Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier: CmKRLTC5gRe0uLLNmBLEWgp5iYyJDkCDuUjy5cr3LO0=
Subject key identifier: D2:00:6C:D8:A8:84:25:85:D4:AB:68:03:46:1A:B4:4E:60:A2:BD:01
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 0196D174F02D0F4FFCE4FD3E5EFFAAC17F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number: 15A2
Signing time: Thu 15 May 2025 01:00:23 +0000
Manifest this update: Thu 15 May 2025 01:00:23 +0000
Manifest next update: Fri 16 May 2025 01:00:23 +0000
Files and hashes: 1: J5hR6qbnwqDQorjgQKA4nS-MMic.roa (hash: K6vNh4g2g+c8tlGqdXpR0r75yDquSeuJCke6e2iRcws=)
2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: ofZW/B5bGSI9ybimUlfD3cMNkuB01EhvCqfwzWrJq34=)
3: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=)
4: uGyfl12bvyJ2eV3o7doqVU6voOE.roa (hash: a09UlLa9GmADfOkOHhG1EZH/uY1F2w2X5XhkL2/q/aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:74:f0:2d:0f:4f:fc:e4:fd:3e:5e:ff:aa:c1:7f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: May 15 01:00:23 2025 GMT
Not After : May 16 01:00:23 2025 GMT
Subject: CN=d2006cd8a8842585d4ab6803461ab44e60a2bd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:84:a5:20:23:82:c0:b4:ae:85:48:82:39:
3b:b2:eb:9d:6c:98:cf:a9:31:3e:8a:25:63:04:e0:
b5:c2:36:32:61:21:4e:42:f7:d7:e4:ee:1c:32:2d:
19:97:46:b6:e4:13:a3:01:eb:3c:2e:5e:0f:c3:37:
7f:d3:8a:8d:22:4c:88:cf:07:c6:28:8e:31:cd:63:
4a:48:d8:e1:f1:da:c7:ca:83:ed:ac:be:53:42:67:
5a:d9:68:3e:a8:b1:77:90:39:9d:de:99:11:c7:a0:
c0:d1:44:6c:c0:48:cc:79:c7:74:f8:de:49:d7:92:
47:14:85:56:7c:a4:b5:db:7a:3f:6a:c9:01:5b:ac:
45:0e:4a:b8:2b:d4:82:c0:44:96:a6:12:e8:8b:96:
b0:bf:15:f7:08:dc:04:86:8d:a2:6f:82:56:a6:e3:
a2:96:c7:95:22:aa:af:df:cb:9d:81:26:7e:c2:20:
3e:3d:ec:65:35:83:96:ef:fa:22:af:a5:dd:3b:81:
30:56:b2:f5:7f:62:cc:64:d1:96:20:b3:d7:0c:8f:
80:76:69:06:b9:e0:b0:f0:43:3d:bf:f7:1e:d7:bc:
1d:52:48:f2:33:e0:90:e7:96:93:c0:3c:62:92:78:
9a:39:24:7d:93:92:64:8c:bb:71:5f:16:90:69:dc:
c4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:00:6C:D8:A8:84:25:85:D4:AB:68:03:46:1A:B4:4E:60:A2:BD:01
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6e:5e:3a:96:fa:5c:03:64:68:f3:70:96:12:77:22:1e:64:
8c:9f:bd:a7:d3:46:8a:d1:f9:d6:98:8c:47:db:49:a1:ab:ca:
20:2c:f5:d6:8d:fc:f6:5b:c2:4b:7d:f3:45:11:cb:44:5b:b7:
c8:87:67:15:ea:4d:a9:11:f8:8f:2f:a5:18:d5:10:fe:e1:a7:
3a:a7:59:eb:c2:d7:52:6b:d9:4c:30:64:87:a4:40:a3:97:b3:
1e:54:a0:a3:f3:c0:88:6c:28:63:e0:ab:77:38:99:67:e0:33:
9c:30:56:7b:51:73:ef:4a:9e:ac:09:26:91:03:58:ed:c0:85:
39:b8:9d:c8:d5:c8:bf:63:ee:87:3b:10:34:75:e6:59:51:e1:
1c:ea:e3:91:af:38:11:85:2a:d0:46:97:d2:b7:f9:af:a0:6c:
b1:dd:85:91:28:e5:08:3b:4e:d4:c5:a2:c9:75:a2:16:9a:27:
42:d8:ef:4b:da:f6:78:ea:8f:c0:f5:66:6a:83:ce:85:c4:f9:
35:62:c5:26:b3:65:e3:8b:27:13:27:d4:61:b3:37:06:66:54:
a0:ac:c7:98:67:ad:7d:93:71:cb:ba:8d:49:64:7d:d5:1b:88:
a9:0b:f5:85:fd:65:8e:fa:48:ea:bf:01:97:0f:9c:b5:11:0c:
95:ad:3c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:30:28 2025 by rpki-client