Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: RqMPCaWElatMkOcUp7mzhAtj1OlXy5gO2o+5xlO7DBs=
Subject key identifier: 14:6F:FF:89:FC:44:B8:D4:B3:03:09:7F:4F:E7:3D:29:27:03:F5:11
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 01969E9A94CA40908218939CABF7A8B86B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 1422
Signing time: Mon 05 May 2025 04:00:52 +0000
Manifest this update: Mon 05 May 2025 04:00:52 +0000
Manifest next update: Tue 06 May 2025 04:00:52 +0000
Files and hashes: 1: 0UHdcMJlJhG3oZKabqSdR28w2GU.roa (hash: c4S1i8VzMNkAak+YpBSVo9bfa8POuJI9pEw8vgNIjtg=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: YOhqxKl52qpH4Q4dGQNozwKBx78j5r5C2bPyt4C0eB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:94:ca:40:90:82:18:93:9c:ab:f7:a8:b8:6b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: May 5 04:00:52 2025 GMT
Not After : May 6 04:00:52 2025 GMT
Subject: CN=146fff89fc44b8d4b303097f4fe73d292703f511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:50:f2:19:4b:6d:f1:a3:96:56:a3:80:96:
7f:55:1a:a6:a0:56:1d:f5:f7:a6:71:3b:be:7d:53:
e5:26:01:b1:61:c7:93:50:9b:34:41:ec:7b:46:e6:
b3:86:52:f1:d9:aa:14:b5:65:6e:b6:61:31:9b:2d:
f6:a2:1b:85:28:08:19:66:25:34:6a:2f:00:37:a6:
ad:bb:c3:ef:61:c6:d4:9d:f7:dd:cd:f4:f9:72:94:
a4:c1:78:8b:1d:e8:bc:60:59:6c:ba:27:e9:c9:9c:
96:42:84:2c:98:70:65:c4:9a:1e:71:87:17:ab:93:
c3:10:34:47:65:cd:13:73:ef:0a:0c:00:19:54:71:
27:f1:a7:aa:ca:c1:c1:ac:4c:bd:bc:a7:14:5d:4d:
81:3a:70:7a:24:26:e0:f9:9f:e4:f4:b1:b8:5e:ef:
71:40:00:92:ba:6f:8f:e1:9a:e9:24:28:59:3f:1a:
b1:37:c2:b3:ef:8a:76:a2:fa:ba:44:13:37:a7:db:
38:2c:66:17:06:7e:b8:f3:92:b3:76:90:f9:58:d9:
19:51:0e:0c:cb:1d:98:1d:3c:52:3c:04:86:45:54:
59:f1:61:db:79:7a:f0:40:39:fe:65:9e:ad:6a:08:
74:19:27:26:ee:cb:a1:bc:24:f7:4c:02:27:b2:c0:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6F:FF:89:FC:44:B8:D4:B3:03:09:7F:4F:E7:3D:29:27:03:F5:11
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ca:6d:a7:d6:de:c9:4e:23:a5:57:1e:d9:0c:5e:ae:28:73:
1a:af:01:1c:f3:22:ea:9b:62:c9:88:87:55:7e:d5:4a:a2:27:
40:bb:01:ab:94:b8:9e:fa:2d:ca:47:09:9b:00:2c:61:ff:a1:
b1:12:27:fd:26:c5:7f:2b:f0:70:c0:d5:da:0c:46:10:50:dd:
94:39:f0:3f:bb:eb:6d:d7:d1:59:86:0c:de:28:00:0d:af:b6:
e4:db:5e:cd:24:74:e1:81:40:db:3c:ce:92:2b:1e:20:f9:f9:
d5:ec:89:e9:7a:29:f9:27:f3:a5:4c:d6:8e:8e:93:09:3f:5d:
82:04:f8:97:4b:8c:49:b1:32:ac:d7:89:f8:b6:08:dd:f4:12:
20:69:cc:cf:99:a1:2a:51:5b:37:4d:c2:6d:35:ef:60:93:3e:
68:92:31:c3:a3:37:a3:9f:cd:cf:20:9b:d7:66:1d:7c:c2:e2:
1e:b3:6b:3f:77:44:0e:9e:79:52:e2:37:57:d4:c8:2a:1f:37:
5a:63:55:16:bc:0b:0e:94:e4:5d:25:2e:8e:d8:7a:3e:7a:80:
98:9c:cb:99:22:9c:2a:b4:e8:fc:6e:7d:3c:02:0f:60:6e:4f:
01:92:3f:e8:ed:f3:23:fa:36:bc:6f:00:54:9d:f2:51:f8:49:
24:66:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:17:12 2025 by rpki-client