Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
File: Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json)
Hash identifier: zoowlmwdqgqdw4ZLzlTTuPTGUVblx1scQObx0rWdExc=
Subject key identifier: E3:C8:2F:0D:93:68:13:71:4F:47:E9:B7:CA:0F:9B:4A:C7:45:91:86
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 0196BE93310A10EF04E07DB4B9A8CCBC73A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 09:00:39 +0000
Manifest this update: Sun 11 May 2025 09:00:39 +0000
Manifest next update: Mon 12 May 2025 09:00:39 +0000
Files and hashes: 1: E5UqsHXI4rxEYamOG66v7YvvX58.roa (hash: 58pJlWEPXnRDyDfxMzNI3/SbQdUBvyaiOkTUhmV+dLw=)
2: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: 9ncmZzreFUiPeIAbLIJUZa+2f4cbx3Ppv153kfBszfM=)
3: on-RtWMULYhntqitPVzhY7lgnl8.roa (hash: N1GhLpfbUDUJ0gIZbjVbPi/X8FRKHkZMNhXw3o2Pm+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:31:0a:10:ef:04:e0:7d:b4:b9:a8:cc:bc:73:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: May 11 09:00:39 2025 GMT
Not After : May 12 09:00:39 2025 GMT
Subject: CN=e3c82f0d936813714f47e9b7ca0f9b4ac7459186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:aa:ab:61:c6:cd:92:7b:32:ef:4a:a2:ad:
dc:cf:6f:65:10:20:85:cc:81:ae:5c:dc:05:c8:7e:
c5:f5:c0:bf:b6:88:35:e1:e7:76:c4:74:85:e0:d2:
32:22:b6:91:c8:0e:0b:83:5b:00:6c:2e:0e:b7:65:
3f:e8:26:5c:82:b8:01:7a:27:16:b0:d1:8a:a4:97:
f5:23:ee:f3:de:37:a4:14:ec:14:32:2e:23:e4:7b:
4f:4e:02:58:34:df:2b:1d:0c:28:f9:cb:f7:fa:51:
16:6a:b2:b8:d7:c3:47:8a:53:51:35:d8:f3:67:36:
44:dd:d0:d3:0b:9a:1c:07:72:57:43:38:ff:85:ba:
82:06:73:2a:ae:fb:f8:71:a9:8b:6c:6a:32:77:03:
01:e4:d8:b0:30:25:9a:e5:08:9b:43:e7:df:44:03:
df:b8:33:94:b3:08:1c:44:aa:2a:87:60:65:5b:13:
d3:ea:e6:e5:25:a9:dc:d1:27:94:8a:18:74:8b:24:
d0:d0:18:9b:85:1b:dd:52:89:39:c4:46:08:11:b2:
6c:06:5c:a4:38:7c:0a:0d:10:e9:5d:f4:99:bd:5a:
70:c4:aa:5c:63:8e:0e:ba:ee:85:46:10:33:5c:ce:
98:56:90:dd:25:fb:75:9d:11:6a:bf:64:09:31:16:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C8:2F:0D:93:68:13:71:4F:47:E9:B7:CA:0F:9B:4A:C7:45:91:86
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b2:e8:14:14:5f:2c:a2:86:80:8c:87:4b:01:2e:b9:2e:b7:
2d:a2:f1:31:71:4b:37:bd:90:f1:e6:ea:36:68:6a:70:1f:2f:
60:93:47:b9:f5:c3:c5:ea:7d:28:67:a8:ee:47:ee:b5:ce:e6:
3f:6c:b4:6a:96:ac:07:5c:07:b1:4c:54:bf:5e:02:4d:9b:78:
61:e3:80:1b:14:80:11:44:bf:db:bc:e5:c9:c1:6e:bf:15:62:
bd:7f:80:5b:c4:2f:bf:8e:bd:bb:d9:31:45:b3:c7:e7:c4:66:
92:60:6a:9b:fe:34:8b:2c:91:89:2c:6f:18:2f:69:07:35:00:
ff:67:51:68:7f:e3:9f:7a:ce:5d:97:22:fc:2f:0a:56:ac:4f:
8f:bc:77:4b:5f:57:3a:d4:9b:80:3d:93:1e:26:79:05:2d:07:
05:e8:25:7e:47:2e:0c:d0:58:b0:59:9b:35:58:ef:1f:cc:aa:
8b:56:d1:c8:1c:73:7e:84:e4:07:22:fc:7c:1c:6b:f6:62:85:
4a:6f:4e:93:d9:9b:30:b2:56:1f:05:54:7c:2e:ab:f5:05:94:
a0:18:81:f9:43:54:9d:2e:d7:31:80:9a:b2:96:1c:bc:85:3c:
cd:2e:b6:60:41:2f:6a:3c:9d:37:22:10:da:2e:46:03:0c:74:
2d:d2:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:52:15 2025 by rpki-client