Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: AVzG1MceKQrGssVJDO++NLyefeED4WXE0Fh0C9DO9Js=
Subject key identifier: DE:71:96:33:78:34:A6:C2:E4:D4:8E:77:45:AA:74:2F:6C:F9:EC:FE
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 01967BD7C04C71491B9D0F2FDB12A26B3A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 1412
Signing time: Mon 28 Apr 2025 10:00:59 +0000
Manifest this update: Mon 28 Apr 2025 10:00:59 +0000
Manifest next update: Tue 29 Apr 2025 10:00:59 +0000
Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=)
2: c9lDVYQcRQdBCo43HauWZGFuClk.roa (hash: inruiVih5EBCVj6ZjI9SCWuJ/TuQ5KyFEPVY6V2Z9e0=)
3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: K4KTX8rOQyRBaZoXB8p0jkH1K0jupRNBkq6i4KlfysU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:c0:4c:71:49:1b:9d:0f:2f:db:12:a2:6b:3a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Apr 28 10:00:59 2025 GMT
Not After : Apr 29 10:00:59 2025 GMT
Subject: CN=de7196337834a6c2e4d48e7745aa742f6cf9ecfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e1:e4:48:3f:ee:ab:4f:d2:5b:a3:94:11:d4:
e1:56:53:a4:ff:f2:1a:cc:b7:58:e9:b7:00:12:d6:
d5:84:bc:d2:26:9a:bb:9f:e1:59:72:68:98:4b:d2:
fc:e9:2e:04:ab:4c:75:cb:b3:45:4d:f2:3e:c6:53:
e0:35:55:d7:8f:7a:53:ba:46:6e:ee:04:fc:62:50:
b4:24:d9:b4:ac:4f:a7:f8:cd:ce:91:15:1f:f2:c4:
2a:11:05:1b:90:9f:38:86:25:a1:82:3f:33:df:97:
2f:25:42:75:85:a6:bd:2f:a0:ab:10:f0:04:6f:c5:
ff:95:4d:56:9c:2e:25:1d:31:19:0c:72:85:37:4b:
ed:a6:93:70:6d:b7:b2:16:89:d4:b5:cc:2f:7a:9f:
a5:62:1a:26:3f:76:fb:18:e6:85:63:bd:82:ee:a3:
79:8c:8f:8a:5d:10:1d:b7:8c:6c:31:9f:bc:4b:24:
be:52:1f:d3:12:4e:f0:6d:62:a9:18:a7:30:a3:16:
47:f7:fa:4b:92:52:5d:0e:f2:af:54:40:8e:89:16:
3f:12:d1:6b:e8:ba:f3:82:33:f5:d3:8f:f5:7d:60:
43:ff:47:c9:45:51:df:92:ab:36:54:04:20:34:a3:
f9:c4:5f:7b:0a:9f:46:30:75:a3:c2:2a:f4:76:70:
e2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:71:96:33:78:34:A6:C2:E4:D4:8E:77:45:AA:74:2F:6C:F9:EC:FE
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b4:7c:2b:fb:8d:20:c4:29:24:1a:ea:98:bf:43:76:9f:a9:
dc:20:d4:78:1e:15:a6:f3:56:33:3b:f2:e6:92:19:9b:2d:bc:
8c:4d:61:49:5c:a2:17:00:26:b1:95:9c:de:67:3d:21:2e:db:
04:82:b2:76:d2:df:4b:6b:74:28:52:b5:4e:9a:d6:4a:ee:92:
f9:7d:e6:0b:2b:d6:24:aa:06:f8:95:81:4b:5c:34:6c:06:ce:
c2:dc:08:7d:c7:5d:df:31:5a:dc:18:8a:92:68:77:05:33:e0:
a6:54:79:78:41:91:3e:f2:25:3f:88:f6:3a:53:78:16:aa:f9:
94:dd:cc:37:90:3a:8c:0c:34:46:11:67:e7:2e:d0:58:3f:2d:
35:00:7a:21:bd:ff:2f:92:d8:cd:bb:71:e7:c2:14:f8:b4:c2:
0f:62:d5:0c:9a:3b:3a:14:6f:40:8f:76:a3:83:95:98:12:2d:
77:29:d0:65:15:ff:94:e8:d6:79:93:b2:86:14:4b:07:c5:5f:
c5:ae:f0:b8:08:e2:d2:75:ab:7d:10:10:f6:e2:cb:3f:a3:7d:
25:44:f5:12:4c:8f:26:ab:bf:7c:11:8b:4b:ad:93:dd:63:8c:
52:3e:9f:f2:f9:e3:52:1b:05:8d:36:78:f8:7c:48:eb:07:70:
35:6a:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:34 2025 by rpki-client