Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: FttTH5iwYm5SABKWYuJFbfV87/SAO1sAEe+COC0EIlM=
Subject key identifier: 61:E0:36:75:8E:D6:82:95:B0:80:72:0A:C8:79:BC:1B:53:2B:D2:88
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 0196C34C12015D45C78BCAE3C6BA70DE95B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 1548
Signing time: Mon 12 May 2025 07:01:04 +0000
Manifest this update: Mon 12 May 2025 07:01:04 +0000
Manifest next update: Tue 13 May 2025 07:01:04 +0000
Files and hashes: 1: VgDY9zN_B3grCrz_H8xjNykqXTQ.roa (hash: V5RUWHdPXufxGeDHhevmGSEqGhIbGyboqgCFXxKzrT8=)
2: eWNwoG2gNqVOl4jxtgq3km86-j8.roa (hash: tuYXWwSXyhuCjeV5A6/luy4IrIPezyScgsOJmMQtw38=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: QTGoJ+QCYNtackYlsGdIA9Mp7t7fTzChqEwSddD2P+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:12:01:5d:45:c7:8b:ca:e3:c6:ba:70:de:95:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: May 12 07:01:04 2025 GMT
Not After : May 13 07:01:04 2025 GMT
Subject: CN=61e036758ed68295b080720ac879bc1b532bd288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:dc:86:88:b7:03:90:d8:cf:0a:2e:56:27:
cc:08:9b:da:c3:8a:0b:77:4d:c1:ac:e6:6d:38:cf:
ce:19:36:39:92:37:2f:f2:44:c8:05:30:72:b7:c1:
20:9c:b7:2c:a4:c7:59:0f:7b:1f:19:e8:e4:64:36:
a9:0b:db:98:4b:6d:9d:51:b9:bb:f4:b9:31:4b:ac:
57:a2:f6:05:e3:d1:ab:d9:05:78:d0:d3:05:8f:10:
49:33:9f:6a:f1:b1:b4:d3:65:df:fa:ac:bd:a2:5f:
68:80:59:5e:63:71:d1:e8:46:e6:aa:f6:a7:04:c2:
84:9c:0d:7d:6e:68:79:8f:74:9d:08:8f:2f:1e:98:
05:7b:f5:7e:28:8e:ce:d2:e3:64:51:1a:25:93:45:
51:f4:d6:ee:58:e7:ec:fa:0a:26:b6:6e:5c:7f:c5:
e3:63:95:86:33:eb:eb:04:2c:16:97:d7:33:9b:d0:
7f:8c:fe:d4:a7:67:f9:ae:04:43:12:46:fb:8f:60:
e8:1a:64:d4:aa:cc:a3:df:1a:9f:36:63:63:14:89:
1a:99:65:99:b9:66:b7:e0:5e:40:3e:d8:2f:30:7f:
bb:1e:ae:93:bc:3b:25:90:cf:0e:ce:1d:98:c7:53:
67:86:39:aa:fe:0e:6f:c0:3f:ae:2c:89:f5:96:7e:
27:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E0:36:75:8E:D6:82:95:B0:80:72:0A:C8:79:BC:1B:53:2B:D2:88
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a8:2e:8a:35:95:a5:54:9b:7d:f6:09:0a:15:57:d4:a9:f6:
99:40:b3:58:01:f8:93:18:c4:54:e3:8c:75:6f:3d:62:2d:c9:
cf:f0:d1:b1:db:99:75:92:e7:ff:31:56:e0:62:3d:c6:bc:b3:
96:eb:eb:8b:df:f9:1e:76:55:de:13:33:c1:4d:47:33:2e:7c:
be:4c:01:f4:67:9b:63:5c:19:e9:34:8f:00:c7:e4:b7:8f:4f:
7c:46:b2:f9:f2:e1:44:0a:73:ff:21:59:03:67:b3:4e:a0:e5:
ba:33:69:e8:6d:f3:b8:7b:55:07:85:d3:8d:99:0a:4c:2e:65:
2a:c3:bb:79:1d:dd:5c:53:b5:ff:87:b2:7f:8b:d3:b5:33:5a:
7b:44:9d:8f:7e:79:1a:51:23:65:f1:1e:d5:ed:80:10:1f:67:
25:01:f8:4a:25:c9:1f:f0:0d:f0:96:e4:64:03:3d:db:f1:0e:
f6:64:11:6d:5f:a5:3e:6b:bf:02:07:f0:05:86:de:a6:a0:91:
78:44:bb:4d:53:a5:10:df:d7:22:da:ae:27:03:96:a4:0b:43:
fc:bf:6a:5c:89:0b:02:ab:38:de:6f:52:7a:63:6d:e4:d1:6a:
e4:d4:65:1c:11:ed:c7:93:83:b7:57:79:a8:2a:74:b6:0f:e9:
68:0a:d6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:17:04 2025 by rpki-client