Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json)
Hash identifier: GOcWM1ENmZLF3NdvWoeEGAD7vbJgxXhDb6zvuysM0kI=
Subject key identifier: 8C:3D:AC:DF:30:4C:7B:1F:F0:31:A2:34:EA:6C:38:E6:99:AA:FA:CD
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 01967FB3D2414D41D128A1E694D8EF36B439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 04:00:13 +0000
Manifest this update: Tue 29 Apr 2025 04:00:13 +0000
Manifest next update: Wed 30 Apr 2025 04:00:13 +0000
Files and hashes: 1: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: QSn5UCJP1sltg6Ywy0J3Sdt/KzjA6c2PtcpjouG+dfQ=)
2: eh296nLCSptPg6qq0l-hiNgSg8s.roa (hash: kVuRpdEJxlUkflKXQSCqrY0EKJTwkUP2EszNXGQOqXE=)
3: u7zHiSjsnFwFOa-a4a5i2VA8gFc.roa (hash: GVFgF0gAIU+Ptj/IEQiwtzNx/eeTLFsX6erX9jxLBDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:d2:41:4d:41:d1:28:a1:e6:94:d8:ef:36:b4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Apr 29 04:00:13 2025 GMT
Not After : Apr 30 04:00:13 2025 GMT
Subject: CN=8c3dacdf304c7b1ff031a234ea6c38e699aafacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:0e:82:b4:3c:f1:08:72:c0:2b:f9:7d:84:
4f:dd:6a:ec:d7:45:6e:b2:a4:3b:a6:06:62:de:a3:
e5:90:57:45:19:bc:a1:5f:e9:36:d1:86:b4:8b:b7:
bc:af:ab:01:63:0f:af:c9:a3:e5:9d:2b:47:04:8b:
f7:35:e1:fa:02:36:18:d9:7b:a5:b1:d4:a5:a4:4d:
6b:03:50:16:81:2d:dd:4b:11:87:f5:b4:e7:6e:b2:
3d:92:63:36:17:4e:f4:87:ae:7c:ce:89:77:a5:5f:
c3:a7:c6:2c:d2:15:eb:ce:88:d5:3f:46:45:3d:2d:
13:72:62:8f:bd:ea:09:95:a9:7f:da:8a:88:ba:e7:
ca:d4:5d:86:87:fd:eb:fd:b7:ec:c2:b2:be:dc:e7:
98:ac:e2:1c:47:93:3b:0f:89:82:27:c7:b3:1f:70:
8a:3c:17:b5:2a:6d:39:02:8c:10:f8:46:ed:b2:06:
d5:ae:4e:62:4e:3a:e7:1d:04:70:62:fc:15:9f:d6:
f0:c9:fa:31:71:46:0a:15:18:19:b5:bd:11:dd:08:
74:65:87:12:c2:a9:1e:14:fd:a0:fd:a7:f7:30:4a:
f7:a5:7a:b2:08:1e:e8:fe:17:2e:d5:65:12:0d:a3:
f6:f1:03:47:79:85:a0:c7:0c:58:d5:ab:0d:4e:d8:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3D:AC:DF:30:4C:7B:1F:F0:31:A2:34:EA:6C:38:E6:99:AA:FA:CD
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:31:e9:05:e6:b5:97:19:e8:9d:2f:95:1c:07:cc:38:2d:6e:
d4:e8:48:07:9d:1b:0f:17:23:96:5a:2e:d1:83:fa:2a:22:58:
f3:67:b7:d9:db:05:95:11:e5:16:79:5a:18:c3:79:3c:81:12:
3a:c5:84:ce:17:cb:85:45:5f:c3:2a:fb:82:de:1b:d9:47:47:
40:ef:0d:6b:6b:68:f1:76:f2:12:fc:c9:23:e6:44:c9:34:54:
ab:6f:95:a0:83:d5:45:2d:32:07:df:05:19:d0:b7:ca:e5:ad:
19:1c:1d:fd:41:7d:fd:a3:38:e0:4e:08:b5:5f:70:1a:15:49:
86:d4:1f:02:8c:6b:93:a2:ef:dc:b6:03:99:7e:c2:c0:05:87:
73:52:94:db:09:b4:e0:a9:47:84:a3:c6:41:0e:13:bf:0c:9d:
00:13:08:ea:03:7f:52:18:83:33:f4:7a:89:12:39:32:78:7f:
55:89:db:74:4e:32:23:7c:dd:75:22:cf:e9:ee:1e:d5:9b:c7:
6e:3b:8c:a3:6d:75:1d:68:f4:0c:71:d7:6d:0a:87:d6:4f:1e:
20:72:79:79:4e:87:d9:e3:ba:22:af:2d:d0:eb:34:28:b4:73:
c4:b4:b9:d8:6e:b4:88:7d:20:21:a2:41:33:79:c1:27:9c:0e:
60:66:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:42 2025 by rpki-client