Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File: j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier: prZqz6iGUApck0iqHdkrz0UMFVUgD5cSvykUQd+Xopc=
Subject key identifier: 85:FC:BB:AA:2E:25:EF:4D:AD:0E:AB:4D:80:9A:81:93:35:D8:05:88
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial: 01969F07F190727EC248FC02762965AB819C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 06:00:19 +0000
Manifest this update: Mon 05 May 2025 06:00:19 +0000
Manifest next update: Tue 06 May 2025 06:00:19 +0000
Files and hashes: 1: DSv-iSXA3wX9nDodPQXtYNJDYLQ.roa (hash: rLpTuxbTjwB1kMP3m7oQHgnYLtGjlIXTCssqGQyXU8s=)
2: abJHppOXbNRTL5BB9_dNqlKen94.roa (hash: yyWwgZa5PLui39TWj5tUmAj6wvoO0anzfsZ9NlvSNwI=)
3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: gcrTQ/MndSKS1R13w4YmoR2YdAWFhmuTdfn84bq23PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:f1:90:72:7e:c2:48:fc:02:76:29:65:ab:81:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Validity
Not Before: May 5 06:00:19 2025 GMT
Not After : May 6 06:00:19 2025 GMT
Subject: CN=85fcbbaa2e25ef4dad0eab4d809a819335d80588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:93:b5:2a:74:71:29:b4:5a:cc:8a:e9:40:
c6:39:c9:66:11:85:2d:23:9b:e8:44:13:c7:ba:bf:
b5:5d:7c:9a:39:87:9e:a8:ad:7a:b2:a8:3c:49:d6:
98:db:e5:04:54:bf:37:31:3f:7a:36:60:20:26:53:
b3:b0:de:1c:e6:c7:91:c0:ba:3c:9b:57:77:09:36:
41:90:cc:3e:f9:40:15:d1:f1:b2:ee:17:f6:69:6f:
4a:e5:f0:14:7a:fe:7a:7a:be:ce:03:7d:8a:ab:8f:
34:00:03:18:b5:52:69:d4:04:05:b8:34:7d:6e:fa:
a8:6b:12:4c:a7:32:f9:d6:15:6b:90:d4:e3:b4:53:
d8:1c:bf:9f:24:e6:12:d7:d9:31:40:7f:19:b8:0a:
e2:df:9d:57:25:42:97:6c:2e:fd:06:3e:2c:ed:ad:
54:aa:b0:db:fd:b4:2a:f2:51:f8:e1:19:38:a8:82:
7c:f4:fe:37:0b:ee:94:7a:68:99:e2:0b:da:eb:42:
56:c9:05:88:49:b4:09:3d:e4:03:a2:8a:42:27:aa:
66:d9:5f:b3:21:a3:72:ec:92:36:cb:03:ee:54:c9:
1a:ba:15:53:e1:8b:75:60:42:53:66:88:fa:f2:81:
4a:70:31:80:6b:85:dd:38:0f:52:54:08:98:2b:ec:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FC:BB:AA:2E:25:EF:4D:AD:0E:AB:4D:80:9A:81:93:35:D8:05:88
X509v3 Authority Key Identifier:
keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:50:38:66:43:71:cb:c9:be:30:c8:c6:73:22:9d:41:f5:6b:
ce:9a:c6:d7:31:17:f0:68:41:99:3a:4d:c1:b3:e1:29:1f:9d:
56:d4:71:94:37:57:d8:e0:5f:2c:1c:30:15:9e:7d:97:96:1e:
28:ca:a6:a1:86:90:7f:c3:bc:33:af:97:fb:e5:8b:0c:df:45:
66:29:ed:90:db:df:f1:d6:1c:8c:69:00:d0:1d:93:12:7e:fb:
d0:db:63:94:67:ed:8f:eb:89:f8:46:05:83:27:ac:06:e1:00:
0e:a2:e7:cb:88:b8:7b:a1:90:3c:44:6c:28:75:47:f6:ac:ed:
52:2a:a4:64:91:7f:69:0b:00:99:07:35:bf:9e:7b:55:c4:7d:
25:24:00:ef:f0:d4:0b:c0:37:c1:63:b2:78:b7:ee:cb:0f:9f:
ba:50:e6:74:c5:c5:08:0d:ad:d7:84:fc:6e:5c:10:73:18:5e:
c4:5e:6a:d4:1e:2f:ee:d4:ca:61:12:8f:97:53:42:09:03:8d:
90:51:de:cb:82:c8:57:2c:e0:12:cd:04:f6:80:fe:42:c6:6f:
e0:53:95:f3:42:d1:f9:82:9b:40:9e:4b:82:08:a2:2d:1e:3d:
39:ce:fc:33:46:10:45:6d:0e:12:c6:a4:bf:0d:d2:69:6d:dc:
24:24:0b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:12:35 2025 by rpki-client