Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File: Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier: 4YkXueELVLOXOyANiLAuTPBdu/mzjlXZ8kzbDY/ugMo=
Subject key identifier: 9F:8A:3A:BA:3E:D8:C3:B5:65:ED:62:23:13:04:CD:92:C3:76:5F:5E
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial: 0196CB7328DF3456F415D6025585A6C71945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 21:00:43 +0000
Manifest this update: Tue 13 May 2025 21:00:43 +0000
Manifest next update: Wed 14 May 2025 21:00:43 +0000
Files and hashes: 1: 8uqjL1Q7jgFdAvMEecW_AW4apnU.roa (hash: IZPA4o1k55p7lULIvDMGq6iadu+UZEquYpH4pdM728U=)
2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: HUquKyM4Xem2vg8q1uHK2L+61m0ii9r6ueh7zTrWLL8=)
3: LrkB9dXr22HFK0At5t4rrNYD7PQ.roa (hash: pK+9flLjEvjRYAQ3vaW216H5wdCjdNXzoh5ryOe38KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:28:df:34:56:f4:15:d6:02:55:85:a6:c7:19:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Validity
Not Before: May 13 21:00:43 2025 GMT
Not After : May 14 21:00:43 2025 GMT
Subject: CN=9f8a3aba3ed8c3b565ed62231304cd92c3765f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:6c:fe:57:d4:bb:0d:82:2a:a8:4c:68:a4:
a3:d5:9d:04:dd:ff:ca:0b:50:d9:0a:67:f8:f0:7b:
fb:28:77:b5:4c:23:e3:86:6f:22:50:9d:ce:7d:c2:
90:73:a5:35:a2:9b:96:99:66:0a:d8:2f:f1:9c:ab:
3a:aa:dd:80:21:61:11:44:53:32:a6:16:03:a1:a6:
7a:f4:27:63:0e:47:94:23:b7:ed:16:85:86:74:b0:
45:61:20:0a:70:54:1c:fe:50:bf:7e:4c:5c:36:d9:
3c:79:72:9f:0f:c9:b2:57:9b:47:5f:22:a3:1a:bb:
c2:2c:55:b9:8e:ea:8d:00:65:e3:cb:a2:79:93:83:
eb:66:10:c0:41:da:0b:7c:88:b9:17:1b:dd:97:d9:
9f:6d:19:29:93:c8:93:33:fd:19:5b:c2:ac:c8:00:
63:7a:33:a3:a2:3b:65:a9:c3:ce:0f:2b:23:cb:83:
c8:87:c0:f8:33:ca:48:54:9b:a3:1b:b1:1d:5c:07:
59:88:eb:3d:2d:a7:62:29:96:6c:63:7a:88:77:29:
64:b9:ad:48:6f:3e:51:4b:c3:f5:f7:66:0f:20:03:
82:af:97:69:a6:4f:50:31:26:ba:b3:0d:0b:e9:09:
2d:98:d0:66:e5:80:85:3a:fc:90:8b:6d:58:84:23:
f8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8A:3A:BA:3E:D8:C3:B5:65:ED:62:23:13:04:CD:92:C3:76:5F:5E
X509v3 Authority Key Identifier:
keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7f:c0:f2:7b:98:97:4c:3c:49:ce:18:76:e7:00:9a:89:ac:
0f:bf:07:f1:55:6a:89:21:31:f5:01:ec:56:44:35:2c:14:50:
50:d0:da:0d:d4:f7:6b:b7:56:f3:55:ac:32:7e:55:9d:51:22:
ee:67:cd:b6:47:eb:9a:06:f8:76:00:f4:fd:e4:49:9e:4b:d4:
89:70:e4:97:93:69:bf:cf:26:a1:f3:f6:2c:d7:b6:da:6e:65:
92:51:f6:ba:a2:60:9c:10:47:72:57:4b:c5:0a:51:66:9e:6c:
4f:60:ca:8c:38:63:96:58:7b:e3:dc:fb:40:5c:fe:f2:6d:ef:
d0:cd:02:8e:e4:0d:4f:b1:48:58:ec:bb:db:ee:7e:db:12:e2:
72:88:d6:da:46:66:4c:04:7e:bd:02:86:5b:9c:89:e1:b7:25:
c7:ac:09:67:d5:a5:8f:e6:fa:c1:1f:dc:10:d2:03:38:51:4c:
11:9e:55:ad:42:e4:b6:b6:6d:7a:28:00:64:6d:4b:ef:af:7a:
6a:75:6b:ae:3e:fc:a6:6a:a6:c5:f9:c8:9a:c0:86:5e:1c:66:
c5:9e:35:10:24:3e:0a:94:63:6e:6c:82:2d:43:e9:17:a4:e0:
fc:c3:0a:24:c0:09:67:ab:d6:1e:9e:5a:37:1f:b1:ca:07:84:
8c:ae:ef:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:15:58 2025 by rpki-client