Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
File: JoLIFvcmhv967eU1OGGMwuiGEDk.mft (raw, json)
Hash identifier: WdpoO0/iiDijzCsNwA2PJG1cAfSLZGUfHp8hDZsVIGA=
Subject key identifier: 64:4E:49:4A:3F:FD:06:FE:51:F3:45:5C:BD:B1:0B:8C:E7:63:C7:96
Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
Certificate issuer: /CN=2682c816f72686ff7aede53538618cc2e8861039
Certificate serial: 0196741D8461E7FA1E1D7E9BA8D009D23A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
Manifest number: 0FAD
Signing time: Sat 26 Apr 2025 22:00:13 +0000
Manifest this update: Sat 26 Apr 2025 22:00:13 +0000
Manifest next update: Sun 27 Apr 2025 22:00:13 +0000
Files and hashes: 1: DS8Rbt69Y278qge_4Hmc5o4yuwU.roa (hash: tTLyP2JhBCp2p2WsUyjl7JOVm5G5UBP2M/82U2+yJ6c=)
2: JoLIFvcmhv967eU1OGGMwuiGEDk.crl (hash: H2ZbyPvMXHAmhIkvSI4dL8/IXOSh/O/70EVWM7BorLw=)
3: U8zXsGEWCBH4_8YcgXmHjVER-wA.roa (hash: QGCHO7XwYCcbkNmS/y1pKg7c9YRHZM93ZZOJP0WiYK0=)
4: rzDuEXo0h15tN1onQfvdfKOerNI.roa (hash: Rm0BFvhI+es2ozBderkrcSg2LqNFRQ+VOueKD9tKZoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:84:61:e7:fa:1e:1d:7e:9b:a8:d0:09:d2:3a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039
Validity
Not Before: Apr 26 22:00:13 2025 GMT
Not After : Apr 27 22:00:13 2025 GMT
Subject: CN=644e494a3ffd06fe51f3455cbdb10b8ce763c796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:1a:ab:bb:b2:ab:58:a3:a7:77:cd:ab:d4:
b4:15:b5:04:af:4e:1e:87:c6:8d:0f:06:91:b2:75:
a5:25:7c:b0:1a:9d:b9:1f:ee:c5:15:22:dd:25:85:
be:b7:34:80:ad:1c:e0:74:63:3b:2c:76:43:ff:f6:
3d:17:06:77:95:07:68:d0:24:ac:2f:fe:08:8b:eb:
ec:57:a1:aa:e7:27:4e:97:b1:03:70:9f:fd:4b:44:
2d:88:f1:e6:87:e9:db:ad:70:36:a5:8c:61:2e:3c:
c6:1b:44:2f:5c:d2:d0:bd:39:c8:23:fc:6e:a2:b0:
28:c3:24:d6:d6:e5:94:ae:3e:bc:41:89:bf:33:64:
15:3b:df:6d:34:d8:e8:47:7d:7e:80:7c:d3:9d:77:
6d:4a:34:54:f0:82:fe:10:b8:98:7c:2e:fe:da:76:
52:48:8c:40:97:64:10:18:c9:a6:3f:6a:bb:9b:30:
64:46:37:8b:fd:91:50:ed:33:89:e3:45:bb:f6:62:
b3:b2:c8:1c:f6:2e:04:77:df:74:d9:c5:30:3f:7f:
8e:26:16:fc:22:3d:e5:18:7a:f6:05:0c:fb:0e:3f:
bf:9f:62:58:22:5f:89:78:a4:cb:12:a0:cb:df:92:
11:59:1c:4d:fe:f7:90:a2:d3:95:e7:7b:22:13:88:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:49:4A:3F:FD:06:FE:51:F3:45:5C:BD:B1:0B:8C:E7:63:C7:96
X509v3 Authority Key Identifier:
keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ff:5f:c7:a5:0b:34:26:3e:f4:53:f8:70:ef:2f:a1:82:1e:
c5:00:56:d3:09:82:76:f7:c3:5f:42:fc:97:dd:92:80:94:83:
23:86:aa:8b:da:41:06:56:ae:6e:26:25:b6:e9:84:e4:60:ad:
80:68:00:91:d8:fa:c3:c7:ae:d1:51:d4:fa:7b:5b:1c:b2:c4:
17:9d:c5:1f:dd:2c:13:d3:ce:5c:6c:9f:eb:72:5d:f3:4c:3c:
ab:df:e4:a6:5a:b4:ad:22:58:c7:6d:d4:87:20:59:f1:77:75:
e8:21:7c:69:9f:8b:0a:7e:3d:89:01:f3:61:08:8c:1f:f4:5f:
98:c7:3b:ca:00:9b:10:29:47:05:ed:e4:98:7b:7d:c2:69:f8:
d7:b2:85:89:1a:79:d6:7c:9f:0e:dc:ea:bc:c1:a1:c7:65:b0:
52:30:fc:38:75:5e:2a:9d:18:fe:11:d0:b9:f3:ce:d8:6d:4c:
ad:8f:3d:37:a2:27:b3:cc:00:f1:36:77:f8:09:c8:12:ab:ee:
e0:d5:46:a3:ea:4b:50:7f:bb:ab:20:32:83:54:1d:74:d1:ae:
e4:70:78:5c:e2:3f:44:86:66:7b:0e:cb:d1:d9:52:25:d5:7c:
f2:3f:a1:8b:87:03:ff:64:5e:7c:09:46:dc:0c:75:d5:ff:a0:
f2:9d:49:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:01 2025 by rpki-client