Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: jHfW23L+FNewdcVpNA+H5X6oVJmip0mAH1Bit+ohM7s=
Subject key identifier: DC:EB:92:5A:44:50:21:AD:8F:89:8C:C0:2D:58:9F:49:D1:5D:29:2C
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 0196C7968A3A5DDF7BF085EDECD3C506E544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 03:00:53 +0000
Manifest this update: Tue 13 May 2025 03:00:53 +0000
Manifest next update: Wed 14 May 2025 03:00:53 +0000
Files and hashes: 1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: WG0ok89xdINp1pztYtzDpLhy78lDAjVNMJYgO5i27yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:8a:3a:5d:df:7b:f0:85:ed:ec:d3:c5:06:e5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: May 13 03:00:53 2025 GMT
Not After : May 14 03:00:53 2025 GMT
Subject: CN=dceb925a445021ad8f898cc02d589f49d15d292c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7f:2f:8a:f9:3b:da:68:f9:65:33:4d:38:95:
5e:7a:e6:e7:ef:99:f2:e3:c8:90:f8:27:e0:02:5b:
ff:14:84:cf:b4:ca:df:cc:31:22:ed:c4:47:af:4f:
2b:97:ec:dd:19:14:80:5f:62:20:40:ab:e6:c0:cf:
5a:31:d6:2f:93:a9:cc:51:20:5f:d1:20:31:d0:af:
6e:58:52:4d:09:20:7e:e2:d6:0b:4f:53:71:1e:21:
17:d5:ea:e9:36:5a:9e:6e:96:f0:a6:0e:0d:0b:08:
f3:a1:66:42:e3:8d:3b:3f:ac:87:b8:23:fc:93:2a:
1f:fb:ea:a7:29:4f:8a:b9:f0:0a:12:6c:a1:2b:e3:
b8:25:60:05:22:e6:d6:7c:a6:14:c3:d1:51:dc:ba:
c7:6a:5a:33:c5:77:84:56:2e:20:e1:c2:3a:f7:e6:
dc:7b:cf:d3:f4:ef:1d:3b:b7:f3:76:25:98:a4:6d:
c3:ea:7a:f3:9b:3a:f8:78:95:c8:51:f3:6d:72:16:
b9:79:c1:b0:8a:c0:8c:6b:ef:46:17:19:eb:ff:13:
c1:57:d0:88:7e:2c:6d:c0:c0:65:f3:ed:6a:96:a5:
75:03:17:f1:ab:1c:32:a2:82:c9:75:d8:9d:75:fb:
c7:73:7b:48:40:8a:a0:82:1f:45:ca:60:6e:bb:d0:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:92:5A:44:50:21:AD:8F:89:8C:C0:2D:58:9F:49:D1:5D:29:2C
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a4:c6:dc:cc:ff:fb:be:38:06:13:dd:23:95:b9:62:e7:48:
a0:b8:f5:d5:e5:38:d3:41:ab:26:6b:40:ff:c9:6f:e2:10:25:
38:c9:b8:26:f3:6c:96:21:de:4d:68:4a:d1:27:10:21:fb:93:
9f:81:a3:74:1a:28:60:e8:5c:4a:a6:e1:9e:44:41:33:5a:cd:
94:fd:43:02:d3:41:c3:34:8e:3d:e2:33:ec:31:8a:35:76:41:
de:5f:61:4c:6a:a1:1a:a8:11:db:c0:aa:d6:c4:26:9d:b6:e0:
2a:87:fb:69:79:d3:2c:58:d0:f7:e1:de:e9:07:40:91:c2:60:
92:c9:b4:c9:45:a3:27:69:bf:41:d0:ff:51:50:f5:0f:f2:95:
0f:ae:01:a6:ac:08:e8:95:17:46:4c:5f:a0:8d:dd:cc:35:f7:
b9:a5:90:4b:a3:22:3c:c9:84:9b:a8:6f:b1:30:59:67:bd:e8:
fd:d2:44:1e:ab:df:b1:0d:ce:b3:20:e6:05:11:cf:56:38:a2:
3e:4a:6f:88:f9:4f:fa:26:a7:a0:b9:16:94:31:7f:c1:d7:9c:
16:d7:66:cb:03:17:00:e5:88:53:81:aa:3b:52:b0:2c:22:c1:
74:e6:62:b4:6f:bd:30:f4:2c:07:85:c1:60:1b:7c:d4:65:ea:
f1:6a:0f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:10:16 2025 by rpki-client