Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
File: jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft (raw, json)
Hash identifier: hd3wGi1LYe2S3bIpGIBflbSUEUtThKs9UftgBMgkKZM=
Subject key identifier: 68:DE:A7:BF:61:F6:CC:2F:44:62:BF:DF:F0:3E:2B:64:C0:DB:D4:12
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Certificate issuer: /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial: 0196B7477498FB07A423A67731DED2834997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
Manifest number: 11C7
Signing time: Fri 09 May 2025 23:00:35 +0000
Manifest this update: Fri 09 May 2025 23:00:35 +0000
Manifest next update: Sat 10 May 2025 23:00:35 +0000
Files and hashes: 1: Kt2ksaxPkIjtDoeyg1P8yernNDc.roa (hash: wfAd3vob2ra8znve71igmwtD5TyA3SG1S1RzxivWZj8=)
2: byPwkkahLGpxY_tW1OLYNjMyZ_Y.roa (hash: QA9SayE2KiT0c9dHKY7N9OrSbz3bY915oFBo7q1THjo=)
3: jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl (hash: vrdSezDD8f7xk8VLOiG9t7k1T99wPqC6SPHpx17AA40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:74:98:fb:07:a4:23:a6:77:31:de:d2:83:49:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Validity
Not Before: May 9 23:00:35 2025 GMT
Not After : May 10 23:00:35 2025 GMT
Subject: CN=68dea7bf61f6cc2f4462bfdff03e2b64c0dbd412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:cd:f0:26:e4:14:8c:a5:00:e2:c9:c1:2c:
f5:f6:c2:7f:68:67:bb:2a:b7:91:2d:f9:83:82:a3:
6d:ac:bd:b3:78:eb:91:c9:ee:02:51:ad:d3:66:de:
9f:9d:d7:60:ea:55:d9:ab:ec:a8:40:95:dd:6a:e5:
11:27:e1:90:f3:a3:de:36:88:3c:34:3e:84:29:50:
4b:57:34:26:db:14:ab:c4:a2:3e:ab:10:98:18:c0:
b5:d9:4b:89:f8:2a:01:73:1c:7c:4c:48:f9:6b:af:
7d:f7:54:31:2c:68:3f:59:9f:9b:5e:f4:a0:c8:80:
cb:5f:13:ba:75:92:e4:e1:79:68:d4:87:e9:a9:cb:
79:30:21:55:00:76:a3:80:89:d7:88:83:c7:93:1e:
e2:f3:a1:2b:8e:10:ae:a3:25:dd:9e:d8:47:5f:9b:
68:2c:64:ac:68:0e:e9:8f:ef:6b:dc:33:42:e2:26:
16:fb:72:8d:ad:87:af:5a:e3:5f:aa:4e:32:9e:81:
84:81:51:16:1b:e6:8a:1d:3c:6f:85:09:2a:ad:21:
a5:65:7c:a3:e5:17:95:c1:f1:f2:1a:d3:ef:6e:af:
34:c4:95:b3:4c:79:c3:bd:a3:0e:e0:74:1c:33:e9:
b6:24:21:14:63:e5:f5:72:04:c9:aa:6a:1f:56:1d:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DE:A7:BF:61:F6:CC:2F:44:62:BF:DF:F0:3E:2B:64:C0:DB:D4:12
X509v3 Authority Key Identifier:
keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:79:f9:d2:92:33:b4:28:1a:df:ba:ad:48:d8:fd:37:25:5a:
b2:93:b2:bc:ff:e2:85:4e:70:06:f2:a5:88:ab:97:b0:f0:c9:
15:89:a5:27:d6:9b:e9:a2:84:19:1c:fa:1b:86:86:72:1e:20:
7d:ad:85:07:d2:42:39:4b:22:2e:86:1c:56:1f:e8:37:f0:c1:
3f:61:06:4d:60:79:4c:e9:62:cf:a3:86:c5:f3:d1:e1:cf:d5:
1b:95:33:29:79:27:b8:c8:4e:52:e4:6b:63:39:d0:69:3a:b3:
a6:1b:b6:95:56:1a:a2:7e:87:45:1f:3f:9b:e4:7b:fd:63:3f:
61:7c:60:10:e7:52:36:b0:e7:0d:75:b2:95:c4:53:d5:e4:9e:
1d:6e:11:d5:f8:94:6a:e0:ef:f5:2f:fb:cf:2b:b3:be:1f:29:
bb:11:99:89:f0:c7:28:6b:ad:16:2d:e0:b7:39:30:eb:50:8d:
f1:8b:de:68:b4:24:f5:39:dd:1b:d3:47:dc:0a:c5:50:0e:7e:
96:8d:9e:67:8f:85:fb:eb:4a:5e:25:a0:21:08:8b:5c:8d:a6:
f6:14:04:0e:13:17:31:9e:d1:a6:15:d5:08:bb:df:f4:28:5f:
ef:89:af:c2:44:73:06:b0:e0:da:14:00:a3:cb:1b:2f:03:3e:
74:27:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:07:44 2025 by rpki-client