Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: /it5hykl4WCg7LA3d/h24ixfGlImFnv9z+V7R3ZUj7E=
Subject key identifier: C5:E8:2E:A8:E7:ED:30:72:64:32:DA:33:AD:43:7E:CC:7A:FB:C7:30
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 0196778CE22BE74AC4611C1FF46F6C58AF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 124F
Signing time: Sun 27 Apr 2025 14:00:43 +0000
Manifest this update: Sun 27 Apr 2025 14:00:43 +0000
Manifest next update: Mon 28 Apr 2025 14:00:43 +0000
Files and hashes: 1: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: HIWJoaajssM6n2qNEWP4p1RCGPiCQ5Kg4JHuOVnZxIk=)
2: mW-GeUTpPcmN505mq7SBylbmL1k.roa (hash: EwfFRwG/wTzHhkN3Xr0yb1fHBsnFoko8PwS4OTwxOW8=)
3: uEHKHGYpS2KvUkesU8pcDof-YA8.roa (hash: 0K5xoA85UHkcMnN3W22ATj/hyZFWzrQ7V/CmhuM4D7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:e2:2b:e7:4a:c4:61:1c:1f:f4:6f:6c:58:af:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Apr 27 14:00:43 2025 GMT
Not After : Apr 28 14:00:43 2025 GMT
Subject: CN=c5e82ea8e7ed30726432da33ad437ecc7afbc730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fd:70:fd:ad:0f:7b:5e:79:96:1b:ca:14:5d:
5f:71:06:82:6d:ac:62:d5:f4:0f:7b:6f:0f:11:78:
5b:3c:78:45:e0:0e:de:17:6e:cd:1c:36:2f:32:0e:
f5:3c:90:ef:63:ff:43:cd:08:d5:95:2f:ae:f7:d2:
87:19:43:30:8d:a8:e1:cd:22:c5:09:25:8b:66:89:
27:8f:ca:fd:ae:b4:17:3b:3b:ce:41:1e:4d:25:0f:
a5:3a:bd:02:a6:cf:07:ca:45:ea:80:76:38:66:60:
46:e4:8f:d1:4a:ec:3c:f8:cc:24:07:00:4b:86:81:
79:4e:6d:26:36:a2:85:62:62:aa:cf:93:f8:4d:9f:
ed:f9:41:65:81:4d:93:89:9c:29:f4:5f:0a:7b:b6:
b7:a5:b1:06:7f:3a:cb:9f:26:f2:64:c9:a7:0c:c9:
18:a1:62:46:a7:38:95:c3:12:e5:8d:9e:45:db:46:
74:56:99:24:6d:41:c2:33:6a:8d:2e:22:e1:9e:f8:
bd:ca:ff:59:7a:6d:8c:61:a5:82:60:5a:d5:df:13:
b6:f8:7b:1b:5e:dd:c5:b1:93:01:12:65:c4:e5:88:
7c:35:c2:6b:97:99:17:b3:5d:70:85:9f:e2:d2:53:
d1:f7:4f:dc:19:99:be:9a:d0:8e:a5:96:98:65:04:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E8:2E:A8:E7:ED:30:72:64:32:DA:33:AD:43:7E:CC:7A:FB:C7:30
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ab:ec:8d:fa:18:a5:85:b0:64:6b:10:07:37:c9:2c:d0:9c:
28:8d:64:d1:29:86:59:3c:76:83:45:7a:ce:ad:d0:44:2a:ca:
e3:07:26:78:30:6c:51:86:09:ff:dd:5d:dc:78:48:dc:35:1e:
c6:1d:1c:57:08:3f:31:aa:5c:39:17:a5:f4:c4:6a:da:14:85:
ad:08:6b:34:d7:fe:da:53:5d:80:5a:b5:61:0a:1d:cc:b2:e2:
b5:67:f4:d3:c2:aa:67:38:ac:1e:0a:9d:ea:38:8b:32:22:0f:
72:51:20:0a:92:cb:60:7d:91:a2:5e:6e:09:34:18:0f:29:0e:
a1:ff:58:0f:f0:9b:1f:c2:76:0f:d0:32:24:d1:6e:9b:19:48:
90:ca:bc:64:c0:9c:6c:93:f3:19:5a:85:4b:42:05:db:b1:db:
f2:86:13:39:81:f2:c9:3e:95:d0:6f:c2:18:9f:92:47:62:14:
70:04:ca:c8:6a:b3:b1:f3:4b:be:a3:75:f0:51:ca:ac:98:94:
eb:ae:8f:30:de:79:58:1f:94:2e:eb:d8:cc:e5:e1:5c:9b:73:
d9:1c:26:66:89:5a:9c:a2:a5:b1:3f:a6:7d:39:57:43:35:d9:
fd:8b:eb:ed:ee:12:f1:00:c3:f9:4e:e6:b1:2b:15:f4:19:cb:
c7:71:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:07:51 2025 by rpki-client