Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File: jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier: SCElJzSqdU7O8WGWAvB8Pdh5AP6mkV7eZnI9JU507AQ=
Subject key identifier: 10:50:40:6D:94:78:45:05:9E:C3:47:D5:06:71:D4:60:24:6E:9D:01
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 0196CF4FE05A979B8EB979D2875341E6B2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number: 153E
Signing time: Wed 14 May 2025 15:00:40 +0000
Manifest this update: Wed 14 May 2025 15:00:40 +0000
Manifest next update: Thu 15 May 2025 15:00:40 +0000
Files and hashes: 1: Zwk791BjXFiWW_GWZuipoheVevk.roa (hash: 98bTEWSKCgsr9ScLAh15mZ7s1p9cPoDYzZZ0PPizWyo=)
2: ebKQop9j6C8Jd62F7ue25JuDgWs.roa (hash: FqOT4Eu6V5AfcUcuw2gXk+K+VJY6kHg+9mF4TAN1HTA=)
3: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: 8/Qp4ti4Hk/yOc2RXQikenXhdMFXdqlzeNa9yOlh4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:4f:e0:5a:97:9b:8e:b9:79:d2:87:53:41:e6:b2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: May 14 15:00:40 2025 GMT
Not After : May 15 15:00:40 2025 GMT
Subject: CN=1050406d947845059ec347d50671d460246e9d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:c7:1e:e4:36:74:2c:50:c0:46:e1:58:88:
7d:bb:6b:32:77:91:f4:b7:90:f9:1e:3a:4e:4b:d7:
7e:4a:93:d9:f5:2a:e0:ef:66:c9:c6:ec:e6:e3:2d:
df:7f:eb:13:85:fa:0d:68:88:5e:e1:ba:c1:98:22:
b8:5c:ce:5b:09:cb:c4:61:d2:28:57:71:4b:dc:ab:
1b:ee:88:28:93:aa:72:be:df:ba:b7:4f:6c:26:ce:
e7:1f:48:c2:42:bd:5d:59:98:73:53:f9:92:79:f1:
c6:3f:3f:0f:3e:36:cf:a0:c6:0a:28:eb:67:11:d3:
fc:24:aa:5a:cb:f2:bd:d8:91:1a:86:ff:90:0b:d1:
90:26:a4:72:58:55:9f:06:ef:ff:97:a1:37:5f:56:
8d:92:54:f0:00:bb:f3:ef:95:3a:77:80:9f:71:fb:
55:0b:dd:e1:c4:42:28:f2:59:4a:72:f6:5f:e1:5e:
dd:96:74:89:16:79:69:79:74:65:d8:43:27:82:40:
ee:bd:d9:cb:ea:7e:f4:6a:e5:8e:57:c0:80:24:6a:
de:da:0e:c6:f7:71:07:73:ee:66:9b:c3:84:9a:7a:
a3:e8:bf:2a:a3:2c:50:40:23:28:e7:57:1d:96:8a:
e7:46:e6:d6:36:62:a2:cc:df:26:86:e8:b0:01:fa:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:50:40:6D:94:78:45:05:9E:C3:47:D5:06:71:D4:60:24:6E:9D:01
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b3:87:b1:a0:94:b1:60:15:5e:82:c1:ba:55:76:35:fe:f9:
c4:b4:f2:ed:7c:e0:6c:fb:57:5e:d2:f2:be:14:37:bd:f0:6d:
52:d9:e0:3e:d4:c1:4c:16:92:f7:cb:f8:77:b3:98:66:bf:f5:
6d:3a:74:91:90:2a:95:23:11:56:1c:2c:63:35:5d:9f:19:55:
57:09:15:42:4e:72:04:c8:13:07:19:2c:6c:e5:71:41:33:27:
61:3e:c7:c6:e1:ff:24:13:57:a5:a6:bc:77:ea:87:14:a3:a5:
1e:0a:bc:ef:44:95:fc:b1:8d:86:ca:4e:cd:cb:26:0c:6c:06:
7c:1b:df:9e:bd:aa:3f:3d:33:e7:c9:92:78:cd:18:8d:90:b8:
c5:09:0a:4f:78:2d:13:38:24:fd:7a:62:ad:2c:e7:7e:32:fb:
24:6c:2c:ba:fe:0e:d5:9a:81:3f:5d:b0:bc:f1:bf:e8:2c:29:
7b:ab:f7:a8:7c:76:9c:01:11:59:9b:30:17:24:16:e3:e3:23:
b6:d8:94:7e:56:f9:2c:bb:12:ed:b1:66:74:d7:bf:f1:61:30:
45:ed:a4:cd:36:20:20:5f:46:2d:85:7a:a8:50:3b:40:c8:66:
ea:0e:54:d2:55:d4:fe:27:88:a6:ea:39:16:e6:bf:fb:ce:7e:
2a:d8:0b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:40:19 2025 by rpki-client