Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
File: j_he_yRIxzZG41Sv6mQbz3nnx_k.mft (raw, json)
Hash identifier: UHPKd3iYERvGDi3QCCB6ceKIpXzMzYHV3cPGxh1vRn0=
Subject key identifier: ED:5B:49:83:65:95:6F:FF:D1:CE:5B:B6:6F:45:3A:4B:56:12:BE:46
Authority key identifier: 8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
Certificate issuer: /CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Certificate serial: 0196BF6F8A6FAB779794CD1B3ADA623D29EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
Manifest number: 0491
Signing time: Sun 11 May 2025 13:01:20 +0000
Manifest this update: Sun 11 May 2025 13:01:20 +0000
Manifest next update: Mon 12 May 2025 13:01:20 +0000
Files and hashes: 1: izDgJyT_jFs6Afm1vFmx3IUq128.roa (hash: +piNMelo8kmyTOhWUH5qriIcmuElNVknleJSz/MJ2T8=)
2: j_he_yRIxzZG41Sv6mQbz3nnx_k.crl (hash: 30R+icPRfCislTugeHv7oSHAvh+i7UtaNaZ+2UTgMy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:8a:6f:ab:77:97:94:cd:1b:3a:da:62:3d:29:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Validity
Not Before: May 11 13:01:20 2025 GMT
Not After : May 12 13:01:20 2025 GMT
Subject: CN=ed5b498365956fffd1ce5bb66f453a4b5612be46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:05:bc:71:ae:c3:0f:0c:61:b6:c3:c8:b7:
45:c6:83:2b:ed:8f:cc:f7:e1:7c:a8:2a:aa:20:6d:
04:34:b0:ba:7a:31:1f:fa:f5:30:e1:eb:de:8a:67:
fe:b0:ee:30:65:b5:f3:68:3f:69:33:59:5b:70:67:
f5:fa:b4:5c:db:ee:d2:0a:cd:0a:c6:b1:8d:b2:9e:
ac:78:d9:b7:49:b2:6a:c9:fd:a8:4f:cb:f6:50:db:
47:ae:2e:34:b0:7d:c4:70:ed:73:68:a0:0d:18:a1:
c9:a7:ca:74:9b:a5:12:2e:22:46:5e:63:93:0f:f8:
7b:d9:1c:30:39:6e:bc:f5:91:9c:09:3b:42:1a:2b:
8b:f7:ab:69:85:5c:f3:24:e6:d2:13:a2:a5:20:51:
44:91:39:58:49:38:e6:24:c5:fe:76:03:f6:76:13:
01:52:df:3c:aa:6d:bf:49:33:ec:9a:34:29:d0:06:
4e:9f:18:8b:4d:25:6b:56:a6:d4:4e:8c:c8:fb:88:
20:b1:60:53:ea:97:70:bc:03:97:77:88:2c:45:72:
0a:13:fc:43:ea:f2:e4:9a:bc:85:30:2e:2f:f3:b1:
00:ad:47:1c:44:4a:21:54:f3:ee:94:b3:c3:55:68:
2b:f7:2e:a1:f2:08:7e:e1:29:29:b8:c9:a2:f0:ef:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5B:49:83:65:95:6F:FF:D1:CE:5B:B6:6F:45:3A:4B:56:12:BE:46
X509v3 Authority Key Identifier:
keyid:8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:db:3b:0c:f9:08:42:6d:00:0f:0e:00:5b:75:af:54:13:84:
22:2f:48:b4:11:39:69:40:cc:c1:f2:61:68:83:a5:35:ad:5a:
1d:7e:aa:16:0a:aa:1c:03:6c:5e:b6:e1:b2:d3:89:0e:ee:43:
68:0e:b6:37:bf:76:df:85:b0:f3:04:87:11:6f:c4:a6:d2:ee:
22:e9:9a:a7:8c:2a:7a:47:1b:66:36:52:ec:c9:ea:5a:47:20:
3f:b5:5f:fe:c3:44:0b:fb:69:fa:75:67:e6:bb:a5:91:5d:4f:
50:e7:27:f3:fc:45:1f:df:6a:9b:ad:e0:35:82:3b:c5:f1:9c:
c0:51:3b:b4:f9:c8:3f:26:c0:9a:e9:07:27:15:83:96:fe:e6:
f3:39:af:23:73:93:d2:20:de:bc:6b:86:f0:fa:0c:60:e8:0a:
50:0f:ef:ab:7c:fb:94:ac:64:37:67:64:c7:9d:61:f0:f9:2c:
9b:55:09:7a:8c:56:e3:43:25:d1:3c:11:f4:fe:f1:06:f0:53:
78:60:7c:59:72:57:50:2b:6c:27:51:b0:f3:98:b5:93:df:7c:
0e:33:31:38:7d:2d:21:31:6e:83:7b:94:b4:38:bd:9d:cf:99:
01:04:88:77:0b:1e:4d:26:0a:58:3e:71:98:95:24:7e:d8:d7:
cc:68:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:01:05 2025 by rpki-client