Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier: pksyomIJAp8ntisC4DY/EcvGMlosQfxZX2kkNowZqrQ=
Subject key identifier: 72:69:1E:5F:F5:A1:EB:9B:E4:85:2F:F8:DC:AB:FD:B9:C7:DD:97:13
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 0196753020D0DF9031B9D58E2E1AEE2BE4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number: 12E3
Signing time: Sun 27 Apr 2025 03:00:10 +0000
Manifest this update: Sun 27 Apr 2025 03:00:10 +0000
Manifest next update: Mon 28 Apr 2025 03:00:10 +0000
Files and hashes: 1: 4eT-mW2UcQ9kNb0XbHZf4utls6k.roa (hash: pWKqm9dxjrmHdVu6fXo7RV80//gt2D0eFFO08R5PXW4=)
2: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: ZqA4qNWTZ30xHwhfBpFrSVxPrE3kaG9HettOlmD4zrI=)
3: rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa (hash: oUmBkcDadINaUxLlpIH308aZUrK5RDWqrmdyK5/vDp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:20:d0:df:90:31:b9:d5:8e:2e:1a:ee:2b:e4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Apr 27 03:00:10 2025 GMT
Not After : Apr 28 03:00:10 2025 GMT
Subject: CN=72691e5ff5a1eb9be4852ff8dcabfdb9c7dd9713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:80:c3:fc:bd:50:d4:aa:6d:c7:df:f8:3e:
d8:09:86:ad:19:e3:f3:8b:ca:09:70:fe:40:2e:2b:
07:c9:8d:d3:a1:12:8c:74:87:b9:6e:a5:28:bb:ef:
6b:fd:78:c1:1c:b8:96:c9:00:4e:2a:3d:e5:f6:2b:
54:87:b9:da:48:5d:2e:6a:8f:70:ae:46:17:4b:60:
05:dd:c0:04:7c:45:82:23:1a:69:a7:c3:8b:17:fc:
a9:e5:a6:05:5c:70:83:49:77:a9:d2:1d:48:a4:ff:
ff:d9:4f:eb:86:12:a7:36:fe:63:26:82:05:ec:35:
34:93:1b:c9:c2:b1:b8:65:34:39:03:66:61:6d:9c:
6b:9b:f3:6c:0d:04:6a:16:bb:c7:26:93:07:98:ec:
03:8e:da:95:a1:10:5f:13:71:df:79:c4:7e:aa:69:
ef:62:45:5f:fc:df:a1:9e:94:a1:91:9e:48:17:be:
f3:e4:57:88:4f:3a:3d:91:1c:20:4f:a7:d6:40:b0:
40:4e:80:be:75:77:cb:b8:8d:94:99:d7:14:d2:22:
c5:be:f1:14:a8:8e:31:b7:6d:6f:5a:9f:46:be:d5:
51:74:c2:98:9c:24:a2:9d:f8:6a:b8:4a:03:2d:f8:
55:cb:00:92:44:be:6e:18:04:98:02:89:06:8a:33:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:1E:5F:F5:A1:EB:9B:E4:85:2F:F8:DC:AB:FD:B9:C7:DD:97:13
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8e:b7:20:ea:d0:f9:d0:39:c1:d3:56:5c:13:8f:0f:0e:2f:
0e:8d:e6:ea:ad:ad:9d:24:bc:15:63:cf:f9:03:d0:d8:5f:d7:
d2:33:ac:c1:bd:8e:a8:8b:a1:c1:2f:f2:c2:64:50:37:65:38:
c8:96:42:40:84:68:df:f9:85:f3:4a:42:56:76:27:b9:b8:8a:
43:95:a4:b6:11:aa:bb:58:30:52:aa:81:dd:7c:53:9e:7c:8e:
d1:a2:5b:c6:bb:f7:51:b4:d5:00:71:45:07:bf:a1:03:d7:97:
7f:b9:e8:74:73:0f:84:07:07:47:cd:01:43:9a:ff:c5:0c:94:
fa:a0:e2:8f:ca:77:9a:e2:98:43:78:9a:9d:c7:83:6c:0c:db:
e8:a4:b0:48:ac:a3:f0:2b:df:01:9d:37:f2:3d:b8:d6:ab:1c:
86:0e:7b:65:d3:cc:25:99:fb:62:13:eb:55:25:9c:2b:1b:13:
3f:a5:21:82:69:ba:ee:f0:b6:6b:cf:9a:8b:1d:8f:b1:8d:9e:
15:81:ca:7b:73:f6:c7:f5:45:2a:c1:da:db:03:cd:5c:b3:8e:
b6:61:0e:01:fc:50:0c:9a:ae:57:53:18:47:a4:98:b6:95:43:
df:65:e5:63:6e:c8:66:a8:65:20:b8:a0:63:a7:f0:ac:81:65:
0e:4f:f4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:20 2025 by rpki-client