Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier: CYrDhgDsTgMF6C/9GQr+Ajl1eGnO7xOOxlRUu9tDvDw=
Subject key identifier: 25:3C:3D:9E:0C:3E:B4:2A:27:EF:9B:8F:4B:1D:7F:48:49:03:71:C3
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 0196BA4894B7590DDF37A6640F5C3CF77349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number: 1351
Signing time: Sat 10 May 2025 13:00:40 +0000
Manifest this update: Sat 10 May 2025 13:00:40 +0000
Manifest next update: Sun 11 May 2025 13:00:40 +0000
Files and hashes: 1: a4jmgoHAnwZuKpBvCe6_TzZv-rI.roa (hash: DuE1nvAiok4keI6ublPx26acQpOfZSVKC03Q+UriaBA=)
2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: S5eHDn12+ixFoSfY/FSLFCo5/t3n3VwBDBHWgiTQgl0=)
3: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (hash: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=)
4: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (hash: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:94:b7:59:0d:df:37:a6:64:0f:5c:3c:f7:73:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: May 10 13:00:40 2025 GMT
Not After : May 11 13:00:40 2025 GMT
Subject: CN=253c3d9e0c3eb42a27ef9b8f4b1d7f48490371c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:69:8b:84:46:80:4e:f0:2a:7e:e4:c1:7c:
f1:b9:a4:08:f7:52:87:ee:3d:c2:f3:49:13:6f:8f:
09:6d:ce:64:ea:4f:a7:d8:d9:a9:36:28:20:5d:17:
66:ba:45:eb:89:41:a8:f4:08:ad:07:84:94:79:18:
27:ca:cd:15:5a:5b:40:24:c5:93:01:46:22:fe:b6:
40:45:8c:a0:8d:90:5c:28:0f:c0:ec:b0:6f:3e:52:
05:7e:a9:d0:34:67:b3:a6:2e:98:6e:fd:df:c0:89:
06:fa:85:e0:93:d4:65:ba:c0:0e:72:af:29:02:4c:
be:94:4b:86:de:47:08:0e:b6:58:3b:94:d6:b7:d6:
fd:e6:ef:dd:e6:21:a5:04:ee:3d:a1:91:52:74:21:
b4:70:2f:b4:ad:c4:08:55:bb:2d:0c:73:6a:67:00:
bf:a4:e2:17:d8:1a:5c:9a:7c:e7:f6:1c:e0:5b:00:
e5:36:54:60:81:fd:e8:08:33:56:61:54:49:2f:d0:
be:21:7f:41:07:ca:c9:19:6d:04:1a:c2:78:b3:a8:
0b:5a:c1:44:6a:c2:7d:7d:bc:5b:24:d3:71:9f:5a:
eb:ef:17:77:8e:93:65:74:80:c9:4a:39:44:f0:ce:
1c:67:c2:e1:50:ca:37:98:f9:fe:0a:f3:61:84:5a:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3C:3D:9E:0C:3E:B4:2A:27:EF:9B:8F:4B:1D:7F:48:49:03:71:C3
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:01:3e:7b:f2:2e:a7:fa:7a:38:82:8c:80:87:2d:e7:f3:21:
4a:4e:db:26:fd:9f:98:b8:3a:c2:2d:52:07:02:e2:fd:71:48:
08:aa:8b:27:ca:45:cb:63:13:f8:c8:55:dd:5c:ce:ce:99:0f:
de:89:3c:a6:78:aa:60:cd:f9:5f:b3:e3:60:97:bb:63:83:7e:
05:9e:6a:c5:47:c5:3f:57:60:1c:9d:d3:e9:3f:d5:75:68:7f:
1a:05:0b:e7:d1:08:e5:53:69:99:a0:0c:b9:93:37:9e:f7:4a:
f9:26:4b:9b:84:22:1e:b2:a8:28:64:ca:93:c4:aa:5e:c9:7f:
8f:4f:50:c3:1a:e1:3e:56:b7:57:85:7c:02:a7:7c:e4:64:a8:
6b:32:db:06:7d:5d:0d:2c:36:ec:2d:3d:3e:ca:b1:33:46:9f:
3c:83:d0:6a:4c:e9:1f:52:82:e0:87:0b:14:f5:72:5c:f2:49:
82:9e:2d:34:bf:87:22:90:ea:1c:9b:76:7f:58:8a:69:3e:15:
fe:ee:72:95:4d:e9:54:b7:47:d6:0b:e6:cf:16:e9:2c:f9:27:
0a:73:8c:ea:cf:c3:e6:44:ca:f6:39:79:e0:ef:fb:ef:17:eb:
e8:76:b7:76:40:a4:af:20:a8:24:86:d9:33:61:95:8b:04:77:
6b:fc:38:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:15:15 2025 by rpki-client