Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: K02zdJ3YCvewFFs3EMcwj4uNP5iWftJIhn5Q+Dg2irc=
Subject key identifier: DC:88:49:86:32:1B:0C:3F:76:CC:99:57:88:0C:B3:7A:8E:A9:AA:17
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 0196730B151ECE567576013EC80F38405012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 10F2
Signing time: Sat 26 Apr 2025 17:00:28 +0000
Manifest this update: Sat 26 Apr 2025 17:00:28 +0000
Manifest next update: Sun 27 Apr 2025 17:00:28 +0000
Files and hashes: 1: U32_Sc22WvD7Fv16LTG7iyrHJKk.roa (hash: HDMDgZcXReJr66n8qO4cBkBwOaGGNGz+zcAfJfe/HW0=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: l5pbtQ4WvdpOeLbenCrELlpodep8zvUscQUs591F1RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:15:1e:ce:56:75:76:01:3e:c8:0f:38:40:50:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Apr 26 17:00:28 2025 GMT
Not After : Apr 27 17:00:28 2025 GMT
Subject: CN=dc884986321b0c3f76cc9957880cb37a8ea9aa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:7d:c5:b3:25:a3:a9:dc:2b:6a:6e:73:3b:
b0:49:3b:89:3b:3d:d4:a7:16:93:72:fa:82:37:58:
7d:9f:3d:d7:4a:8a:ff:a5:4b:8a:a6:e5:7b:3c:d4:
67:ae:14:70:28:0e:65:e1:ee:d4:98:10:3b:64:e4:
d4:80:0b:f0:99:21:48:96:dc:79:f1:61:66:9d:85:
52:bc:b3:d4:fb:8a:85:ff:51:6a:7e:7e:ae:6a:1a:
cc:af:0d:de:e4:fb:39:73:8e:3f:34:36:1f:ea:9f:
cb:36:4e:17:e2:c9:8a:08:e9:66:75:a0:24:2a:e2:
11:d7:f1:7d:f1:dd:c3:55:f9:58:45:58:94:dc:6c:
20:92:92:34:cc:a4:36:57:dc:e5:66:e4:23:7b:db:
72:e7:5e:b4:25:38:d9:2c:1f:70:c8:cd:98:ef:55:
b3:0c:9f:65:21:94:12:c8:19:80:38:e7:b1:75:47:
b4:20:b6:1d:11:bd:6b:c1:fc:f2:3e:ea:26:19:69:
90:63:f2:9e:8c:48:e8:6a:06:50:9d:f4:ff:ac:4d:
38:c6:70:d3:eb:d6:bb:bb:d1:52:b5:0d:1c:21:1e:
4b:6c:fb:ee:c7:9e:31:32:6e:0c:66:bf:5d:cf:6a:
4c:65:be:b1:ce:90:0d:62:fb:a7:c9:96:e9:89:c4:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:88:49:86:32:1B:0C:3F:76:CC:99:57:88:0C:B3:7A:8E:A9:AA:17
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:05:d1:33:77:49:17:04:a0:12:da:e6:60:ed:3d:d1:72:10:
d2:73:fe:cb:3f:2d:12:71:16:45:13:ad:6e:94:2d:7c:76:68:
12:5b:61:71:d1:ec:c1:b9:35:54:aa:62:27:8c:26:76:c9:d6:
cf:00:f2:ab:a0:82:31:94:7b:e9:3d:ff:2e:b4:ed:31:bd:b9:
bb:ec:d4:68:36:ec:80:79:1d:75:ce:4d:08:59:d8:a9:20:57:
45:3f:91:6a:a1:fb:19:1f:8b:64:28:81:59:e8:8d:34:a7:2b:
1d:a5:3a:74:ef:4d:6f:a9:2a:cc:5b:f7:dd:b0:2c:60:55:5d:
fb:0c:45:2a:6b:ba:af:9a:64:8d:8f:a7:f2:6f:fa:0b:1f:60:
b3:1a:57:bd:41:b7:cf:4a:46:78:1c:d6:30:1d:85:f9:88:20:
8a:b4:7a:cb:f8:c0:e6:59:41:d4:5b:06:25:47:54:41:5f:7a:
0b:ad:4d:b6:54:1d:9c:c5:cf:36:a8:b6:6a:81:3f:67:21:d4:
85:35:08:f0:49:4a:df:f2:70:02:04:c5:02:b1:b0:0d:0d:3e:
14:9c:cf:ea:80:94:14:5c:55:f0:95:09:a0:03:68:56:bb:0a:
ff:3b:8f:7c:a5:0d:c2:24:3c:2a:a4:99:e7:1a:c3:4c:0d:33:
e8:98:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:21:25 2025 by rpki-client