Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json)
Hash identifier: LbezlpDM3aRCKYsk6vqgbnyA74S8X8B2ck+rPAuQ4Z8=
Subject key identifier: 64:63:17:C6:76:86:AB:9C:EE:07:32:E6:52:1E:6C:1D:34:A3:DA:8A
Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Certificate serial: 01967A1FA76230D95517A411F513D05D6EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
Manifest number: 0F0C
Signing time: Mon 28 Apr 2025 02:00:16 +0000
Manifest this update: Mon 28 Apr 2025 02:00:16 +0000
Manifest next update: Tue 29 Apr 2025 02:00:16 +0000
Files and hashes: 1: AVv7KqsJQ7Zn0lKyZ4rdnlf-GJ4.roa (hash: NUdH+bGXaFI8uXmd6dLOR5WLJnhwd6mvan4jq3rAulE=)
2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: u7W+NnOvm9laVuMcTvyqtvldSmdG1vNAOStFpFCG9NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:a7:62:30:d9:55:17:a4:11:f5:13:d0:5d:6e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Validity
Not Before: Apr 28 02:00:16 2025 GMT
Not After : Apr 29 02:00:16 2025 GMT
Subject: CN=646317c67686ab9cee0732e6521e6c1d34a3da8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:f1:94:0a:9a:cc:e2:4a:54:bf:ac:df:6c:
56:da:03:7b:ad:f9:b5:a7:14:09:04:eb:87:b2:ea:
13:98:dd:b5:86:ee:3e:b0:b6:94:f8:b1:91:f1:b6:
47:76:80:21:ec:17:38:5a:59:95:7a:d2:12:d3:24:
2a:bb:49:db:62:cc:fe:06:ab:11:aa:ff:f3:19:35:
32:d8:26:c4:26:a2:7b:ad:73:6a:e2:49:3b:bd:c7:
cc:f1:38:cb:02:a0:27:26:b9:ff:e2:83:a2:ff:b2:
ae:ec:a5:c2:5f:5f:fe:f8:fc:56:65:9c:83:cb:4e:
95:24:fb:49:4b:b6:6c:ea:d7:4f:5d:9f:ef:21:4d:
b0:53:e4:c6:c0:03:a7:2d:23:73:95:c7:71:ac:5e:
49:18:75:29:38:fb:c2:ff:52:7b:a3:c4:24:d2:ba:
e2:72:be:f0:2a:16:84:08:24:19:1d:bd:1c:7b:6b:
e8:bb:f1:59:f4:56:e7:20:2d:df:5a:37:71:94:1a:
be:d3:d1:dd:d0:72:8f:f4:5c:09:59:7d:d2:fa:05:
a7:aa:6a:66:34:f0:6b:02:a3:99:17:44:84:3f:33:
26:b4:90:5f:39:20:97:7d:1a:00:af:bc:98:29:95:
88:8c:f4:27:18:28:26:cd:91:29:ba:75:4d:76:c6:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:63:17:C6:76:86:AB:9C:EE:07:32:E6:52:1E:6C:1D:34:A3:DA:8A
X509v3 Authority Key Identifier:
keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1f:31:74:c6:11:7c:12:08:a8:71:7f:7b:89:44:72:25:bd:
1a:3a:aa:ac:76:a0:08:32:0d:63:12:96:a2:c1:ad:99:86:34:
29:da:3d:7f:36:8b:b4:6f:fb:73:bb:67:0d:47:48:5f:0c:49:
c8:e7:ac:9c:d2:8c:63:79:d7:e2:42:9a:72:fc:0f:dc:9c:de:
1a:f5:4f:a6:54:92:55:66:da:a1:89:3d:71:2c:29:64:6f:17:
32:27:04:8d:a1:9e:e9:a6:6a:15:38:66:3d:83:60:8e:27:5d:
c8:58:b0:26:d0:af:1a:09:6d:1a:7d:50:6e:c4:c1:2b:3c:d3:
0f:5b:f7:4b:6b:fd:bf:6d:84:ab:fb:de:54:05:a1:57:e8:50:
af:db:30:c8:bb:09:0a:5f:df:27:1f:68:a7:73:14:9b:4d:ee:
6b:d4:29:aa:8c:bd:90:19:e0:ea:a3:40:53:b6:1f:b3:47:fd:
ad:1d:94:90:ee:45:83:00:c4:20:f8:80:fe:e9:b2:9d:00:c7:
d1:e1:83:61:d1:69:16:fd:2c:81:8e:5e:e5:52:30:6e:ad:f4:
b8:4c:31:d6:a9:a0:98:4e:0d:1e:9d:a1:dd:d8:fd:6a:72:10:
b7:93:3b:94:5a:e5:86:cc:f2:f7:67:24:a0:dd:6c:9e:c5:f7:
5a:ea:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:17 2025 by rpki-client