Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: WTnkQ32jyZfTdQa8RYxhViOabcx6M54gOs09Y0r9GYA=
Subject key identifier: 55:1E:EB:85:12:1B:8F:1C:60:A1:1E:BC:17:EC:0F:AB:55:BC:1C:F7
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 01967E33A2F6B678064076E3C5A90015F2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 21:00:35 +0000
Manifest this update: Mon 28 Apr 2025 21:00:35 +0000
Manifest next update: Tue 29 Apr 2025 21:00:35 +0000
Files and hashes: 1: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (hash: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: uCX95cC4g0nybLE3KihWS4BYe7xT9qySvHxFg3Zu90U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:a2:f6:b6:78:06:40:76:e3:c5:a9:00:15:f2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Apr 28 21:00:35 2025 GMT
Not After : Apr 29 21:00:35 2025 GMT
Subject: CN=551eeb85121b8f1c60a11ebc17ec0fab55bc1cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:cd:a6:40:ba:54:7d:dd:e4:d0:20:3e:ed:
cb:bd:7b:85:39:0b:68:0b:2c:a4:f1:1d:76:15:88:
a0:98:2b:fd:2e:8c:44:bc:43:de:bb:ba:a8:ee:75:
38:c2:36:8b:5e:a4:47:85:dc:e0:8e:d4:5e:9b:98:
56:5a:48:ae:db:49:d4:a9:1a:d8:f0:2b:8b:3d:47:
51:36:4e:00:9b:6e:9b:c8:24:28:74:db:56:2b:90:
3b:95:95:f4:51:e5:c3:95:3d:0a:c8:82:6c:7f:65:
42:b0:46:30:92:f3:88:82:c9:36:6c:89:f0:3c:bd:
63:cc:97:b8:7b:23:71:05:91:19:92:ea:6a:48:1f:
a0:de:ff:21:3a:7e:2e:fc:a7:d2:8d:4f:d9:36:1a:
d6:3b:19:2c:27:e7:86:8a:b7:6f:46:a7:5c:6d:23:
a2:2f:f8:9b:e2:f0:b8:0b:36:45:81:bb:84:9b:40:
09:fb:2c:d9:03:c9:51:54:cf:ca:17:79:66:78:9d:
4e:94:dc:44:42:03:78:4a:5d:f9:9c:e2:bf:75:3a:
1b:6c:30:69:ed:6b:64:18:b1:0a:19:ef:cb:28:d1:
6d:22:6c:cd:f0:b8:f5:db:bc:eb:83:75:62:36:8d:
9f:d5:02:06:f1:87:27:08:27:ce:3c:76:28:18:18:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1E:EB:85:12:1B:8F:1C:60:A1:1E:BC:17:EC:0F:AB:55:BC:1C:F7
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:73:9b:c6:5e:45:1c:14:59:d7:2c:5f:b7:17:50:19:38:ab:
82:8b:5c:ec:95:c5:58:41:58:a0:67:3e:60:78:2d:3b:a4:d0:
bb:63:1b:8a:1f:2d:17:01:7a:07:c7:d8:46:a8:2d:6d:a3:d6:
a1:13:ee:2d:d0:c4:ef:9b:9d:95:22:ea:66:5b:d5:2c:88:ad:
ba:fc:61:3a:5d:db:d9:d2:9b:8f:2e:7c:a6:73:14:bf:aa:2e:
ed:8c:17:a7:5f:99:87:03:39:75:a9:d7:0b:33:67:10:8d:d6:
6c:60:7d:30:72:16:53:9b:ae:75:51:d2:f2:5f:59:f2:7e:c6:
f4:a1:e8:32:0c:80:74:0c:68:86:d7:a5:4a:8e:3c:57:e3:06:
48:0c:46:b0:e4:1e:69:ee:02:9e:5b:99:23:ea:d6:53:1d:62:
19:3a:6a:48:0a:36:fa:f6:c0:6c:f7:12:ae:06:21:50:f4:14:
93:11:fb:b3:37:f7:d3:3b:ba:cf:1d:47:bf:1f:f7:fb:4d:e4:
e9:9f:92:fb:69:26:0e:f2:83:d2:f9:c3:14:20:cf:15:27:0f:
0a:64:7c:75:15:99:35:57:3f:14:00:a7:3e:f2:0b:21:f0:df:
f4:d5:6f:7a:19:02:dc:f3:3e:49:c9:77:be:8f:27:df:4c:a1:
ce:3f:f5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:47 2025 by rpki-client