Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
File: JiditzviJrFxmZQSYlrMcnAkQ0M.mft (raw, json)
Hash identifier: 0rJLnR4zfg0fDBSFXFpzik03E/Isfv5cgc9+n2cLyEE=
Subject key identifier: 70:0F:3D:54:59:87:18:DF:C8:6A:84:35:B9:3B:22:FE:30:D1:8E:A4
Authority key identifier: 26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
Certificate issuer: /CN=262762b73be226b171999412625acc7270244343
Certificate serial: 0196778D061E4175F12831FD78A3F33928DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
Manifest number: 015E
Signing time: Sun 27 Apr 2025 14:00:52 +0000
Manifest this update: Sun 27 Apr 2025 14:00:52 +0000
Manifest next update: Mon 28 Apr 2025 14:00:52 +0000
Files and hashes: 1: JiditzviJrFxmZQSYlrMcnAkQ0M.crl (hash: mF8hEZ/Y05yZP20s8v6+/Y18BQV2XCMXw5Xtre+bCBU=)
2: SW0NmgN1MfeImMBLkTet_og-k3A.roa (hash: NuBlZaeVdzU+Qx3vpR2cHPvzMF2hd3qV04JT0+dx0Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8d:06:1e:41:75:f1:28:31:fd:78:a3:f3:39:28:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262762b73be226b171999412625acc7270244343
Validity
Not Before: Apr 27 14:00:52 2025 GMT
Not After : Apr 28 14:00:52 2025 GMT
Subject: CN=700f3d54598718dfc86a8435b93b22fe30d18ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:d3:5e:86:3e:95:26:dc:99:ec:5f:eb:9a:
b1:72:25:85:1d:23:86:28:8e:55:8e:19:8d:a5:d9:
5e:8a:d3:ea:8e:34:fe:1a:b0:a7:87:4d:9d:4e:25:
b1:7a:6c:52:d3:b6:fe:e2:48:0b:b8:eb:d0:c4:2d:
41:ec:70:b1:87:a7:27:44:19:74:f8:e9:ff:e5:35:
ec:ce:d3:e3:e8:f0:f7:c8:50:42:1f:08:52:a9:bd:
24:47:14:55:44:f6:ae:c0:e9:ed:a4:b1:61:53:c6:
1a:c3:e4:ff:44:b5:29:01:0f:6c:bc:11:b6:34:cd:
d8:45:99:89:38:00:f1:6a:cd:32:de:3f:51:e5:70:
20:11:38:4f:bd:36:a8:34:8d:48:69:d7:c7:70:0f:
e6:22:f1:fc:e0:5e:5f:5d:a4:ca:18:dc:03:ff:d6:
f6:42:ea:ec:94:34:45:69:37:66:2e:7b:a9:94:01:
cf:3a:b9:c7:bf:3a:44:dc:33:47:a8:eb:e9:20:7a:
67:65:e6:4d:2a:f0:8a:de:1c:92:e5:18:8b:a2:63:
2f:fa:85:1b:47:d5:78:95:2b:3b:8c:03:82:ba:9c:
fb:c8:3c:cb:44:8f:1d:cb:57:97:47:c2:a2:1b:06:
b5:71:f3:f6:f5:e6:8e:1f:d0:62:79:26:bb:45:1c:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0F:3D:54:59:87:18:DF:C8:6A:84:35:B9:3B:22:FE:30:D1:8E:A4
X509v3 Authority Key Identifier:
keyid:26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:75:81:42:43:45:e5:51:3d:7a:e4:6e:27:ed:16:c2:b7:ea:
a9:20:3e:ef:c1:0a:7d:9b:0a:85:c4:c7:83:ee:48:c1:74:26:
bd:d4:e7:e1:37:d7:37:50:4d:26:45:d8:5d:80:b8:0a:88:36:
06:b1:92:ec:ed:f2:a7:2d:10:c5:31:20:13:b5:ba:98:6b:01:
59:2b:1e:9f:2e:4d:fb:94:06:61:27:05:db:22:2a:56:a4:7e:
48:48:c0:a4:6d:45:e8:fb:c5:96:66:db:dc:d2:c5:2d:95:c2:
0e:ef:2f:32:8e:86:96:8d:fa:27:ce:2f:83:44:13:ae:51:68:
65:ca:3e:ad:f2:d6:42:01:65:70:2e:59:cd:7c:f9:ca:ed:a1:
cf:ce:f9:44:48:41:88:0f:2f:f2:b1:fb:25:e2:73:9d:04:72:
aa:8f:1a:d3:28:68:a7:f6:15:2e:01:e7:68:11:1b:d6:f1:f9:
e5:7a:3f:64:01:02:30:24:f7:92:2b:69:d4:f2:4c:0a:8f:e9:
bd:47:fe:d3:2e:a6:ae:11:7c:29:91:12:ed:a1:db:7a:e6:c6:
38:0b:32:e7:88:e3:b1:33:26:da:a7:db:29:f0:d1:d0:f8:a4:
80:d3:61:da:25:a4:02:43:fb:48:47:32:db:20:0f:9f:e3:a6:
c7:bf:5c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:21 2025 by rpki-client