:7b:20:e6:2a:e9:14:fe:
37:eb:a7:35:67:5b:84:cd:d5:8b:c7:84:c2:b3:58:b3:2f:33:
28:b7:6a:f9:a1:61:2c:33:5c:17:5a:4b:eb:04:95:b8:5c:95:
40:8a:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:01:33 2025 by rpki-client