Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: 7q6ZbWyqJfuX+NI74Tge0wzZY+cDvng5jDRYsNLdnuU=
Subject key identifier: 8A:2C:25:27:B0:A1:38:89:F2:58:DA:F4:2B:EB:56:89:DD:F0:69:7C
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 01968736630C62689A4367805CCCE1ED2C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 15:00:10 +0000
Manifest this update: Wed 30 Apr 2025 15:00:10 +0000
Manifest next update: Thu 01 May 2025 15:00:10 +0000
Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=)
2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=)
3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: kMAPDJ1kGbq8UhTXrpqsyBerjnciN/Lg30Uim7JYkXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:63:0c:62:68:9a:43:67:80:5c:cc:e1:ed:2c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Apr 30 15:00:10 2025 GMT
Not After : May 1 15:00:10 2025 GMT
Subject: CN=8a2c2527b0a13889f258daf42beb5689ddf0697c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:cc:86:dc:c2:e0:5d:cd:9a:94:c9:b2:5a:
ae:7a:be:b2:61:24:32:77:17:a4:b0:7f:99:32:1d:
79:4c:e7:c3:d9:23:d3:51:fa:96:1a:89:d6:3f:6e:
fe:61:fb:5a:44:a8:75:2d:ff:18:b1:4a:5a:de:89:
8e:6d:4f:b2:8a:e0:a7:ad:d2:d1:37:d7:9d:e1:95:
83:2e:bc:73:7b:97:79:91:25:ae:6c:c3:c3:77:45:
12:ad:7e:a6:eb:78:0e:fb:d5:55:5f:73:c6:20:06:
85:f7:c8:e2:42:d9:ef:84:cc:a6:22:26:ca:5b:53:
75:91:b2:30:d8:2e:38:1d:81:2e:77:2f:62:fd:c5:
dc:f3:25:f8:3f:04:1a:cc:7b:06:7f:2d:e8:a6:78:
43:a4:50:77:92:87:04:49:b2:69:b2:a5:27:23:6f:
a1:29:9e:36:1d:62:48:cc:a2:9e:c7:d9:70:d4:43:
f6:4c:d8:5c:25:07:5e:8d:55:60:41:5f:f6:8e:b6:
f5:be:d7:94:b2:5d:a1:6a:48:aa:cc:df:99:79:8d:
3a:35:55:9b:1b:1a:f0:97:e7:93:bf:15:41:50:2f:
2b:dc:3a:a7:e8:bd:ba:c8:3a:7e:6e:96:86:14:e2:
10:53:91:b6:ed:3d:72:37:cd:af:ef:08:27:95:54:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2C:25:27:B0:A1:38:89:F2:58:DA:F4:2B:EB:56:89:DD:F0:69:7C
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bc:1f:14:79:40:80:aa:93:df:c4:72:63:a6:8f:bb:8e:c6:
52:25:d1:62:45:8d:18:2e:21:5b:82:8d:27:f8:d2:51:65:36:
f4:4d:c3:6f:6b:38:aa:ce:d7:7e:44:bc:74:27:a1:67:93:1d:
5c:c5:b0:56:da:27:e8:10:4b:58:5f:2c:52:d5:cd:80:58:71:
0b:ef:de:ab:45:2c:c8:2b:d3:be:93:26:79:52:be:5e:f6:3e:
76:75:54:55:97:7b:d4:c1:76:4d:20:88:99:f3:25:95:61:15:
77:b9:d7:53:23:10:9d:64:35:d1:f8:97:8d:4d:27:87:87:5e:
06:67:44:c6:81:5d:46:07:3b:f3:06:18:84:23:44:2f:16:41:
b4:fb:c2:43:77:c0:d9:6d:4b:97:d7:85:b5:ea:89:2b:ff:81:
9b:dc:8f:f4:a0:b5:3b:3f:a6:53:45:bf:77:96:b1:f3:f1:50:
6a:39:23:e1:dc:1e:56:96:b7:03:49:78:05:c3:c8:0f:65:84:
9c:94:df:ec:8e:b7:ff:69:af:28:77:49:ab:fa:49:50:a9:7c:
91:29:2d:b5:12:6c:83:02:8f:73:f4:5e:43:1a:9c:f3:aa:25:
59:2b:ed:3a:70:69:69:28:c3:42:c8:c7:a6:b0:be:e1:e9:4f:
ba:70:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:24:32 2025 by rpki-client