Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier: 0hpBh3R5ekKvNg7Jp2ONLPpczWzOTkc8J7U5NigtMaM=
Subject key identifier: 4A:C6:26:5A:31:49:95:40:F5:8F:FD:04:DB:98:0D:C8:50:36:84:15
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 0196A6547A8BD4B1E9F0E00FF79231FEAD81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 16:01:16 +0000
Manifest this update: Tue 06 May 2025 16:01:16 +0000
Manifest next update: Wed 07 May 2025 16:01:16 +0000
Files and hashes: 1: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: EuLHstFhFp8sjsdBCl7VmxtaOZm1Eo4VAEiWvmnmqms=)
2: qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa (hash: QQptDB1uT/9FFhotqk1bN1Jx0M0NJncKcjU5av3+7no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:7a:8b:d4:b1:e9:f0:e0:0f:f7:92:31:fe:ad:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: May 6 16:01:16 2025 GMT
Not After : May 7 16:01:16 2025 GMT
Subject: CN=4ac6265a31499540f58ffd04db980dc850368415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:74:a1:59:f0:e4:55:f6:4f:26:25:8b:ff:
db:66:a8:99:19:bf:ee:2a:34:7a:af:52:37:dc:8b:
4f:34:d5:72:70:08:ce:93:1a:27:f1:a9:56:c9:c8:
29:2f:77:e1:99:29:31:7d:63:f0:9a:86:d9:44:94:
30:c4:49:18:84:e6:a8:7f:9d:79:d8:6f:97:02:8a:
d8:79:0e:64:d6:f6:39:d8:53:c8:c8:9d:dc:93:28:
22:6c:65:a2:7d:d7:33:95:55:6a:4b:26:ff:95:9c:
d8:12:f0:70:26:1d:6b:5b:57:4b:be:29:1f:ae:98:
11:c2:23:eb:60:a4:95:9d:9f:e0:72:fb:d3:e6:21:
9d:f2:9b:c9:fc:a3:48:ee:b5:24:4e:4a:90:a3:30:
33:1b:ae:de:a0:e0:d2:75:ad:a4:e1:da:3f:77:c6:
1e:cf:f2:5c:c7:68:13:a8:ab:78:15:00:3c:30:6f:
21:4c:65:1d:99:9f:f5:ed:98:fe:8a:44:9b:03:db:
5d:3b:3c:b8:d3:23:93:5e:2d:11:84:36:88:4b:0a:
e8:2d:ac:bd:78:0a:c2:c7:0e:18:af:e7:d7:f8:0f:
7e:bb:9d:ca:1c:97:0d:af:18:60:a7:80:4d:5e:1c:
b6:8e:6a:37:fd:26:90:b8:0f:17:e5:86:cf:e7:88:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C6:26:5A:31:49:95:40:F5:8F:FD:04:DB:98:0D:C8:50:36:84:15
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9a:aa:a7:ae:16:d6:f6:03:c2:0b:93:82:67:d8:6a:12:41:
12:95:6d:50:42:49:5e:eb:5f:24:99:c0:d4:db:e5:92:ca:ac:
7d:92:0b:fc:a1:76:ba:62:13:c4:a5:64:9f:3b:97:45:ac:65:
10:8b:5d:c5:63:17:e1:88:dc:71:83:45:0f:9f:2a:6e:76:c1:
92:87:3a:59:14:d0:c8:a7:71:a4:ae:b3:19:dc:15:05:eb:af:
e5:fc:cc:23:b4:ec:59:4f:34:5e:99:bd:57:72:5b:54:94:c3:
cb:09:a1:01:dd:6f:03:7e:90:0e:60:e7:5c:17:86:88:65:23:
7b:63:96:6a:a3:72:af:b3:ce:dd:59:c1:f5:56:8e:2a:ab:72:
b4:dd:de:e4:5b:8a:33:f2:e5:f4:8e:b0:d5:cf:cb:7f:26:de:
3c:96:a5:86:2c:9a:ac:ff:bf:2d:ee:3e:80:ec:64:c8:5e:66:
16:07:b9:c7:4a:12:44:19:bd:70:29:14:f7:49:10:8a:63:ac:
da:c5:c2:11:37:ee:ff:e1:b6:dd:55:34:ad:0d:45:cd:8a:ca:
f9:40:64:45:b3:5e:bf:49:4f:05:35:b8:20:10:06:1b:ba:28:
94:a8:55:aa:45:a6:71:bd:b8:62:16:03:28:f3:04:db:34:83:
2a:30:6b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:25:58 2025 by rpki-client