Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: V+p1cPyG4iTf7jIZGv+44B0WBoQKHUeXxga5yhh74ig=
Subject key identifier: 5E:28:95:4F:CF:EA:FC:27:14:C3:20:C6:50:BF:2B:04:0E:EA:70:5B
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 0196900301B63532AC943F17B92D247B86C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 08:00:38 +0000
Manifest this update: Fri 02 May 2025 08:00:38 +0000
Manifest next update: Sat 03 May 2025 08:00:38 +0000
Files and hashes: 1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: 9e7cgAhpAmBHUCl6ysAk/MLPHyE3axhkXEpCOHjrTs0=)
3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:03:01:b6:35:32:ac:94:3f:17:b9:2d:24:7b:86:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: May 2 08:00:38 2025 GMT
Not After : May 3 08:00:38 2025 GMT
Subject: CN=5e28954fcfeafc2714c320c650bf2b040eea705b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6d:0d:17:48:65:e6:6c:95:48:a9:09:a7:d7:
a5:00:98:84:c2:c8:ae:28:eb:2f:d0:0f:69:3e:bb:
e2:5f:cf:58:a8:56:37:e9:cf:f9:4e:29:66:1a:bf:
da:02:2f:f0:2b:bf:c4:66:b5:94:c8:8a:31:a4:29:
19:1b:51:ef:88:9e:b8:5f:3d:2e:5b:af:66:5b:72:
07:6b:10:53:01:08:10:ef:0c:02:44:67:f7:d6:9d:
51:c1:d1:4f:99:16:24:a3:f9:90:f0:d8:9a:d6:f7:
e7:77:76:37:57:29:70:ca:c4:5f:65:1a:7d:5b:e7:
87:8e:a1:f3:e4:35:fc:43:30:5c:b7:33:51:b0:4b:
d6:56:a2:93:94:64:d8:5a:0f:36:11:60:05:a9:44:
fe:0d:b3:fb:c5:a0:93:7f:fe:d2:63:93:ef:44:fc:
f7:8d:23:e2:4a:f4:16:e0:9d:09:88:bb:04:42:11:
9f:03:11:0b:ed:21:73:dd:05:12:3f:11:c7:3a:7a:
66:6d:3b:27:39:e8:7c:5d:6e:57:c9:15:b2:3f:e2:
2a:e5:e9:37:0a:1f:ee:33:00:d2:87:b9:5d:28:6f:
a2:7f:e0:08:84:e3:8e:c8:c7:3f:a7:0d:43:1c:18:
39:fc:71:98:ed:fa:4d:1c:1a:0f:05:9b:50:fe:6f:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:28:95:4F:CF:EA:FC:27:14:C3:20:C6:50:BF:2B:04:0E:EA:70:5B
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d1:41:2b:d4:4c:3d:48:72:6a:f3:4d:29:58:9a:f0:2d:ae:
16:2c:3c:44:1d:53:84:7d:64:a7:9d:a6:df:a0:37:22:5f:a1:
1d:21:02:57:a5:e8:54:16:16:eb:c0:22:5c:46:60:c8:38:98:
e2:21:07:40:63:ed:5a:06:20:1a:e1:88:39:7c:1c:26:19:f0:
d2:c1:8a:d6:ba:21:5a:b7:a7:74:80:a7:e0:da:7a:61:92:3e:
6b:a8:7a:b2:ba:af:63:ed:1b:25:ee:5a:0d:ca:81:cb:99:f1:
ca:4e:ea:95:d8:38:3b:e8:7d:c5:c0:86:e1:bb:35:ad:2a:d0:
34:66:e5:ec:8b:ec:6b:ce:c9:0a:93:17:16:18:81:d0:c8:08:
bc:e4:26:61:84:5f:9f:87:f0:79:7b:9f:bb:c0:e9:36:4c:07:
61:93:54:15:38:14:f9:c9:d7:db:ac:ee:b9:25:b3:42:cb:5a:
2a:02:b1:76:e1:c9:64:f4:84:2e:bc:b0:97:7b:1c:40:10:4f:
d2:e5:1a:ab:1b:95:fe:67:29:e2:32:90:11:6b:a4:37:c0:92:
58:e4:af:ed:a4:dc:44:46:b4:c4:7c:d7:e5:11:63:d4:46:a5:
06:fb:20:0e:c2:67:cc:8f:a4:23:7d:77:65:e2:dd:ca:3c:96:
bc:57:b9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:00:02 2025 by rpki-client