Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
File: j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft (raw, json)
Hash identifier: kogOB5BojlB33AJIhrGAxZy3K5URanH9scyDAYcKMqE=
Subject key identifier: 46:92:73:CE:34:E8:35:B8:E0:9B:C9:A1:4F:B9:84:59:52:4F:34:8D
Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Certificate issuer: /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Certificate serial: 01969DBE7E8C1F1E4E1AF78FD7A1B5103861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 00:00:29 +0000
Manifest this update: Mon 05 May 2025 00:00:29 +0000
Manifest next update: Tue 06 May 2025 00:00:29 +0000
Files and hashes: 1: 10WRObO3tmaDpYMoBfmVIGzlnrU.roa (hash: n66l+JhsIf8xYrrxl7QWiJVsW0qqjRpUm2OsP46Hyms=)
2: j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl (hash: ASMUKw/kC79FvD9ws/ztjTLb27dXtu0DHiQarlE40Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:7e:8c:1f:1e:4e:1a:f7:8f:d7:a1:b5:10:38:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Validity
Not Before: May 5 00:00:29 2025 GMT
Not After : May 6 00:00:29 2025 GMT
Subject: CN=469273ce34e835b8e09bc9a14fb98459524f348d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:41:7e:14:de:bd:be:d5:40:80:c7:11:05:1d:
cd:29:99:fc:43:96:7e:09:30:57:84:e8:f5:58:b5:
6b:e5:f3:98:ad:ba:14:eb:09:18:ef:35:a0:c1:17:
5d:7c:fe:75:36:27:f3:4f:43:cf:57:4a:b3:95:d8:
b3:95:ab:49:b0:1f:20:06:44:44:57:e6:bd:f5:3e:
54:a7:72:a2:a8:79:3d:0d:85:30:21:d2:0a:9d:5c:
7b:92:bc:82:1f:25:b9:56:31:60:bc:4f:65:d2:c4:
6c:9a:a1:ff:56:2e:bb:54:13:cb:47:b3:7e:61:fd:
49:1f:b8:d4:b7:7b:4f:7a:31:5e:c5:d8:d8:02:ca:
13:c0:70:4b:98:64:29:a8:9c:c3:5a:02:75:44:18:
7c:99:4b:67:04:56:e8:89:7a:ab:68:42:2e:34:3a:
6b:ff:74:be:bf:0b:49:28:c8:25:44:19:44:cd:7c:
89:3d:02:67:71:55:d8:3f:f1:66:34:d3:38:f3:08:
c2:db:61:ff:bb:29:dd:97:6e:3d:a3:8d:10:c6:e7:
1f:2e:28:93:f6:f5:57:1d:32:28:d0:61:7c:37:aa:
f7:60:a0:a5:29:5a:36:36:d1:e3:80:53:35:57:00:
38:8a:83:46:b1:7c:1f:26:2f:19:20:33:a2:03:ac:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:92:73:CE:34:E8:35:B8:E0:9B:C9:A1:4F:B9:84:59:52:4F:34:8D
X509v3 Authority Key Identifier:
keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a1:92:21:66:3a:d2:85:f3:a0:55:77:e5:bd:b4:25:26:9a:
c3:6e:51:b9:25:4e:20:99:1d:d9:65:90:b6:ba:cd:b3:1e:98:
2a:28:4b:43:f4:59:8a:3e:7a:92:de:0f:e1:8c:f4:33:be:10:
bd:a5:c7:fd:1f:61:14:7f:a0:a2:6c:8e:f0:28:56:f7:04:b8:
48:82:40:27:ee:23:f7:7a:87:c3:09:47:8d:12:3f:48:a2:6d:
21:93:6e:a1:b0:d3:a5:0f:7d:5e:c9:4a:39:ed:f7:af:49:8a:
e8:6e:57:c5:73:3e:c4:5a:7f:41:eb:fe:96:50:ce:30:ed:eb:
95:de:60:6b:b0:5c:92:60:8c:22:cb:a0:f0:5f:a3:98:2b:bf:
97:4a:ff:c7:4e:0d:04:87:9d:e5:79:09:2c:0b:79:5c:77:a7:
4c:b9:7c:0c:d0:dd:f6:32:a0:21:2e:4b:20:ec:8a:30:17:13:
57:2f:25:4e:fd:79:18:ee:b6:ae:95:c1:8b:be:3f:be:4f:32:
bf:93:2b:18:67:cd:4b:38:b9:e4:ac:41:c6:13:6d:41:58:66:
e6:b5:e1:04:8b:33:81:82:b4:12:8e:f0:d7:11:73:a1:68:59:
ed:e8:0b:2e:f1:59:83:5b:26:3f:77:43:43:b3:49:22:b7:db:
bd:a9:9e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:14:50 2025 by rpki-client