Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: ZFThIVeckct9Hj3qD5xmU6r05NzaWtuco0pT4CmA1mU=
Subject key identifier: D0:77:91:E8:D8:67:68:A9:50:52:84:E2:9B:40:E3:C8:96:66:7E:BF
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 019674FA2A7B309DCD93E108C72DEC53B90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 0ECC
Signing time: Sun 27 Apr 2025 02:01:13 +0000
Manifest this update: Sun 27 Apr 2025 02:01:13 +0000
Manifest next update: Mon 28 Apr 2025 02:01:13 +0000
Files and hashes: 1: 1-VympxjBDWi5MNPd5PqkAiFK8cw.roa (hash: g9oAglIOu05tbBj4MBirO8ol3RXV21sLtMa1CGtPD7w=)
2: RJkO8AUrZrMkwWrIpOKAj9ZRQns.roa (hash: DMl9U1g0NhHcsK5udeo5/s32paUDRQXnGqAqFKyzYXk=)
3: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: M0R/tf6nDescKcq/Xq1ZIaDjyRsqgQryA2lmQLMTyaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:2a:7b:30:9d:cd:93:e1:08:c7:2d:ec:53:b9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Apr 27 02:01:13 2025 GMT
Not After : Apr 28 02:01:13 2025 GMT
Subject: CN=d07791e8d86768a9505284e29b40e3c896667ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:49:25:c3:e6:6d:93:6c:22:6b:24:22:02:
04:e8:09:c2:8f:ad:7d:78:0a:eb:e9:80:9c:6b:98:
bc:fb:8c:6e:b1:39:92:8b:4b:7b:3b:2e:e9:bf:c0:
c7:f5:92:06:d1:01:3f:61:f3:a9:40:f6:6b:26:2c:
0d:75:fd:f0:1d:59:7e:1a:23:30:23:aa:b4:a6:f4:
c2:3a:90:8c:bd:17:56:69:58:25:03:15:e3:31:13:
33:90:02:c8:b1:ad:cf:83:6a:4d:e4:1f:f9:8e:8c:
9a:aa:e9:4f:c6:af:16:5f:a7:db:6a:ca:b6:28:b4:
65:a5:65:fc:f4:5d:6a:f2:95:59:c9:d3:32:b3:2f:
60:6d:2e:f3:52:97:85:61:50:e1:b9:fd:ea:37:b6:
d1:b1:13:90:99:5b:9d:c4:98:1c:cf:2e:37:55:23:
42:5b:c2:c5:57:f3:70:aa:60:46:29:fe:c3:54:91:
eb:5f:04:19:44:80:66:04:80:2e:a7:52:31:bf:0d:
c8:01:fc:62:88:ae:1a:01:ae:45:a7:57:1f:c6:4d:
19:05:12:c6:fd:02:18:f2:27:e8:07:be:0f:fe:27:
84:66:7f:32:ac:56:b6:91:bb:ab:6f:06:cc:ab:fa:
59:f2:58:51:8a:90:df:db:2b:88:83:47:98:77:35:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:77:91:E8:D8:67:68:A9:50:52:84:E2:9B:40:E3:C8:96:66:7E:BF
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d5:cc:bb:cd:d9:ef:26:af:5c:18:fd:b2:89:ac:4a:f7:1b:
e2:c3:03:4d:e2:49:90:f9:bc:11:c1:f3:f7:84:36:2b:53:4b:
e1:23:35:e2:52:04:29:b5:87:bc:1f:ea:26:97:ef:09:a7:00:
94:0b:ba:9f:8a:3d:73:f1:0b:2d:d0:e0:85:98:77:93:b7:2d:
d9:51:c5:5b:cd:a7:31:8d:4c:94:73:6f:5d:b5:b7:ac:63:9a:
de:8b:e8:55:b2:b8:6c:66:b5:bb:1e:22:0e:6d:16:68:ac:e6:
1b:4f:f5:86:ca:1e:72:99:37:32:be:ed:ed:9c:a9:0f:d3:98:
f9:ec:56:bd:b4:ff:88:ad:1e:71:33:d9:67:cd:de:7c:f6:be:
4c:c1:34:18:c5:30:7c:cd:1d:b7:d6:da:95:ca:bf:e1:8b:97:
b2:56:aa:c5:a5:b0:de:e5:dc:67:e3:9a:a5:91:be:2e:e7:81:
e8:ac:d0:82:29:eb:89:06:2f:71:d0:1d:fc:fa:b7:c4:7b:db:
8c:59:65:e9:17:74:be:df:89:fc:1a:cf:d5:45:66:c4:28:b7:
f1:d5:05:ad:96:da:44:cb:cf:fd:9f:f0:a4:52:d9:bc:f7:f8:
e8:0d:97:86:1a:c2:87:27:8d:2b:6d:8a:47:88:f3:d3:5c:9c:
dc:5f:e5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:47 2025 by rpki-client