Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
File: jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json)
Hash identifier: PnQdFzmCNjrieIlhGZUs2kgoQVdYLa1eUs+G5ChRFlg=
Subject key identifier: C9:83:78:9D:FE:60:C9:42:7A:A5:6B:41:73:34:D1:97:F1:D6:3E:0C
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial: 0196A3F79F36D78AC7C338D31B56C37119F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 05:00:36 +0000
Manifest this update: Tue 06 May 2025 05:00:36 +0000
Manifest next update: Wed 07 May 2025 05:00:36 +0000
Files and hashes: 1: IGFAJ7tvsxoewBIz-CIaT5Rb9KA.roa (hash: b9kbJBvM0NpcufGFz0NyZFZ9HPycn+QMvqEDUNgTAzI=)
2: MQoy-ze9auOiRnYWkevo5ug6b74.roa (hash: e50zWSr9FAOpXTByWZCk9NzWnhOqRMc92RH7Gp5XlqE=)
3: ivVRenlAkxSye3NC_DyoAxqoj6M.roa (hash: tMvkuqfZVs7G8eRqzF/eWUmt5tCQ8iMBN+34AAtvEYo=)
4: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: EwB35/kOJapqrGUM0n4veDfRwYeXNLxc7mnmpwvQGhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:f7:9f:36:d7:8a:c7:c3:38:d3:1b:56:c3:71:19:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
Validity
Not Before: May 6 05:00:36 2025 GMT
Not After : May 7 05:00:36 2025 GMT
Subject: CN=c983789dfe60c9427aa56b417334d197f1d63e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:73:e0:69:f9:ba:b7:00:af:f9:5a:c6:96:
9f:b0:ad:41:58:5e:a8:68:b9:99:73:a2:19:b5:9c:
d4:1f:a2:ff:ee:64:56:29:0e:87:3d:47:ae:78:72:
1d:f1:67:11:1d:d6:68:de:51:c4:0b:f9:9f:7f:03:
b7:be:bb:c0:cb:99:f2:d7:e4:0c:25:cb:1a:be:b1:
97:eb:0f:82:86:10:ed:05:31:f0:50:17:73:d6:be:
d7:a3:fd:c3:a2:34:b4:09:88:d8:3e:8e:97:c0:72:
be:b5:ee:41:09:f4:42:53:70:80:79:ae:a1:34:d0:
10:b6:99:0f:9c:64:1d:dd:66:24:ee:6c:e7:12:cb:
da:b9:38:86:58:08:c6:3a:75:89:96:77:71:03:f2:
eb:32:eb:97:90:6f:ab:aa:aa:c5:e8:28:76:6b:b0:
44:d1:f9:8e:73:fa:61:02:c7:af:e8:84:c5:5a:9a:
07:bf:40:86:a6:06:4c:64:74:8c:fa:36:07:96:01:
7d:0b:eb:d3:81:e0:fa:a0:cf:7f:3b:7b:d7:9e:9c:
a7:51:22:bc:28:a8:0d:5d:e3:60:b2:d0:73:06:6f:
17:ac:db:c9:62:f9:1c:11:9d:e2:ef:0b:2b:ae:87:
22:27:b9:c3:75:c9:ac:c5:56:7c:de:6e:b3:8f:3d:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:83:78:9D:FE:60:C9:42:7A:A5:6B:41:73:34:D1:97:F1:D6:3E:0C
X509v3 Authority Key Identifier:
keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:79:a4:60:ed:3b:7c:4d:af:be:71:52:fa:8c:1e:22:04:8f:
1e:3d:96:b2:61:ae:fe:c5:4e:16:89:e2:72:42:4a:95:c8:4e:
04:5c:d7:42:1a:a4:51:08:a4:c0:19:a4:ad:f7:fa:ab:a7:65:
2c:44:56:d3:a6:f4:ee:b2:ad:cb:34:ff:0e:59:cd:c8:ce:e7:
aa:9c:5d:50:cf:e1:ad:74:67:9b:b8:e0:38:d1:e8:ba:04:00:
77:15:89:6a:6b:6a:23:f3:15:89:a4:26:d8:11:31:d5:1f:b5:
89:7e:2d:88:78:a5:75:2c:ab:57:4b:58:80:b8:4f:d9:af:23:
b4:b9:9d:5a:60:0a:94:df:7b:2d:25:1c:80:83:bf:40:0c:1b:
f7:bd:fb:6d:70:98:cd:21:fc:0e:2a:85:e0:f6:9a:c7:c6:59:
57:23:c4:a8:a6:06:87:14:bf:62:35:5d:47:d1:7e:b0:4d:06:
29:0c:d7:9b:91:4f:f7:66:69:68:39:71:30:56:aa:3e:cb:aa:
07:55:19:2c:05:a5:7c:cf:f4:46:30:9c:b4:69:39:f0:c1:8d:
5e:93:5c:8c:7e:6c:c7:2f:c1:d7:30:ff:81:01:65:5a:70:a5:
e9:2a:d2:9c:f6:fb:3c:ed:b4:7d:07:6f:ab:7a:ef:40:46:75:
3f:29:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:11:25 2025 by rpki-client