Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
File: jygQkMQApWFm_Ii083pcuu0hhfA.mft (raw, json)
Hash identifier: rHQDS5QCIhu2f7Og/NUOhT58fybfH3mgNpH49kI9koE=
Subject key identifier: FE:01:BE:B7:D5:F8:C1:B9:AA:DE:EF:7C:4F:E4:79:87:52:F0:2C:E0
Authority key identifier: 8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
Certificate issuer: /CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Certificate serial: 0196BD80DC79401FCAC668077FE0D06174F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 04:01:00 +0000
Manifest this update: Sun 11 May 2025 04:01:00 +0000
Manifest next update: Mon 12 May 2025 04:01:00 +0000
Files and hashes: 1: 7XUdeR7Uiqy2nX_SzaBAY10QtF0.roa (hash: NZuDg+MfyuXfdZEwhDepOr5DFbg1lkCScWpvXsHFUtQ=)
2: jygQkMQApWFm_Ii083pcuu0hhfA.crl (hash: tbgS9HySKjzm2StLmEzR4RxXnGmbsdIlZXYCqyaxRtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:dc:79:40:1f:ca:c6:68:07:7f:e0:d0:61:74:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Validity
Not Before: May 11 04:01:00 2025 GMT
Not After : May 12 04:01:00 2025 GMT
Subject: CN=fe01beb7d5f8c1b9aadeef7c4fe4798752f02ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:b5:68:7b:73:f3:e8:4c:bf:d4:dc:ca:47:
ff:5e:e4:fd:4e:4f:e0:ab:cd:e2:86:0a:ed:02:8d:
6e:b3:4e:71:d0:34:90:cb:ac:fb:f7:32:85:f0:9c:
34:d3:3d:08:d4:45:fc:1c:84:0b:9f:d0:54:de:d5:
da:0d:09:e8:b5:c3:4d:33:bd:20:20:bc:a6:15:f5:
2f:30:b8:12:50:b6:3c:76:9f:51:f3:94:59:af:a9:
94:20:51:11:73:8d:20:c8:cf:f8:8f:3b:46:cb:51:
fd:8a:11:37:8a:b7:54:a9:7c:3a:8e:59:1d:2b:92:
07:87:c8:40:d9:d2:23:eb:e5:1b:f6:1d:b5:42:29:
0e:1d:cd:a5:98:fa:e8:45:f9:3f:c1:5c:c3:d1:f7:
ce:0f:84:c6:e1:7d:4d:f3:d2:fd:b3:70:65:b8:11:
7d:f8:c3:6c:6c:de:69:ec:17:f6:7e:3e:c9:2a:14:
10:4b:2b:21:25:15:eb:1a:33:cb:4d:9f:67:85:84:
f4:08:d3:62:92:b6:e4:97:d1:91:f6:5b:6f:69:6f:
7b:dd:44:13:5b:e2:57:1d:7b:0c:8e:a0:b0:5b:a9:
d1:8a:f2:20:36:b2:3d:e2:d4:74:99:4e:db:40:9b:
20:ec:57:d1:11:b9:07:30:2f:6f:71:a1:62:e4:06:
53:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:01:BE:B7:D5:F8:C1:B9:AA:DE:EF:7C:4F:E4:79:87:52:F0:2C:E0
X509v3 Authority Key Identifier:
keyid:8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1c:76:07:e3:fc:78:84:19:97:3c:50:54:04:97:c9:6e:06:
85:21:88:32:7c:0b:d4:56:4c:a3:55:74:9e:7f:41:b0:77:a2:
f9:c8:1f:ab:04:08:c9:54:27:7b:7e:56:72:c0:d3:fe:9e:d4:
a3:db:33:9b:9c:3c:18:64:84:99:be:33:1b:6a:8d:18:04:ff:
8e:e0:ce:9e:7d:30:03:c0:37:03:10:d8:8e:af:5c:80:62:b9:
b6:c2:3e:47:f3:a2:c0:71:28:16:53:be:ed:33:02:2e:f0:58:
c1:44:64:51:f9:15:c0:e5:90:91:00:47:f1:56:85:42:b0:7f:
66:38:07:30:4f:5f:b8:24:0a:83:31:e8:ec:2a:a6:d6:24:53:
84:66:2c:f4:1e:80:be:c3:ab:e4:2d:46:e3:e6:aa:ca:34:69:
ea:d0:f8:1f:ed:7f:c7:a0:f2:0b:bd:83:d7:0c:15:03:f6:d9:
fc:0a:75:fc:11:06:f0:4a:bc:ab:46:7e:19:8f:4d:b9:04:d2:
fb:9c:f5:b5:17:53:ad:e3:9a:b2:12:62:0a:a3:f4:16:7f:f3:
2e:25:f8:5a:e7:c7:2b:49:87:98:b4:15:8b:b5:6c:42:ee:b7:
ee:23:1b:03:6b:fd:af:7d:3f:13:12:2f:76:68:cd:01:02:d1:
51:7d:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:52:24 2025 by rpki-client