Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
File: jjh1qArSM-nChxWYg3H3fuw_Ygw.mft (raw, json)
Hash identifier: UMggV2UyqOf9djqk48pHGqbXJy02K+9GR+1mDrbxbhc=
Subject key identifier: 76:B8:F4:D0:0C:EA:F0:F3:9A:14:FD:87:68:6A:51:49:84:1C:3E:25
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial: 0196CD61A2BFF4656FE123BCA1B45A2BB354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
Manifest number: 1542
Signing time: Wed 14 May 2025 06:00:50 +0000
Manifest this update: Wed 14 May 2025 06:00:50 +0000
Manifest next update: Thu 15 May 2025 06:00:50 +0000
Files and hashes: 1: 0YS8AQvr8ByNBG7KTwD6sIOGH8A.roa (hash: k8sO4Fn23jLZke1eiUIEXbtdN/A5BluF8j3tNYbaMCM=)
2: jjh1qArSM-nChxWYg3H3fuw_Ygw.crl (hash: 9YJysnoInKLgDxej7jFoKmWtpI9w/s3WOflnBPJb7ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:a2:bf:f4:65:6f:e1:23:bc:a1:b4:5a:2b:b3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
Validity
Not Before: May 14 06:00:50 2025 GMT
Not After : May 15 06:00:50 2025 GMT
Subject: CN=76b8f4d00ceaf0f39a14fd87686a5149841c3e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:82:a8:88:37:a3:d6:bf:81:e3:db:a8:18:
29:0f:28:1b:5c:09:31:65:fb:3a:56:85:32:59:ad:
b4:54:95:03:53:df:df:76:39:ce:d5:7f:da:46:38:
96:56:f2:35:d2:c1:56:5c:d8:9f:0d:76:61:e4:5e:
8d:1b:b1:f2:a1:89:04:82:a3:6d:04:8f:ed:2f:bd:
85:d0:df:10:e0:3e:0c:07:6e:3d:26:a2:b9:9e:48:
32:fe:2a:ec:39:2c:f8:dd:85:85:6c:19:db:43:3e:
3f:8a:f5:5e:93:59:cb:a7:ec:90:b3:18:a7:d4:e8:
61:f5:8e:f7:91:10:ef:fa:13:e8:a1:ce:b4:c7:3c:
f9:8d:02:98:10:e0:b1:8e:64:a2:41:53:c1:da:a2:
b8:80:e6:38:97:b5:12:94:72:04:68:97:00:b2:d7:
9a:2b:03:88:9c:4b:dd:ba:6a:6e:79:94:e3:f8:51:
83:f4:a7:b0:ff:12:5e:63:a0:ec:ac:fe:48:d0:b1:
3e:5f:1f:40:82:5c:30:e7:1c:24:79:1d:cf:55:59:
b1:6f:25:28:ba:b4:d0:52:83:20:16:ad:77:7c:42:
7f:1e:65:ef:14:ac:d3:d9:e5:c2:cd:73:ff:7f:65:
9a:79:e6:50:ba:92:06:53:71:49:e0:ba:b9:5c:50:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B8:F4:D0:0C:EA:F0:F3:9A:14:FD:87:68:6A:51:49:84:1C:3E:25
X509v3 Authority Key Identifier:
keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:01:7f:ba:37:c5:74:76:0c:de:78:b7:c3:c6:fd:e0:fb:c2:
e2:ce:fa:68:a8:7d:57:0a:26:29:98:b7:4e:33:80:eb:ab:af:
a3:3e:43:7e:56:9d:7c:ea:02:19:bc:2e:89:58:65:54:74:e8:
c0:9b:0d:cf:02:63:fd:1a:ce:aa:f6:0d:be:ee:37:b0:e7:50:
d9:95:b4:3a:11:32:86:a2:f7:4b:13:0e:62:2d:82:93:3f:27:
ad:63:95:53:e1:a4:3f:9b:85:29:cb:f6:f6:3d:9b:b3:49:95:
28:c6:d7:ce:10:4c:f2:31:63:f5:a9:ab:51:2f:ad:ae:1a:75:
e9:f1:b7:61:51:2f:7d:bf:cd:33:83:2e:53:26:c4:a2:08:4f:
09:29:26:35:84:66:f7:06:9a:c5:e9:78:50:4a:1c:b1:ee:43:
11:f3:ec:5b:15:f0:7c:53:2f:c1:1a:fb:e7:8a:8c:85:75:08:
42:ed:93:6b:64:12:b9:77:eb:da:1c:d5:3e:43:46:eb:86:b1:
98:cd:84:8d:9b:e0:a7:1c:9d:8a:97:f0:b5:8e:c6:c7:1f:f2:
24:76:c2:3a:53:00:dd:9b:e3:4e:cc:77:48:83:1e:8b:8f:9d:
4e:3e:21:12:7e:72:be:a1:0b:3d:f8:4c:b0:53:b1:2b:13:0e:
a5:c1:01:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:24:17 2025 by rpki-client