Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: 25sixhwVzUN81AZ270bn1YDW5Ps6EoUcyspsaznR0Sc=
Subject key identifier: 1C:AB:07:68:9D:3C:E4:A7:06:66:99:93:08:99:B9:6C:4D:E6:6E:15
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 019674548F7C72ABB265673C05ACC08F94A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 1521
Signing time: Sat 26 Apr 2025 23:00:20 +0000
Manifest this update: Sat 26 Apr 2025 23:00:20 +0000
Manifest next update: Sun 27 Apr 2025 23:00:20 +0000
Files and hashes: 1: 1gqy8jv-V_H7oweUasDl-ECUQ1I.roa (hash: w7kEB0Eg8qOWOT1pz0wZhRGBM4Y+whIgLQrg7qaGMxo=)
2: EHlGqb04iAIbXB5rqXIY0OnBfmY.roa (hash: 81m7h3zrGqKLifk2aQp93enuHjOZTif5bviOShjKwd0=)
3: JwRfQe1RRMFqmouHM8GDCbBv0qg.roa (hash: HeOaGIUlAHS+jA2tQ0PvTXar52BfbpysaRlaXP3EMw8=)
4: OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa (hash: gKkiytrZ0hzX5R/Kg8dR7Gdhl0r2rLxr0t9FK+F8kjA=)
5: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: 2MufCrG32gPOWtYKRG00tKE+Kbc+W5TmDuTGrpcpA6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:8f:7c:72:ab:b2:65:67:3c:05:ac:c0:8f:94:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Apr 26 23:00:20 2025 GMT
Not After : Apr 27 23:00:20 2025 GMT
Subject: CN=1cab07689d3ce4a7066699930899b96c4de66e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:d3:eb:4f:c4:9e:b9:3d:22:ff:ed:93:90:
cb:75:01:bc:12:fc:5d:a4:1c:da:d0:ca:1d:21:9d:
b8:f9:e7:0e:89:7f:0a:7a:86:86:b0:89:30:89:1a:
05:f6:ae:f8:8a:21:c1:3d:91:ea:ba:64:18:96:ad:
a7:f8:b1:2f:42:80:62:69:98:13:c0:ea:d6:a7:64:
1e:0b:5d:59:2a:e0:1d:82:df:ba:07:da:78:9b:2f:
30:01:ab:f7:e2:af:0d:09:16:4a:63:76:ad:4a:89:
1f:95:60:ae:cc:ea:38:ca:bc:59:47:e8:8f:13:b4:
a4:e9:d8:15:3a:72:85:ab:1e:f5:e1:ae:79:5f:0b:
31:cf:db:f8:f9:26:67:f1:75:6d:b1:41:9c:5b:30:
06:39:71:7d:7c:e2:ed:d5:96:33:67:3d:8e:c1:4a:
0a:ff:ce:85:0a:09:f0:23:a2:ce:6c:27:fb:7a:47:
88:d4:bd:bb:38:fb:c4:f6:72:d4:7b:26:b8:57:97:
6e:88:d5:88:9b:30:b9:fd:c7:14:94:2c:99:45:ac:
fb:29:1d:58:17:ad:41:90:35:d1:1b:0c:c3:5a:cf:
a4:3b:28:40:d4:41:a5:ea:b8:2d:c6:8a:b5:7f:b4:
0b:13:44:99:dd:9e:e2:0f:9b:75:43:43:d8:4c:8b:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AB:07:68:9D:3C:E4:A7:06:66:99:93:08:99:B9:6C:4D:E6:6E:15
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b5:7c:f9:a1:2f:d7:78:5e:b1:ee:1d:b1:ac:58:77:5c:86:
94:b0:5a:29:78:90:fd:a5:50:01:1d:7a:1a:c9:f4:4f:5e:64:
fe:36:5b:e4:b1:08:0f:2b:ce:67:c5:87:27:b4:8f:5e:9e:00:
1f:e5:e8:46:e2:2b:33:bc:ec:ea:3f:56:c1:41:19:f6:81:4d:
bc:c3:64:19:b7:44:e0:1c:15:89:fa:ac:a2:a8:80:26:70:34:
ee:b1:83:98:95:63:b0:b3:c2:e9:52:fa:71:99:69:74:04:76:
dd:d3:4a:b0:97:b7:46:01:7f:2b:06:69:01:d5:5d:0a:9b:d2:
f5:19:a7:30:ac:e3:7d:7e:6e:75:c0:4e:b6:87:1b:22:75:d0:
ae:34:4b:27:e2:32:ac:4d:8a:4e:de:47:b1:a5:20:81:12:2c:
28:c3:21:ef:6f:47:0e:21:2b:0c:f1:f8:c4:52:5b:82:b5:7e:
53:e7:6c:fc:d7:f6:a9:f2:94:ca:07:e9:0c:3a:31:4f:31:86:
b3:ac:b2:4a:0b:97:69:7e:1a:83:66:1e:73:d3:bf:ae:e8:28:
3a:a7:d4:14:3e:46:ab:c9:f2:a8:fc:0e:0d:3a:ba:08:78:b6:
3f:30:17:e6:9e:64:10:2d:f9:aa:e2:75:0d:81:b4:82:a9:3b:
3a:36:7d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:30:06 2025 by rpki-client