Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: J2X5h5eIXoub6nI1o+terbvNg9YvFKHDeVBi0NPFTx8=
Subject key identifier: 3C:74:F5:AF:77:DF:0A:BA:15:E9:92:55:E8:E4:10:52:FE:14:E9:FD
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 0196BB9272644C9D61120DDD37547CCFDCB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 0E5F
Signing time: Sat 10 May 2025 19:00:58 +0000
Manifest this update: Sat 10 May 2025 19:00:58 +0000
Manifest next update: Sun 11 May 2025 19:00:58 +0000
Files and hashes: 1: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (hash: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: cA79ONARIRgbakvAdLv/z95MFAT7IK7nrpN6JyJPqR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:72:64:4c:9d:61:12:0d:dd:37:54:7c:cf:dc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: May 10 19:00:58 2025 GMT
Not After : May 11 19:00:58 2025 GMT
Subject: CN=3c74f5af77df0aba15e99255e8e41052fe14e9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:3e:d0:66:c9:b9:98:2b:a4:5f:94:f7:cb:
56:05:45:9e:88:68:1e:19:a8:8a:5a:24:f6:cf:bc:
5d:c4:2b:b8:44:3c:36:a2:5f:d0:23:5b:30:be:8b:
5e:d3:3e:20:08:c5:1d:33:3e:d1:55:91:92:25:4d:
f6:13:17:e0:9f:b6:ea:06:b0:78:6f:97:c6:e8:12:
e2:e2:d0:55:da:25:e1:95:f5:cc:05:9b:d8:53:03:
70:fc:92:eb:10:16:d6:32:5b:fc:13:09:5f:2b:23:
d3:21:36:ef:54:09:47:bc:74:f0:b6:85:7d:fb:c9:
2c:d7:d8:a8:02:2c:11:c4:f0:8f:ab:a0:9b:45:03:
b4:56:89:bd:65:e3:d1:8e:74:74:38:f0:eb:e2:8d:
86:a9:93:e2:5a:93:f3:5d:b3:eb:85:00:ce:a0:db:
85:cc:59:f4:09:5a:2f:ff:dd:cf:53:ea:bb:72:e9:
b7:e8:0e:66:48:48:95:4e:0a:47:39:54:60:31:29:
c9:57:dd:f1:59:a4:99:77:6b:8c:78:0b:7a:61:dc:
b0:75:59:0f:c7:44:cb:10:d3:ae:67:1a:c3:47:55:
40:71:32:19:b7:eb:92:0f:72:a8:db:cf:ad:32:08:
29:24:23:9e:78:96:2a:bf:78:d4:44:09:dd:3c:20:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:74:F5:AF:77:DF:0A:BA:15:E9:92:55:E8:E4:10:52:FE:14:E9:FD
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8c:9b:ac:40:1f:60:41:f3:12:c3:2d:eb:61:39:b4:53:97:
01:b1:93:b1:d9:fd:5c:35:9d:86:ae:17:7f:0a:27:d0:99:a2:
db:73:54:f1:3a:2b:66:6a:29:4e:d4:61:67:4a:d5:6c:53:97:
1a:eb:20:97:87:6d:1b:3a:41:84:ea:11:d0:32:31:33:a5:f8:
09:7b:8f:f4:ed:9e:a8:93:32:ae:36:ac:4e:af:c2:08:7b:df:
cd:96:10:1d:2e:8b:39:69:b8:28:85:11:78:86:48:9e:74:21:
57:c0:ee:f6:68:e5:85:f3:c6:da:b0:4a:30:1a:09:b2:64:b0:
95:3c:fa:08:a5:f5:cf:2c:54:42:e9:66:fc:63:f1:75:64:5e:
a3:89:af:00:b9:a0:d3:ce:e5:de:5d:1e:d5:ab:94:e0:a1:b3:
bf:20:d1:fe:7e:42:b0:0a:07:b9:08:8b:8f:60:34:ed:a9:22:
e2:b6:56:7a:a5:fe:93:90:a1:7a:21:30:71:5b:62:ad:03:51:
ac:70:08:47:ca:88:b3:1b:ee:27:31:d7:fc:7e:d3:90:d2:e6:
75:71:a7:9d:2d:0c:43:96:2a:07:63:91:38:32:a9:21:a4:74:
3a:e0:cf:01:ad:d4:ff:4f:e5:de:78:ad:c4:cc:6e:79:9b:72:
de:91:f8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:30:00 2025 by rpki-client