Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File: jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier: 8WuzyCpX+rwqyYH8GwZDaYMdMba+gvDTo1ESHlzghl8=
Subject key identifier: BE:E6:C5:8B:B9:D1:81:74:FA:5D:8B:F8:0A:8E:93:79:DD:92:1C:4A
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 0196B7EC1A92E98470F4E690C62F5738B19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number: 14C4
Signing time: Sat 10 May 2025 02:00:25 +0000
Manifest this update: Sat 10 May 2025 02:00:25 +0000
Manifest next update: Sun 11 May 2025 02:00:25 +0000
Files and hashes: 1: 5fSz0gTL93bDKbRX7UB399KTqWo.roa (hash: ZekzmLJCJyI/RlrN5lYEw3o4UXuAl+RnUA/jnalWWzw=)
2: QEmXwsIj7ueEdKdwPu44tosMpfM.roa (hash: 2lzHt7XOAfmu9gjrRW7d2O3LPWtVfpw+P41EhC9URe8=)
3: bce44foTbAKg3tHOJ0Qgt1xOcf8.roa (hash: F4bF540q8PJ+GpaHKowNj8adXBg7SShvDYJVRvSviDg=)
4: dNxBOY3fJxweU0pOsjJMTtBxibI.roa (hash: +7/ZxVutYTL6jT8ak+OBnFIC5cdnfh0cuZkYLSLo+Fg=)
5: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: 0yyFK004CL3QKCPykxq9lKluw3THqwLuZbcr5IkGSM0=)
6: zEt70xhNCNspyv0BGLFGKL4d_Fo.roa (hash: NlwMM676+ehPCudhUDq8LrrGW5swFBYUpzUKu5v1ls8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:1a:92:e9:84:70:f4:e6:90:c6:2f:57:38:b1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: May 10 02:00:25 2025 GMT
Not After : May 11 02:00:25 2025 GMT
Subject: CN=bee6c58bb9d18174fa5d8bf80a8e9379dd921c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:0d:78:a8:ff:b7:38:1e:ac:c8:0d:9a:96:
74:b3:f0:44:3d:2d:26:25:30:fe:36:5f:93:76:0e:
2d:02:c8:56:51:8b:0f:3b:08:35:64:91:ef:1f:0a:
89:42:8c:98:4c:ee:28:40:45:b0:d9:f8:d1:d9:d8:
23:6f:cf:64:d8:dd:b3:0c:f3:1d:e9:e7:fe:f0:93:
39:f8:e9:dd:d5:df:47:da:0a:ca:f1:bd:0a:b6:5b:
7d:6a:09:6d:11:04:25:dc:47:0b:38:f3:7e:8f:e2:
c1:40:97:33:27:bd:a5:59:3a:0a:d4:69:23:fd:fa:
1d:c9:6a:bc:90:89:0c:56:a4:67:26:d9:0f:fa:f3:
b0:6e:cb:ae:64:29:a7:f5:ae:5c:c4:4f:9b:c4:1f:
54:ff:66:df:0a:de:e2:71:62:a5:45:6e:52:b7:cb:
c8:f9:26:bc:54:8b:f4:10:02:77:2f:8d:62:96:d8:
5d:4e:59:11:4f:85:13:04:d3:d6:42:3f:49:1f:47:
5e:fa:05:1f:62:01:6b:3e:10:ef:16:eb:02:56:37:
77:ce:e1:33:75:63:50:50:d8:d4:fc:e9:36:d8:af:
fa:c5:36:cd:e5:a2:8e:0c:d3:13:c4:7e:a7:88:17:
7d:b6:b2:34:e4:b7:d2:69:ad:55:a8:a9:c9:63:95:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E6:C5:8B:B9:D1:81:74:FA:5D:8B:F8:0A:8E:93:79:DD:92:1C:4A
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cb:89:35:b8:2c:16:59:5c:04:d4:16:32:32:19:ec:44:1a:
61:3d:86:3a:bd:29:e7:ff:b0:f8:c7:1b:85:30:c5:6c:1b:e3:
2d:3a:1f:89:2a:2f:70:ce:cf:93:0a:04:7d:ee:e9:ce:a6:02:
65:33:42:49:4b:22:be:47:70:78:de:2e:a4:db:b3:82:e7:99:
58:03:d5:ba:90:80:21:63:80:fb:eb:27:1f:cb:73:a3:76:60:
f1:d5:83:49:90:9c:f4:3d:9a:94:70:94:29:82:86:d1:de:00:
16:77:aa:0f:a7:07:99:ba:ee:73:07:e8:f1:5e:75:92:43:f5:
b3:7f:c0:54:f0:13:1a:41:20:8b:aa:ce:ad:46:6e:f6:b2:62:
5c:33:9f:d4:a8:0f:d8:0f:06:db:50:02:f5:63:3e:3e:90:8a:
f6:e7:56:5c:41:0d:24:e4:07:dc:cd:9a:1e:2f:8b:e7:c8:3c:
95:14:a3:10:32:9c:e1:a4:3e:fe:3f:bf:a6:82:3f:67:53:9e:
af:e2:79:2e:ad:d6:71:bd:2a:04:e9:b2:bb:e7:3f:30:5d:a5:
98:d2:d0:83:92:7d:12:22:96:36:4e:63:cb:3e:e7:bb:a3:68:
bb:8a:71:7c:c2:5b:05:69:59:60:58:6f:af:b8:9c:1b:9d:ba:
dd:06:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:38:31 2025 by rpki-client