Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File: jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier: 3iLCBgRiLChJbGdweNY2p0lkUpOoaXqIdHJnuPI8A0A=
Subject key identifier: 7E:0D:00:94:38:AE:9E:4D:2B:B3:89:F0:F1:E0:45:1E:E9:92:CF:66
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 0196C15D3BE591738C5A7B7F30F98BD29AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 22:00:34 +0000
Manifest this update: Sun 11 May 2025 22:00:34 +0000
Manifest next update: Mon 12 May 2025 22:00:34 +0000
Files and hashes: 1: 8ZbyflawwFLPqDg3BZZLbHwGOLc.roa (hash: VykbJevpFsrAKqlNdZuPgmxNQNlKZ+4+VF7D/J1CQCs=)
2: H_TLsPIgEGDD_RE_XHqJUvlqj8E.roa (hash: jVZCYNBVF7woByDpZwClsmu07rKLPUQko61SrEyrK1s=)
3: WyA56EA2oxi30uAjF6x_QQYyE00.roa (hash: 4ql8mO5EaYeFUKdK/VU8GBpEW0nvJwvaHkKL+MQY0zE=)
4: eJe54pJQD4j2JDWbWUTuFe4Zw4k.roa (hash: RfLVPz0RIAcdPGVp8RcU7sTd+HqCq3IoZWz5cYzagaI=)
5: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: GsRTpY+bsfyU2bZ5EbHwLrpagWYwcWj1Z/3h3D05WWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:3b:e5:91:73:8c:5a:7b:7f:30:f9:8b:d2:9a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: May 11 22:00:34 2025 GMT
Not After : May 12 22:00:34 2025 GMT
Subject: CN=7e0d009438ae9e4d2bb389f0f1e0451ee992cf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:b0:55:3f:84:02:ef:02:20:d4:7a:46:c5:
d7:83:e9:70:b6:2d:13:21:24:9b:7b:48:60:ba:1b:
a6:6d:0d:8b:9e:c7:d7:15:6b:2c:a2:00:d9:08:7e:
44:f9:30:06:a1:0b:d4:25:91:8b:0d:fb:e6:d7:08:
8d:60:0e:35:58:1c:94:30:ab:ae:48:d4:46:35:29:
98:5f:37:a4:db:50:f4:64:14:4d:7b:5d:bb:9a:a5:
dd:0d:e6:fd:56:70:75:05:d2:6b:47:9c:30:d2:24:
18:4f:84:7d:ed:ea:51:2f:b6:a4:f7:5f:6d:ec:7f:
22:ab:16:96:f8:44:98:ca:34:d5:f4:cf:1b:cb:2e:
51:a8:d1:10:e0:18:5c:84:ae:97:79:cd:48:6f:e6:
4c:1d:42:85:15:87:f1:78:8d:11:28:19:36:7a:28:
d3:b3:af:d3:a3:d3:d0:65:12:2b:d9:d1:8e:1f:10:
7d:59:60:fb:7b:5a:b7:87:91:b1:b4:20:b3:93:80:
87:5b:6d:d5:34:85:2c:9a:7c:82:57:8e:e4:b6:43:
6c:13:54:29:a9:fc:1f:a6:fe:f0:0c:f6:13:b3:b8:
08:39:b2:9b:8e:81:12:6b:db:4a:f4:21:e0:7e:45:
fc:f7:3a:fa:7b:4b:63:88:a7:e2:1f:d5:21:2c:16:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0D:00:94:38:AE:9E:4D:2B:B3:89:F0:F1:E0:45:1E:E9:92:CF:66
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:b7:56:20:0d:04:84:2b:fd:c1:e8:7d:2c:5f:3a:58:00:a5:
78:39:6d:08:02:18:1f:8e:fc:cb:1f:10:45:94:1a:ca:cd:ca:
4c:3f:e1:bb:71:04:56:d7:ce:8e:52:2e:0a:07:8b:56:92:d5:
9a:a6:57:21:6f:43:1e:0b:53:68:00:8b:d6:74:48:71:0e:ed:
17:9e:ce:3c:3e:e4:4d:ff:38:b8:66:8e:25:e7:a9:a0:a8:81:
f1:a4:dc:ea:8a:05:55:fb:d9:0b:50:bf:b7:5e:f2:da:e7:51:
76:77:71:a8:2c:32:d2:12:33:24:43:f5:d4:94:9a:82:fa:6d:
df:77:b9:76:69:bd:07:d2:41:82:47:4f:8d:36:7b:a2:95:1e:
3a:a9:3b:95:0c:f8:ba:d5:37:a6:c7:9d:a8:c5:48:d0:83:89:
1d:97:b8:07:14:99:94:1a:19:93:70:1a:fa:13:0f:f4:86:b4:
9f:57:9a:5b:36:d8:2c:e2:9a:72:a4:fe:cd:8d:b0:27:d7:7c:
d6:4c:c4:78:ce:01:2b:b3:b3:d7:d1:01:6a:40:7d:98:67:c9:
6f:16:fc:61:61:94:2e:2b:60:56:47:47:14:69:f8:c7:a3:9a:
08:99:05:ef:9d:51:5a:e6:af:0f:bc:e3:8b:e3:f4:7b:45:60:
0c:cf:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:35:01 2025 by rpki-client