Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: daHehgwJvZJG0TQLBM/W6ICwX62zeMS61tTDZUiWz1A=
Subject key identifier: D1:2A:DD:77:01:3C:63:2E:E5:68:A5:02:DD:41:4E:D3:2D:46:F4:07
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 0196D7E503BCF893A38573BDA62625612430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 1526
Signing time: Fri 16 May 2025 07:00:32 +0000
Manifest this update: Fri 16 May 2025 07:00:32 +0000
Manifest next update: Sat 17 May 2025 07:00:32 +0000
Files and hashes: 1: UNUa4oFxwFdm00m5r-G61s8Ikh4.roa (hash: k9276a/1X0ewFXRF6cwjGjRo8BKQKSRBiWAxipeCeXc=)
2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: 7Vjt70dnuorQ8//6rJieMprrL8SnU4a+nW+xgitBDPE=)
3: nFwSDt7zXXCk1k3rMZvJ-zj3Fu0.roa (hash: g/i/k3s/MVqnbweAQkw4FIePeqK2H7kiTAvv/06+PxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:e5:03:bc:f8:93:a3:85:73:bd:a6:26:25:61:24:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: May 16 07:00:32 2025 GMT
Not After : May 17 07:00:32 2025 GMT
Subject: CN=d12add77013c632ee568a502dd414ed32d46f407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:f9:cc:41:c2:8a:a5:36:99:ae:1b:d2:d2:
cd:e4:37:ac:80:5a:be:de:48:04:8e:40:45:85:49:
18:5d:15:2b:4b:4c:6e:e9:9f:a1:6d:f3:3f:fc:83:
8e:7f:05:6f:a0:29:48:0c:85:1f:b0:9f:8e:86:3b:
48:be:23:63:e2:22:d9:4e:d1:97:e9:5a:63:6d:cf:
b4:05:16:c4:fe:2a:d5:1b:88:60:9f:fc:9a:ff:65:
30:1c:8e:1d:56:71:3d:91:a7:23:05:d6:a8:f1:73:
87:40:52:c5:a2:7f:08:11:0e:e7:ec:67:d7:c9:5c:
b4:9f:54:44:3d:6c:d7:07:0f:01:4f:87:d1:1d:29:
2e:6a:6c:09:36:05:2b:b9:fc:d6:81:aa:21:38:8a:
37:90:e7:4e:43:f4:32:82:51:6c:95:f5:55:6b:97:
93:c4:45:06:68:08:63:45:43:8d:52:1c:51:8c:fc:
dd:94:1d:ab:bf:d0:06:f0:ae:d7:29:fb:7d:05:cb:
7e:b1:16:39:a5:dd:47:69:bb:1e:dd:bb:6f:b0:b6:
30:71:36:56:9f:21:30:07:69:85:1c:45:66:4d:8e:
dc:c3:5e:c8:e7:03:f1:7f:76:48:26:28:e7:00:39:
06:df:bf:ec:04:9a:cd:b3:a5:06:45:fc:83:57:6f:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2A:DD:77:01:3C:63:2E:E5:68:A5:02:DD:41:4E:D3:2D:46:F4:07
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:be:39:f7:42:0d:1f:42:a4:25:e1:2b:fa:7f:ec:df:99:40:
6d:a8:af:64:d1:f0:7f:dd:0d:16:7e:1f:0d:3c:21:dd:4b:e5:
2e:35:05:cb:35:05:58:70:24:4b:fc:88:8d:ee:a8:23:dc:6d:
d6:d2:a2:6f:cb:63:cb:84:52:a7:d0:98:31:a0:6a:c5:f6:57:
f9:2f:37:7f:f1:44:6e:0a:ef:d8:03:43:b3:98:53:8a:ca:ee:
1a:56:09:9f:a8:4f:6d:b5:bf:51:11:78:c7:c3:27:56:40:50:
19:d3:ac:96:cc:43:02:62:90:28:24:7d:26:47:28:4e:e5:4b:
53:7f:d0:b7:8c:92:29:b0:dc:28:95:f3:f6:44:05:24:a6:90:
10:12:17:8b:c2:d8:4b:d8:90:5b:08:59:d0:ac:e1:e3:cf:9e:
5f:f6:b6:63:bb:5c:53:8e:43:11:73:3b:f1:ed:80:d9:e8:f0:
e7:71:3d:eb:51:9b:af:70:93:3a:1e:02:da:2a:c8:ce:41:ca:
21:f8:54:96:cc:b1:1c:9c:c7:e6:d0:3c:dd:2a:a2:62:ac:94:
57:f7:dc:6a:ec:7e:62:ff:81:e0:6a:dc:4a:b3:34:ad:54:06:
ff:67:39:9f:ed:4b:33:2f:df:f1:18:fa:44:12:41:6c:c7:f1:
3a:9b:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 10:47:11 2025 by rpki-client