Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: 1NakrbrEFjYo8xbWkxhST2uE8KZAqyy/2/5GbD5aQ4k=
Subject key identifier: 26:95:E7:8A:22:52:41:23:82:0E:56:EA:1C:24:A1:A3:06:EA:4B:84
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 0196C1CAC9421166E090D55079FE769B5238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 00:00:14 +0000
Manifest this update: Mon 12 May 2025 00:00:14 +0000
Manifest next update: Tue 13 May 2025 00:00:14 +0000
Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=)
2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=)
3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: Nt73UtDmmadZ9D61tyI4K8cX70CQ3mpiJ++4923PiEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:c9:42:11:66:e0:90:d5:50:79:fe:76:9b:52:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: May 12 00:00:14 2025 GMT
Not After : May 13 00:00:14 2025 GMT
Subject: CN=2695e78a22524123820e56ea1c24a1a306ea4b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:8a:5c:a1:4b:1f:2a:0d:8b:dd:6f:40:7c:
ae:12:3b:93:fa:5b:5c:c0:c9:9e:31:f1:75:51:03:
3b:52:29:fc:14:d8:13:c6:5e:5c:33:be:6e:f3:ee:
11:42:8f:7a:2c:6b:72:ee:3c:d8:79:5a:3d:34:56:
78:46:d7:b5:d4:14:3a:cb:62:da:d8:e1:83:1d:8c:
0b:0e:65:59:86:bd:d5:81:f5:dc:51:9d:15:ef:ee:
92:76:5f:35:a6:a9:66:88:0a:a9:0b:ef:a8:cf:79:
88:21:25:ae:97:ac:1e:fa:d3:46:c3:9c:4b:ff:9d:
93:3c:a8:91:a0:a9:77:f1:ef:2a:df:b2:12:e0:2e:
81:ac:fd:38:b7:59:66:87:58:78:56:ef:d2:ef:e9:
26:2f:25:f0:d2:bc:f9:f4:cd:95:46:91:e2:6c:9a:
63:92:aa:51:09:ef:89:1e:8b:19:c1:39:bf:98:19:
74:af:f1:23:ba:4c:e8:a0:7a:ee:65:91:be:2d:19:
af:b2:14:5b:99:9a:aa:ec:b1:45:65:89:3b:92:32:
0c:d3:8b:73:65:14:59:ea:f6:cb:b5:1e:31:82:ee:
cf:5f:3b:a3:4e:00:bc:fc:92:7e:a6:0f:e4:23:3b:
f3:46:5f:68:6c:ff:60:f0:a6:56:28:02:d2:d9:df:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:95:E7:8A:22:52:41:23:82:0E:56:EA:1C:24:A1:A3:06:EA:4B:84
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7b:ae:c6:d6:24:10:66:4c:3d:54:a9:20:4e:12:73:e3:a5:
d9:8f:d5:07:cd:cc:9b:c6:27:f7:ff:f4:82:f1:6e:73:b6:76:
d6:7c:bf:13:28:0f:29:88:c1:79:bc:d5:13:1e:48:1f:34:63:
61:3d:28:f5:c0:25:7c:64:3c:06:13:20:a7:99:9a:39:98:8c:
c3:7c:d1:fb:ad:3e:c3:53:92:1c:5e:d6:94:7a:d2:43:e0:07:
a1:18:2d:98:1b:33:a9:98:68:18:38:db:d6:86:8e:72:52:b5:
94:6f:af:d0:dd:39:06:31:fe:f7:3a:47:28:82:0b:6b:fa:77:
ca:60:f6:28:81:19:4d:98:80:71:98:f8:61:db:ef:c0:ba:6f:
29:5b:fa:e3:05:36:97:78:21:01:80:f5:73:c3:b3:8a:8c:a5:
f0:d8:4c:a4:6c:ee:34:a4:17:57:04:e8:41:9b:33:a7:90:73:
8a:b2:74:46:13:a9:1b:e0:37:5f:b9:ec:2a:aa:8b:cd:0a:91:
eb:92:96:73:18:39:9d:9e:d0:44:b2:ee:57:1e:6e:54:c1:f7:
a4:83:f0:18:4d:b8:9d:ab:66:77:d4:a3:21:8a:a8:7b:ca:ff:
0d:d6:8c:a2:ef:e5:bd:dd:76:1e:ec:b5:62:fc:e7:aa:95:03:
99:b5:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:46:21 2025 by rpki-client