Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier: 3Ls8rQx2AuPoHk1x8VTdY14mBmlsBjssf/9Z4rx/zd4=
Subject key identifier: 8F:A1:9D:5B:37:6A:CD:10:54:86:9C:16:8D:09:EE:16:F5:D4:E8:9B
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial: 01967378EE07D95049F473A66E5B2EB862FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 19:00:27 +0000
Manifest this update: Sat 26 Apr 2025 19:00:27 +0000
Manifest next update: Sun 27 Apr 2025 19:00:27 +0000
Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: O0n8goDZ/SoR7oY+VwmLN4Nia749mDrRkiFjb8RCf+8=)
2: Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa (hash: cJ7oC/tfZObuQa2Mj7JBLCFjsQinWzWvmcJSKHgfJM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:78:ee:07:d9:50:49:f4:73:a6:6e:5b:2e:b8:62:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256be176b313e1a8a050f670af576771b655d611
Validity
Not Before: Apr 26 19:00:27 2025 GMT
Not After : Apr 27 19:00:27 2025 GMT
Subject: CN=8fa19d5b376acd1054869c168d09ee16f5d4e89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:cd:09:83:6d:04:56:f9:24:2d:b7:ba:b0:
26:ac:db:92:55:49:b8:97:b1:dd:31:0e:9b:28:80:
5c:9b:c6:51:37:e0:b2:f0:79:38:3f:02:52:29:59:
8d:97:51:cf:3f:a4:77:a6:f4:fd:99:fa:bf:f7:44:
38:f9:43:71:56:3d:00:df:51:65:24:0e:dc:f5:4e:
66:5a:2e:a2:68:66:ff:f8:e3:0b:6d:f5:8f:4e:01:
1a:1d:e1:95:cd:70:9f:cf:82:6e:6e:72:e8:4e:93:
1e:b1:83:27:75:eb:3e:e2:ff:cf:c4:ca:3e:58:10:
13:40:36:0e:55:bd:0d:82:7f:fb:16:7a:7f:07:32:
ad:21:11:56:25:19:57:0f:02:f5:a4:58:11:93:51:
ca:50:ae:a3:9d:19:9f:18:e9:86:40:e0:18:29:f9:
2b:34:7d:ae:ce:33:f1:07:dc:9b:70:16:b6:b8:9b:
bc:b7:24:4b:94:19:2d:52:22:bb:18:8f:b9:41:c1:
a9:5e:df:40:e2:c0:b2:d3:af:6d:a1:c5:2a:74:41:
7f:be:43:f4:40:34:f4:fe:70:51:25:99:d1:6a:b6:
b3:28:aa:94:87:0b:27:e1:9f:80:7c:04:d0:af:5a:
f0:cc:9c:ca:83:da:7e:88:bc:70:22:4f:36:af:0d:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:9D:5B:37:6A:CD:10:54:86:9C:16:8D:09:EE:16:F5:D4:E8:9B
X509v3 Authority Key Identifier:
keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ce:9d:9f:e2:16:c9:e2:a5:20:10:d0:7d:58:d4:37:9b:b9:
3d:49:de:31:f2:99:df:3c:f9:91:46:4b:fc:b2:41:14:82:b6:
1a:c9:71:6d:fd:de:e3:fd:00:de:da:a7:37:4a:cc:69:3a:80:
1e:a1:b1:32:a8:d5:01:fb:5f:81:a8:d2:96:de:52:08:e0:0e:
62:e6:63:74:80:2e:6c:01:e0:de:46:7e:74:59:f6:69:8d:dd:
a1:88:58:49:8f:52:a9:aa:b3:de:8f:b4:df:24:41:74:8e:12:
87:30:36:b3:15:e1:16:04:b2:c3:53:a3:b9:ee:c6:16:96:18:
61:61:1a:51:d0:3a:2d:fb:15:1e:57:e8:d5:cd:cc:29:69:db:
bc:ee:4e:2c:56:71:ae:22:98:50:69:4a:30:e2:33:d8:82:db:
00:5d:97:06:c4:56:50:bf:5e:ec:4d:b3:12:11:13:75:e2:92:
ed:9c:e3:c1:f8:49:e3:ea:61:29:21:ea:43:49:e7:ec:17:80:
ab:b4:1b:c0:0d:67:57:1f:f5:92:ef:c0:62:e5:30:04:eb:8a:
d1:34:e0:90:90:56:b4:e4:32:c7:69:a3:ba:02:9a:7e:be:6f:
0d:51:eb:12:0d:5d:27:df:af:64:45:0a:86:e4:7e:18:ef:7d:
c2:25:48:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:29 2025 by rpki-client