Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
File: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json)
Hash identifier: 9p+n1xRY8X3LejjySe0MnDo9wjw9ozPtJErHLzt6Zvg=
Subject key identifier: B7:BF:4E:EF:ED:6A:DF:97:D1:54:EB:CF:75:1D:C7:72:10:35:FF:AD
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Certificate issuer: /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial: 0196745485AAAAA6951D8F2F73BD1D132FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
Manifest number: 149B
Signing time: Sat 26 Apr 2025 23:00:18 +0000
Manifest this update: Sat 26 Apr 2025 23:00:18 +0000
Manifest next update: Sun 27 Apr 2025 23:00:18 +0000
Files and hashes: 1: LgIPOaS3n2sqiXRF04UEQLyEYsM.roa (hash: YqN1B/tx43sTxDsP8Z9eF6NTn7buBeb+1tzSiGZZDN8=)
2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: I7MikkRQFCT/7ZFV0ubG8vfTRdczG2Zt5z0Pv9B83XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:85:aa:aa:a6:95:1d:8f:2f:73:bd:1d:13:2f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Validity
Not Before: Apr 26 23:00:18 2025 GMT
Not After : Apr 27 23:00:18 2025 GMT
Subject: CN=b7bf4eefed6adf97d154ebcf751dc7721035ffad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:62:d5:6d:62:09:6e:72:ce:6f:bf:9f:21:
a7:0d:c1:44:ee:9b:b5:95:03:2b:5c:b2:2a:30:4c:
90:5f:d9:1c:d0:67:fa:ea:37:3d:b6:94:30:44:3c:
d8:23:17:5b:80:cb:4e:0e:3e:e5:1a:93:78:44:46:
01:fb:8f:8a:48:9b:59:18:2a:eb:59:85:61:c6:a4:
cc:00:f4:21:2c:8f:52:16:24:4a:cb:0e:27:56:1b:
de:b9:73:6d:31:9e:9c:fe:57:b0:92:a7:86:ad:17:
06:42:10:e7:87:0e:ac:a3:0e:92:fd:2a:5e:e5:2e:
c0:ef:56:8b:ac:4b:57:37:0f:3a:c3:15:5a:ff:af:
e3:99:98:14:09:6d:18:fc:b6:5d:bc:b0:e9:6b:c3:
3f:68:b1:e4:da:f4:4f:3b:07:40:d5:b8:f3:c2:cc:
a3:b6:f7:14:4a:b1:ce:03:44:23:dd:67:33:b1:64:
ce:09:f8:05:c7:53:22:c1:39:ed:35:6b:16:11:21:
13:64:80:ec:26:c9:67:87:21:9a:78:28:12:7b:52:
6b:ce:8c:69:ed:6c:bd:34:38:3d:0e:9a:75:cb:99:
9d:fb:69:0b:a9:89:68:62:9f:9a:89:71:2c:69:07:
00:ec:91:27:2d:8d:5a:4d:0a:38:ac:f4:47:09:34:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BF:4E:EF:ED:6A:DF:97:D1:54:EB:CF:75:1D:C7:72:10:35:FF:AD
X509v3 Authority Key Identifier:
keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:08:f9:fd:c9:be:df:9d:ce:05:fb:3e:0c:1b:00:5c:6f:0d:
02:e5:0b:20:d8:a3:04:cc:ed:9c:4b:64:aa:2d:37:4a:53:12:
b1:a3:a8:73:24:fd:1c:0f:e5:82:69:74:57:d1:36:8d:23:43:
78:20:cb:04:11:b6:1d:22:6e:13:29:be:bc:b0:71:12:93:15:
8c:60:0f:da:48:42:b4:8c:5f:ba:e7:59:54:5a:74:9f:e1:b6:
c5:12:df:1a:76:23:83:a4:79:b3:97:73:62:36:64:13:71:19:
40:24:63:44:d5:b9:41:ff:49:54:d0:2d:ab:83:3f:69:72:75:
19:78:3b:37:c5:93:e8:e0:ad:f4:89:38:39:bf:24:9f:46:fe:
f6:40:d0:39:be:5e:f0:ab:5c:9f:65:c9:63:11:93:64:6f:7c:
5a:ac:d1:bd:a0:9b:69:72:c9:4c:6b:f5:7d:72:cf:fa:84:d6:
95:eb:3d:d0:cd:81:2d:ee:72:6a:0a:55:b8:2f:61:54:db:72:
73:88:2a:2d:62:93:cd:79:15:01:a3:12:af:1f:9b:bc:46:f8:
f5:39:ae:08:51:1a:30:9d:1f:c1:b0:53:a3:07:39:80:82:94:
64:2f:5a:d1:9b:89:35:f9:96:b7:46:8e:ed:72:a0:8b:ec:33:
69:a4:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:19 2025 by rpki-client