Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: wWocJ5MFfbB55/w6ym1L3E8YJCiBlvxgxdGEcB4bctY=
Subject key identifier: 7C:EE:56:76:88:3E:6C:CA:EF:CF:3A:F7:FB:DD:B7:A5:05:4A:99:F2
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 0196A208EDE6B0F929A7A5F34AE3333C60C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 1257
Signing time: Mon 05 May 2025 20:00:16 +0000
Manifest this update: Mon 05 May 2025 20:00:16 +0000
Manifest next update: Tue 06 May 2025 20:00:16 +0000
Files and hashes: 1: V9xIuDHmhh7U3tTkSVryBJA5CVk.roa (hash: eyLpVtUoY/mctnpBoqtxHHGp6ollciBlit2BNgnLLmE=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: KP3hrtd8c5wBeN1s0BoYVlcD2hnPrWdIsJ5k/wSncUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:08:ed:e6:b0:f9:29:a7:a5:f3:4a:e3:33:3c:60:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: May 5 20:00:16 2025 GMT
Not After : May 6 20:00:16 2025 GMT
Subject: CN=7cee5676883e6ccaefcf3af7fbddb7a5054a99f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:9b:cf:14:d2:c0:25:85:d2:c8:0c:09:3a:
62:0c:3d:53:5a:e5:64:75:59:69:66:f6:89:cd:12:
db:ea:35:f9:67:d6:79:b4:1f:8d:b6:72:45:ca:70:
10:09:0b:89:e3:f4:56:43:e2:35:9d:f6:6d:c7:60:
b0:fb:72:4f:60:28:9f:8f:8a:81:6e:2d:90:20:8b:
6d:a9:9e:22:d3:a9:68:c1:bd:5b:07:13:6d:bf:cb:
cd:bb:8e:6e:5a:4f:76:eb:ab:a7:d2:53:fc:d1:4b:
be:f3:f0:69:3e:03:df:5c:9a:aa:6f:a3:9c:a0:eb:
ef:9c:91:4a:2f:5a:bb:1c:b2:9d:54:98:79:bc:5b:
74:f1:d9:40:42:80:12:31:bd:f9:8a:91:63:e8:60:
32:2f:e6:30:8a:31:29:46:56:f2:45:84:f5:1e:58:
73:3c:24:1a:ed:25:25:19:34:de:f3:b3:0f:99:da:
71:e9:83:21:3c:5e:8c:65:c8:37:6c:24:ad:46:cb:
ac:90:bf:a7:a5:60:79:63:08:11:7a:93:6e:28:9f:
30:2b:df:40:c4:73:bc:6c:24:7d:ff:99:83:b1:dc:
b8:01:6d:ad:83:06:52:76:8e:ea:e6:6a:97:5b:35:
1f:40:e1:9a:4c:4f:ff:f6:d0:25:bf:cc:a1:9f:33:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EE:56:76:88:3E:6C:CA:EF:CF:3A:F7:FB:DD:B7:A5:05:4A:99:F2
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:22:53:d1:97:ff:29:bf:50:f7:b4:fc:f9:ab:a1:a7:bb:04:
ea:fe:63:88:63:76:de:9c:e4:52:e0:10:d1:3c:97:ec:f4:64:
c7:cc:e6:a7:f8:34:e2:50:6e:01:b0:1b:7a:d6:41:dd:47:f0:
66:d9:fc:6f:72:8a:da:09:06:46:92:6e:1d:ec:c1:05:3f:3c:
4c:fd:cf:1f:b0:ef:b9:69:e5:db:30:50:3e:31:8c:14:28:55:
df:20:30:f9:33:27:2d:66:0f:cc:a3:df:7e:79:ce:ed:e5:8c:
c3:6c:66:40:1c:b1:1e:73:fb:72:7c:7c:f8:6b:aa:80:79:5c:
a1:7e:8b:78:99:5c:33:ad:d8:0f:3b:75:d7:9f:db:01:3d:0e:
5d:74:b2:d2:98:9e:50:9c:1a:46:92:5d:8c:f7:7a:7d:a3:39:
cb:0b:05:23:f9:c8:74:c8:35:44:45:45:3e:36:09:14:36:c3:
ae:b5:5c:dc:79:07:33:04:b6:4c:bc:73:59:a4:0c:57:6f:cf:
cd:ff:19:aa:ad:d0:c3:a0:e2:47:fa:33:ae:b6:89:e7:06:35:
94:48:31:c6:28:43:e9:0f:d3:92:f5:be:fd:c9:75:57:73:31:
98:7b:8f:a3:f7:0f:2d:8b:97:36:37:be:99:89:c2:23:ec:30:
b4:8f:ee:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:08:41 2025 by rpki-client