Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: VRbScD4Z+jvkLnI5G7OBXJo95UVW5HPgqt/KWMopgnM=
Subject key identifier: 35:5D:CB:45:24:4A:2E:E8:27:8E:F5:72:03:77:18:6C:0E:98:9A:2B
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 0196A6C1E7CEDCD9BA1B928E5F13EDFEA978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 07E9
Signing time: Tue 06 May 2025 18:00:47 +0000
Manifest this update: Tue 06 May 2025 18:00:47 +0000
Manifest next update: Wed 07 May 2025 18:00:47 +0000
Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: I02yiwR090A3Ie/igwPQqFaWmqmtfhSwCpqiOEauEwk=)
3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c1:e7:ce:dc:d9:ba:1b:92:8e:5f:13:ed:fe:a9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: May 6 18:00:47 2025 GMT
Not After : May 7 18:00:47 2025 GMT
Subject: CN=355dcb45244a2ee8278ef5720377186c0e989a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:59:5e:23:c4:a0:b0:0d:13:75:be:a3:e1:
12:43:94:00:a8:ee:72:6e:47:ee:c9:ae:82:b9:8f:
db:6e:2e:6c:aa:ac:ad:82:0b:fc:dc:e6:42:ae:5b:
d8:3e:f1:f5:1d:36:ac:7c:31:44:38:7f:f2:cd:6a:
0c:fb:24:6d:63:0b:8d:36:19:92:1e:fe:a5:cd:2f:
5d:52:0e:7e:9a:77:53:f7:a2:80:3e:28:a9:95:ef:
86:6c:bf:fe:73:75:da:84:39:32:64:7d:b1:6e:ad:
ad:25:cd:2b:e4:5f:d4:c8:99:80:1e:04:95:49:20:
e5:5c:ae:55:1c:97:34:e0:6f:0e:aa:86:eb:39:ca:
75:24:19:95:b3:d4:4c:97:9a:f4:26:78:dc:53:93:
51:52:ed:e4:6d:45:a5:61:77:85:aa:f2:b8:10:84:
c1:2c:72:e2:b5:d5:10:db:0d:dd:59:db:99:c8:45:
b9:37:ac:70:c0:55:d3:f6:b2:96:25:d6:10:81:5b:
62:b0:54:95:da:87:35:27:e2:42:51:fa:2f:9e:61:
ed:98:10:2b:bf:53:cc:9f:cc:68:98:a5:bc:c8:ec:
21:a0:0f:81:6f:a0:33:23:ed:3a:a2:1c:aa:d1:3e:
82:da:e8:10:86:90:e6:e6:2b:a5:57:a7:23:08:45:
f4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5D:CB:45:24:4A:2E:E8:27:8E:F5:72:03:77:18:6C:0E:98:9A:2B
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ef:03:74:1f:48:e4:f8:2b:79:45:86:4c:24:62:a5:83:53:
ef:b3:ed:7b:2e:e1:fd:f6:50:cf:fa:a9:a5:05:d2:c2:02:5f:
48:af:d3:88:7d:96:0c:46:94:10:09:32:6b:3d:79:16:5e:30:
f9:b7:58:51:b3:31:60:e6:2d:c3:e3:1b:63:4d:9c:0d:2f:9f:
f5:ed:39:07:24:35:ff:78:d3:10:93:3b:6d:fc:26:92:ee:5a:
5d:07:2a:e9:8f:9c:3f:d9:b7:02:a0:c8:11:11:ae:5b:7e:be:
56:7a:f2:0e:66:f8:22:34:14:5b:ed:6a:7e:6a:c6:b3:9c:b7:
5c:8e:4f:ca:c7:89:b1:06:7f:ee:c5:a1:6b:52:59:ca:10:21:
12:af:11:79:ac:8b:83:cf:fe:39:9d:10:2b:6f:c8:65:45:c5:
18:73:ee:5d:64:ea:09:29:a5:15:50:d1:40:a1:8b:90:6b:59:
86:96:14:fa:b4:92:2b:15:3b:59:86:a7:69:e6:94:c5:40:82:
93:4e:14:29:c6:3d:b9:ba:93:a4:af:6f:53:57:4f:97:4f:cb:
c0:82:a7:ff:d9:8d:6e:a1:50:03:fc:52:03:d1:d3:1b:6a:9b:
c8:10:27:a5:61:4a:e4:64:d4:7e:a5:f5:b1:95:37:48:a8:80:
e1:19:cf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:39:28 2025 by rpki-client