Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
File: jntpkn3SG7nhRV-ojtiO0kfHGNo.mft (raw, json)
Hash identifier: tNpOIjPGneIEdXrEJl7G5JxR+xzzzkiNNUfSyVktDQc=
Subject key identifier: 90:CD:FB:8D:60:D2:97:97:6A:FA:56:63:5F:44:CC:E7:68:A0:EF:EE
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Certificate issuer: /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial: 0196B40F5BA51184395AEBEDBC36BA509989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
Manifest number: 129D
Signing time: Fri 09 May 2025 08:00:27 +0000
Manifest this update: Fri 09 May 2025 08:00:27 +0000
Manifest next update: Sat 10 May 2025 08:00:27 +0000
Files and hashes: 1: 9oNER91IB-H_6dQzFG4aTa1cjVM.roa (hash: oK/++MF9suyvds/jQSLAoISxJwhmMBspKaCD4mfLYUA=)
2: jntpkn3SG7nhRV-ojtiO0kfHGNo.crl (hash: 5cWCBCkF4CmmEEranbznhtRv7wKbJQNgO2dphBqTmUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:0f:5b:a5:11:84:39:5a:eb:ed:bc:36:ba:50:99:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Validity
Not Before: May 9 08:00:27 2025 GMT
Not After : May 10 08:00:27 2025 GMT
Subject: CN=90cdfb8d60d297976afa56635f44cce768a0efee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:e0:0e:5d:50:61:42:bd:8b:4f:df:fa:7d:
ff:e1:57:8e:34:bd:63:ca:01:38:06:57:cf:26:d5:
cf:d5:18:80:26:ea:ef:bd:1b:f8:81:25:92:e6:1a:
72:aa:03:a9:80:7f:2c:03:bd:82:4b:32:82:55:c4:
9c:86:84:97:d2:4a:8e:93:08:e0:3a:04:44:0e:c1:
f5:07:e8:aa:29:6e:dd:9e:9f:75:15:3a:b0:b5:5b:
dc:a3:5f:4b:6f:48:96:a6:ca:d3:87:17:79:81:2e:
72:bc:2a:05:7a:2f:5e:93:46:94:c2:a8:de:75:92:
df:26:be:44:88:79:be:ec:e2:bc:b8:0e:5e:bf:2e:
fc:17:ec:62:6b:1b:35:99:85:95:57:a9:9a:e4:93:
16:5e:ed:df:f0:69:ad:2d:cf:bb:3f:f1:b2:09:e1:
e1:57:0f:9a:e5:48:ff:45:c9:81:5e:d9:7e:80:cc:
a6:4e:ee:b9:ea:fd:3c:e4:34:64:6e:31:28:12:a4:
14:c4:c4:03:e8:bf:7f:ce:1d:b3:13:8a:35:1e:a6:
1a:e8:24:d4:f0:41:f5:1a:12:07:26:a3:78:1b:0e:
65:46:9c:e8:17:ea:35:6a:da:f2:08:0c:97:6c:56:
75:6c:1c:58:6d:05:41:d8:27:84:39:53:ac:d8:ae:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CD:FB:8D:60:D2:97:97:6A:FA:56:63:5F:44:CC:E7:68:A0:EF:EE
X509v3 Authority Key Identifier:
keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:31:22:89:91:61:0e:c3:dd:86:12:f6:31:dd:7c:22:20:52:
42:b4:ce:58:59:f7:0b:5f:70:23:8c:7a:a0:1a:7f:30:94:aa:
6d:b0:c9:8f:4d:ec:f4:95:76:77:76:fe:b3:23:0c:b7:a0:93:
77:78:a4:36:21:e6:a1:07:63:75:32:64:4a:93:cb:0d:6b:db:
9a:60:29:29:22:dd:ae:db:b5:c2:30:1e:0a:c7:24:4c:0e:6d:
75:d0:60:cf:ea:fc:68:32:d5:0f:fc:b7:3c:b3:dc:04:40:ab:
68:20:b4:21:31:15:c9:5a:44:56:e6:0a:87:5c:10:c3:54:6a:
1e:e1:42:84:90:ca:a7:95:b7:8e:e3:c5:3e:7d:d5:6f:15:01:
f4:82:1f:c0:dd:86:af:56:f9:b5:ab:78:d7:13:06:fb:40:df:
c0:0f:79:5f:61:29:ad:bd:37:ad:ff:54:d7:d3:10:db:ee:82:
20:29:7e:ee:84:b5:7b:35:a3:fb:e0:15:36:36:c7:49:74:a2:
e1:c7:85:de:05:c4:3a:67:58:bb:4c:93:4e:97:2e:27:b5:8e:
1a:4b:2b:b2:56:17:07:13:95:2a:9a:80:ff:89:cc:57:41:b1:
5e:c3:75:15:de:92:5d:6d:0a:40:87:13:d4:4e:21:3a:2e:db:
ae:c9:6b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:31:35 2025 by rpki-client