Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
File: JmXBf6AosxNI9jD2tW30Is4GKzs.mft (raw, json)
Hash identifier: 9YHHnf8T0IEnhbBOoFlAa50C993yL4cVWOGwYUs6gRY=
Subject key identifier: 8F:C2:85:38:32:D4:DF:A9:40:66:41:78:04:A6:6C:F6:A7:39:75:0D
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 01969F76304AC48299A019D58A314E28B636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
Manifest number: 152A
Signing time: Mon 05 May 2025 08:00:45 +0000
Manifest this update: Mon 05 May 2025 08:00:45 +0000
Manifest next update: Tue 06 May 2025 08:00:45 +0000
Files and hashes: 1: JmXBf6AosxNI9jD2tW30Is4GKzs.crl (hash: DCXmLFpdPSlF2L8kwWF5aId/Eff1d67r1NjHAQ6uYR4=)
2: VmjhuzrK06h5F7GtuU6dsi8hn1g.roa (hash: gGDiZCD/tlVCECKmAFNRX/tBWljfywnrFyxgpkW8vqI=)
3: nR__W6eKmJDCSQ-Ve5BuBqRgj1w.roa (hash: ZNjHEO/Wo6ExM8zMnQZKVmVx5Txz3u+vK2dWd4D/o1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:30:4a:c4:82:99:a0:19:d5:8a:31:4e:28:b6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: May 5 08:00:45 2025 GMT
Not After : May 6 08:00:45 2025 GMT
Subject: CN=8fc2853832d4dfa94066417804a66cf6a739750d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:e8:d1:2e:63:57:2d:c7:10:fb:7a:d2:0d:
56:25:ed:3a:83:40:8a:ad:a1:41:d8:d4:4e:9d:85:
c8:7c:18:5a:6c:10:47:d5:1d:ba:2e:25:07:d4:ce:
8b:a8:25:39:ae:7e:12:94:06:27:e3:67:f8:15:22:
9a:c8:eb:fe:14:aa:58:ee:c5:af:aa:92:1a:de:39:
4f:6c:d5:d6:5d:18:c8:c7:51:a4:0c:ee:0b:f7:1a:
d5:e0:15:50:62:42:67:85:14:98:43:e6:56:cc:88:
23:65:80:15:a7:c6:78:5d:ae:96:42:34:b9:71:0e:
17:f8:69:d3:43:e6:f0:84:e9:bb:78:49:89:7a:fc:
98:e8:59:a2:bc:7d:19:ee:3d:80:aa:ad:12:61:ef:
e1:91:12:15:c0:8e:8a:59:3c:67:fe:88:41:be:cf:
fc:27:ad:55:37:f6:7e:fe:68:75:af:f6:12:88:f9:
e6:e0:1b:95:53:ec:9f:38:84:74:28:a8:85:43:52:
f8:9d:f6:de:49:00:90:cd:32:cb:01:bc:1b:94:f7:
c8:78:4f:95:f6:f6:0f:41:65:1e:dd:1a:98:ad:d1:
3f:e5:71:b4:55:31:85:5c:e2:e6:01:c5:88:1e:6c:
84:6f:f3:15:d0:96:cb:e8:0a:bb:fc:5d:44:be:52:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:85:38:32:D4:DF:A9:40:66:41:78:04:A6:6C:F6:A7:39:75:0D
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6b:0c:27:17:e4:11:56:61:43:2a:e9:6c:52:0e:e0:bd:0a:
9d:00:f9:9e:d6:96:e7:ca:c5:7c:12:1b:6f:01:7f:ea:97:b6:
44:55:fa:86:37:c4:56:22:2a:b1:f6:62:1c:eb:9c:a6:4c:e0:
73:6e:dd:c7:7f:40:4d:59:df:6d:eb:47:6f:00:40:16:37:00:
23:8a:9e:b6:87:14:86:26:60:d5:c9:ae:64:4c:76:f8:bf:ad:
f3:70:f2:0a:30:a8:e8:ef:88:b7:67:bf:f1:e9:4f:ff:92:70:
99:fd:f9:83:84:75:09:1f:7b:6d:5d:d4:7d:0a:fb:7d:15:3f:
fa:fd:01:6a:ab:55:63:24:7d:1d:24:c1:52:3d:f4:c0:6c:38:
8f:44:2c:4a:04:23:2d:8d:a9:9a:fd:13:6a:c4:0f:e4:dc:5e:
12:3e:60:5d:84:6b:10:a7:7e:de:96:d4:3f:10:fe:80:54:f2:
cc:ed:30:d9:9a:5f:59:97:07:02:68:c3:74:f7:be:08:e8:3a:
df:ed:b7:0f:5d:12:8c:5e:fb:6f:31:69:2c:a4:75:5c:c3:4c:
13:01:cf:6d:1e:05:39:66:a8:f8:0e:c0:88:12:2d:8e:48:1e:
20:b1:dc:a1:88:62:df:cb:7b:5e:11:ab:2a:85:34:eb:9d:68:
27:fc:1f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:40:27 2025 by rpki-client