Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
File: jY9-tNJUj5zL88s45wKhkMEXQvU.mft (raw, json)
Hash identifier: ivWNsmWdoYuTWnEV00DvHB2kzA0IPDqC6ySS+9aUWTY=
Subject key identifier: 9C:20:55:E2:0B:5F:F1:8F:BC:E3:69:0A:A6:0D:7F:ED:5A:2E:DE:01
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial: 0196B1EABD06484D3A671FC7DCCCC78C4BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 22:01:12 +0000
Manifest this update: Thu 08 May 2025 22:01:12 +0000
Manifest next update: Fri 09 May 2025 22:01:12 +0000
Files and hashes: 1: JoTSZ8E8fkiS501xBbOY7pc3jM8.roa (hash: JoNzI4ZspphrrJoARed2dcoamemKZ5kg0l+d/5sdlcM=)
2: SqfaLa-P64VMRzLu45OzZ7O-myU.roa (hash: 8RixXJbGYWZA//tOAjP6K4ex9vVhr1Y3178psfUi1TM=)
3: jY9-tNJUj5zL88s45wKhkMEXQvU.crl (hash: 5EU5dLQGiEoLZrX04UgjSJigX0rw9tMuLkbT5DENuUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:bd:06:48:4d:3a:67:1f:c7:dc:cc:c7:8c:4b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Validity
Not Before: May 8 22:01:12 2025 GMT
Not After : May 9 22:01:12 2025 GMT
Subject: CN=9c2055e20b5ff18fbce3690aa60d7fed5a2ede01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:33:d4:b5:92:30:32:c8:04:e4:81:a0:0c:
51:d5:da:50:ca:89:4a:50:f3:4c:1f:60:f5:a9:e8:
20:a8:aa:08:33:29:c7:b7:8e:62:cb:66:3e:24:1a:
7c:30:00:08:08:cb:f5:b9:21:33:05:76:0f:9d:df:
c7:e3:7e:41:66:22:ec:81:f3:ef:6e:eb:33:09:92:
83:f6:07:4b:56:7f:56:75:cc:63:ed:5d:33:54:c6:
c8:37:c4:98:c5:72:56:55:63:61:36:b1:4f:ec:a1:
cf:f4:a1:11:e9:52:a2:28:c3:3b:d8:f6:6e:c7:6d:
79:24:6d:9d:fa:71:7c:e2:1e:4c:f6:9b:75:eb:87:
70:59:94:07:1d:5a:6f:75:3b:43:a5:29:cd:f5:77:
9e:29:9b:71:c3:aa:bb:0d:87:7a:91:12:5f:ce:00:
e0:57:a6:5f:31:2a:09:f1:f3:0b:bc:c5:af:8a:5f:
5f:61:48:a5:56:ae:5f:a8:82:c5:71:5e:cb:20:03:
4d:91:33:ff:e1:de:40:dd:4b:e5:69:5b:2c:65:a7:
5f:ba:42:40:c9:6f:02:eb:e7:2e:e3:ba:c9:9e:ab:
8b:87:11:05:b5:f5:fd:39:0e:a2:e2:d1:09:e6:fc:
ff:2a:75:16:5e:60:05:ed:ff:e0:5f:35:83:21:ff:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:20:55:E2:0B:5F:F1:8F:BC:E3:69:0A:A6:0D:7F:ED:5A:2E:DE:01
X509v3 Authority Key Identifier:
keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7d:85:b7:f0:a6:95:2c:9a:a5:1a:ec:1c:8c:b9:69:de:38:
ec:6b:61:df:aa:04:27:92:f3:f8:42:44:12:6c:47:bd:99:de:
f3:7c:4a:20:f2:3f:f2:44:b0:62:27:66:85:5f:5a:b8:88:b0:
b6:2d:4c:6d:8e:ff:78:df:26:50:ec:94:4d:5b:e5:f3:e9:88:
0e:13:aa:9b:69:df:5e:03:5f:84:b5:10:c7:23:2e:8c:cc:8d:
93:d7:98:7e:91:d5:23:69:97:1a:2b:b8:b5:38:14:3b:f4:d3:
96:69:4e:fc:02:a0:2f:dc:68:25:5d:82:4e:71:4b:5c:23:a0:
77:ae:e8:e9:f6:00:9a:e6:4c:b7:73:dc:c9:73:e1:44:75:d8:
a6:97:3f:85:da:d7:a0:ce:75:23:c4:8c:a3:bb:34:c4:f2:d2:
7f:31:b9:56:d8:ef:97:d0:18:18:27:ca:1a:68:95:ca:16:13:
79:71:a7:eb:de:95:1a:e2:5d:4f:7f:9d:05:f8:03:74:74:73:
fc:1a:a1:92:64:23:7c:9f:f3:a0:ce:c3:2a:8f:44:75:e3:97:
4d:eb:c5:b1:28:08:3b:7e:7e:91:1e:38:03:6b:28:b9:d4:51:
ce:ac:71:37:7d:15:cf:8c:1c:4a:60:37:a4:79:bc:ad:c3:c6:
f8:c0:19:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:50:43 2025 by rpki-client