Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: c073AGSSMRD/CRNM5UtEM4Tf6fvaxLi2UknAoYeb3K8=
Subject key identifier: 8B:E5:FF:BB:27:B8:C7:1B:9B:73:58:32:13:B0:D7:0E:F6:DF:16:13
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 0196CB3BF875BA3305553F120D591DF2A40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 1400
Signing time: Tue 13 May 2025 20:00:27 +0000
Manifest this update: Tue 13 May 2025 20:00:27 +0000
Manifest next update: Wed 14 May 2025 20:00:27 +0000
Files and hashes: 1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=)
2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: cfZIgMCFqadgCuy6kF7tXVGemK2QkDXeY+xJgzJldLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3b:f8:75:ba:33:05:55:3f:12:0d:59:1d:f2:a4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: May 13 20:00:27 2025 GMT
Not After : May 14 20:00:27 2025 GMT
Subject: CN=8be5ffbb27b8c71b9b73583213b0d70ef6df1613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:28:28:4b:dd:08:a8:7b:85:19:b3:f5:56:
73:a3:4f:df:8b:03:e6:92:a4:28:ec:8d:6a:95:7c:
4c:4c:0b:91:ca:c5:f0:3c:67:ad:45:9b:34:a7:71:
96:11:0d:72:83:18:27:cc:52:89:64:1d:ea:bb:2a:
3a:b5:b0:e3:80:d2:ae:1d:3c:0a:96:9c:4e:86:45:
e2:08:6a:75:c1:a4:37:c9:75:be:41:ca:ec:c5:57:
05:ab:d7:b2:68:bc:2f:a5:ff:c4:0c:1a:fc:01:e5:
56:45:9d:5f:c6:ee:1e:2b:f8:13:4c:eb:1e:dd:1f:
60:55:21:71:04:cc:b7:72:29:b9:55:b3:8f:1b:c3:
a5:30:3f:3e:12:e5:ac:0f:76:14:dd:fa:9f:c1:2f:
76:2d:56:79:0c:7c:5a:e6:d8:a1:88:bc:4b:e5:db:
c8:dd:88:0d:2c:b8:e8:b6:a8:a3:2e:84:06:5f:4d:
93:83:e8:27:54:94:87:62:bc:85:66:ab:b8:16:59:
3e:c9:4f:fe:72:82:16:51:fa:ac:b3:6b:88:60:9a:
25:78:9b:a8:d7:b8:53:d7:f4:16:18:33:c1:95:8b:
d3:29:92:f9:ac:8d:26:4f:e5:29:f7:56:24:52:d5:
66:ad:a0:16:2b:0c:c8:d8:4c:48:d6:a4:81:80:29:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E5:FF:BB:27:B8:C7:1B:9B:73:58:32:13:B0:D7:0E:F6:DF:16:13
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ea:6c:42:43:9d:31:f0:f6:90:9b:f5:a5:e3:2a:e8:15:ab:
f7:df:41:71:5d:be:4a:a8:48:56:a5:a3:8c:3f:70:cd:b0:3d:
02:dd:0a:75:92:56:da:4c:d7:00:65:0a:a7:53:2a:f6:41:32:
ca:fd:ae:3b:9c:6d:ed:18:5e:f6:13:4e:6d:35:36:26:d4:7a:
7e:8e:c8:fe:3a:e5:16:a9:0d:e2:c8:d3:5a:cc:90:09:fc:5d:
4a:ea:a7:de:69:5e:61:4e:72:20:6b:74:40:b4:42:5f:2c:2c:
d3:d8:4e:6b:45:19:39:49:69:d4:27:07:9c:8d:dc:ca:10:38:
6a:fd:b1:e5:2d:de:87:8f:02:32:f3:08:27:54:ae:a7:ff:2b:
1a:70:dc:c6:8f:8a:96:cc:5f:f0:01:a1:25:18:b4:dc:00:e1:
ba:8d:29:8d:b1:bc:19:68:91:e2:e5:df:70:f7:9f:77:5e:fc:
01:cb:37:ec:09:ca:d7:cc:d0:47:74:68:97:99:1d:15:78:91:
d6:b1:35:8c:ec:83:a0:77:d9:6b:74:8a:2a:c0:ed:04:0f:35:
ae:61:8e:ed:3b:31:77:61:0c:72:d9:78:0d:4d:dd:09:d1:b3:
ef:37:0e:12:0e:6e:fe:df:8b:8f:ae:a2:7a:fb:e0:58:06:02:
62:e3:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:05:43 2025 by rpki-client