Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
File: jQtYT2A1_loofFZ_HjhUuPvCoMI.mft (raw, json)
Hash identifier: 9RQBri5+Mj86sw6/farevay9keb8OAqhrVzjkYVKXEs=
Subject key identifier: 07:3C:15:0E:83:5B:0D:73:E9:D1:BB:D9:ED:B2:9C:69:22:BE:34:9B
Authority key identifier: 8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
Certificate issuer: /CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Certificate serial: 0196BFDD13C5594977B111A2F31F6117B25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 15:00:58 +0000
Manifest this update: Sun 11 May 2025 15:00:58 +0000
Manifest next update: Mon 12 May 2025 15:00:58 +0000
Files and hashes: 1: 4QNIL4c6Gz_sxHoIV5bmO3J-yRY.roa (hash: hUEgN9PKhux4KaNWV6X/MwNUuCaPOczFnXagh0lAR1c=)
2: jQtYT2A1_loofFZ_HjhUuPvCoMI.crl (hash: KObEdGzx5rKDG9YKOAg//Km4OdQslwYsJh76Mqu0rok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:13:c5:59:49:77:b1:11:a2:f3:1f:61:17:b2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Validity
Not Before: May 11 15:00:58 2025 GMT
Not After : May 12 15:00:58 2025 GMT
Subject: CN=073c150e835b0d73e9d1bbd9edb29c6922be349b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:e7:0b:75:af:42:ac:a9:bd:69:03:f0:46:
32:6a:31:f4:26:27:8d:6b:da:23:38:a2:77:c9:36:
bd:d9:97:fd:0a:fe:75:34:85:8a:8a:10:48:fa:d8:
dc:e6:3a:64:39:f4:ff:51:26:4d:6d:52:aa:02:d7:
20:60:5c:cb:4d:b2:1a:04:d9:7c:71:07:77:7f:64:
c5:7f:35:52:13:f0:8c:89:1f:c3:2d:3e:ac:c8:e7:
cd:98:2a:1f:2f:a1:90:ba:49:85:eb:8e:28:76:cb:
6e:0f:56:b1:da:d5:0c:38:7c:c8:09:9f:ae:9f:e9:
2f:53:be:78:41:ae:c6:8c:35:82:90:da:4d:26:00:
36:fa:c7:63:d9:52:a3:ca:76:8c:ef:bb:ee:53:3d:
e9:58:29:92:88:14:8c:6c:a3:d5:11:5e:df:56:10:
d5:04:f9:de:07:3a:45:7d:da:d4:6d:4e:04:bb:28:
c0:72:dc:23:82:6d:d1:a8:b8:4b:d1:2b:8d:6e:38:
c4:3e:4e:ba:4a:9a:46:72:f3:e0:b6:50:3b:db:4f:
74:90:09:89:8b:ac:99:ba:77:48:af:6a:a4:86:45:
d1:ee:fd:eb:5f:88:fd:0f:f1:6d:7d:08:97:45:31:
b8:5b:94:b8:00:22:50:86:52:eb:06:97:6c:d4:13:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3C:15:0E:83:5B:0D:73:E9:D1:BB:D9:ED:B2:9C:69:22:BE:34:9B
X509v3 Authority Key Identifier:
keyid:8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a4:dc:72:db:79:25:0d:c8:3d:48:50:b2:bf:e6:98:c8:d6:
04:f6:d4:9a:71:0c:87:39:62:31:91:4c:12:53:86:56:2d:12:
4f:00:d4:bd:27:ff:cd:ac:3a:49:74:93:4a:90:8c:bb:ab:aa:
fa:3c:3c:72:19:c7:0b:91:56:c5:aa:6c:6b:a4:3c:a5:12:74:
5d:e1:ab:aa:cd:18:4a:0a:65:75:fc:d1:35:ba:25:91:eb:cd:
cc:09:88:3e:fc:83:6a:1d:4b:71:bf:37:dc:db:70:60:3a:70:
3e:6b:ac:4e:e6:a8:16:c5:a7:4d:75:31:1c:89:70:1e:0c:cb:
e8:33:e3:fb:4f:8b:c4:db:09:35:36:cd:7c:fc:62:0a:9d:c2:
c4:a7:d1:19:d4:d3:99:41:0c:e5:68:ab:d6:aa:d6:c6:2a:51:
65:44:88:6c:0d:17:08:31:ae:04:f3:00:50:68:70:b4:56:d8:
cc:44:5f:42:81:d4:9d:b7:00:74:db:ff:a7:1c:84:9c:05:94:
3f:f1:28:77:3c:7d:b1:c8:58:5f:e3:de:82:73:77:22:dd:88:
1d:90:be:8a:9d:f5:ac:0c:f4:d1:0d:09:b4:11:a7:84:31:3b:
92:fc:83:17:6c:f4:45:6e:37:01:dc:47:d5:84:b8:fb:a8:9f:
4c:26:aa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:17:20 2025 by rpki-client