Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
File: _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json)
Hash identifier: jpWubsk/mvUWSioNrVIXATxXYLQFs7OfAzblEl8Wfd4=
Subject key identifier: 68:14:30:DE:8C:30:DB:6F:0B:75:17:BA:38:90:C8:FC:E1:1C:EC:B2
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial: 01967B695FC79F20C918751CD2C2541286ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
Manifest number: 14D2
Signing time: Mon 28 Apr 2025 08:00:25 +0000
Manifest this update: Mon 28 Apr 2025 08:00:25 +0000
Manifest next update: Tue 29 Apr 2025 08:00:25 +0000
Files and hashes: 1: FasPE0L4fE1899bsu_j-7tmu6ok.roa (hash: Qhda7nOss3uAhstVaL86g/VtZIZV1OO3A8B7YvZv5Tg=)
2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: GXxZ8jc5VN44WpTbUCe6TsvoJqyJA/yYB3rvStK+eEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:5f:c7:9f:20:c9:18:75:1c:d2:c2:54:12:86:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Validity
Not Before: Apr 28 08:00:25 2025 GMT
Not After : Apr 29 08:00:25 2025 GMT
Subject: CN=681430de8c30db6f0b7517ba3890c8fce11cecb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:6c:0b:81:4b:d4:c6:3c:c2:f0:81:8b:7d:
0c:e9:b4:d8:3d:c0:99:c8:cc:78:8e:1a:84:6b:d8:
91:d0:b4:3b:c7:38:9f:e6:2f:18:81:41:8a:e5:1b:
02:1b:11:4b:a1:2e:3b:6c:02:f4:91:fc:2a:ed:99:
9e:ae:2f:c0:74:77:cf:5a:0d:6b:d6:85:a9:0b:fd:
fb:a4:5d:99:a2:54:ee:38:fd:96:3a:8b:68:20:b2:
bf:f3:30:6d:38:b3:80:4c:7c:d5:f1:53:7d:76:42:
01:a3:8a:49:9e:6d:55:4e:11:98:f6:0c:b4:7f:e4:
62:7a:da:58:e1:85:36:1e:42:9c:8d:9a:71:db:ce:
f2:cd:b6:40:7d:36:f0:6e:23:d8:2c:2b:f0:8b:03:
02:e0:e7:27:42:25:21:16:f7:97:c6:90:ff:87:ce:
09:80:87:2f:50:c9:81:95:9e:8d:e3:6f:0b:d2:9c:
d6:c4:c8:08:f4:1c:2c:21:cd:0d:dd:66:36:3a:a1:
49:19:fa:7c:09:ba:51:a2:ff:ee:d7:74:d0:47:16:
af:2e:41:57:36:36:b8:62:b8:51:ad:6f:91:2c:0d:
3b:1b:ee:fa:15:dc:e5:0b:1d:40:9e:53:b9:da:f8:
7c:00:eb:48:3d:30:d1:10:20:bf:81:01:ea:e6:b9:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:14:30:DE:8C:30:DB:6F:0B:75:17:BA:38:90:C8:FC:E1:1C:EC:B2
X509v3 Authority Key Identifier:
keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b9:b5:82:80:ca:2c:62:01:87:d2:a7:29:54:92:ac:4d:70:
af:a2:b4:ee:e3:ef:1a:e2:76:60:7a:ac:07:ad:3c:9f:95:5a:
ec:69:c1:d3:9c:5d:78:df:96:da:95:a7:3e:3f:84:42:8d:3a:
73:d3:e6:d1:4f:ba:cd:4e:6c:c9:4c:a7:3b:38:9f:bb:78:3a:
4c:57:3e:9f:b3:70:0b:8c:3a:c4:36:67:9c:09:ab:56:ec:4e:
76:1a:53:f2:6e:8e:33:69:10:22:7b:41:5c:c0:d3:df:5a:50:
5f:9d:6d:fc:57:25:ba:d5:7a:cf:84:3b:6b:07:62:87:4a:08:
51:09:3d:a5:ef:78:fd:c4:07:48:1c:c6:24:79:75:3d:61:13:
ff:90:f3:04:16:15:5b:50:11:0e:90:38:63:ae:91:91:30:9a:
5b:f0:9a:3e:ff:fd:3a:19:d0:1f:be:20:1b:97:a5:27:b8:98:
91:34:67:57:f9:2b:a4:21:1f:ad:da:df:bb:24:92:55:d5:fa:
a2:5a:6a:e6:6e:c9:e1:9e:c9:12:9e:ae:5f:ef:72:c6:b5:56:
bd:51:4e:cf:b6:c9:89:b5:ec:e5:47:e7:ba:e0:46:99:c5:5a:
88:7c:74:db:60:1f:4d:31:4f:99:1c:f2:a3:6c:15:56:6b:95:
2d:7c:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:36:39 2025 by rpki-client