Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
File: j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json)
Hash identifier: wqUqloXnYbTOSHK3eyjCfaX84CQSpGQ0HUDqPuvx6Wg=
Subject key identifier: 38:49:23:5E:F7:F8:24:63:22:FD:6B:48:E4:6F:39:B6:65:49:D0:4D
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Certificate issuer: /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial: 0196B7B6017ACA6E25F2B3351084F0F1238E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
Manifest number: 152E
Signing time: Sat 10 May 2025 01:01:20 +0000
Manifest this update: Sat 10 May 2025 01:01:20 +0000
Manifest next update: Sun 11 May 2025 01:01:20 +0000
Files and hashes: 1: CnLBnKO7kUWDOtI_wZowil8ZDY0.roa (hash: +ZLQWoCpBdEd1GfrIrkM6Ixuxre1nfZzdo3/CXXl60U=)
2: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: 92RQqqoZuwn9i2izClNYgdPlqk/yH5LGTGKNKGxYkPQ=)
3: sUWUQ7xVOWG88c1zTJfQJSXfUGM.roa (hash: VIZMGPKQd062ThwggTDHc4EOlVHSYbX0SY8qNlvlezs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b6:01:7a:ca:6e:25:f2:b3:35:10:84:f0:f1:23:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Validity
Not Before: May 10 01:01:20 2025 GMT
Not After : May 11 01:01:20 2025 GMT
Subject: CN=3849235ef7f8246322fd6b48e46f39b66549d04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:e6:67:89:69:70:24:9d:53:5f:ed:84:3c:
1d:7a:65:cc:cd:d9:66:0c:9b:0f:ab:bc:b4:58:d6:
fd:ee:e5:fd:4c:b1:40:d3:44:78:5e:96:5b:2c:7a:
f7:79:06:9d:fd:d8:6e:fe:da:e1:1a:cd:09:40:3b:
53:a8:fb:b6:72:cf:c8:7a:e1:be:6c:02:c6:90:9d:
f0:90:e5:c0:c2:15:af:0f:b4:20:7c:ce:f7:21:fd:
61:6b:ed:be:a0:3b:38:c4:a5:b4:07:50:83:4a:91:
17:b4:66:17:a8:62:d7:0a:08:1e:04:e4:f5:df:ec:
67:f1:95:7c:96:b1:13:ce:a3:a9:83:a4:a8:b8:b4:
95:c0:1c:26:3e:0d:ab:ab:a3:07:bd:7b:e2:81:3f:
ac:64:7d:6a:c2:ed:f4:6d:2f:9b:b9:80:71:eb:7d:
8e:4d:a6:01:2c:d7:60:21:92:ca:7a:12:b8:f0:cc:
c4:a7:ba:59:e8:aa:4a:a8:ab:b8:6c:0d:45:ac:3d:
91:dc:d9:ab:7d:2b:31:ff:50:ab:f7:24:24:00:9a:
87:f4:c4:4d:e3:c3:b4:24:d2:74:8b:20:4e:a2:7c:
ee:87:bd:a2:5a:2d:f3:dc:51:91:4a:c7:88:7d:b5:
ea:d0:5a:b4:70:ec:0f:aa:c5:5a:4b:61:68:12:5f:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:23:5E:F7:F8:24:63:22:FD:6B:48:E4:6F:39:B6:65:49:D0:4D
X509v3 Authority Key Identifier:
keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a0:ed:1d:36:e3:36:28:04:ae:91:43:93:08:99:1a:7a:ed:
ae:19:dc:e6:7e:45:33:54:d4:1a:0d:0f:67:c0:72:d3:f5:a4:
16:93:c3:86:a8:d7:87:c1:fe:80:b9:5b:8a:d7:ac:6b:e1:a9:
1d:c1:82:6d:4a:37:00:70:bc:42:e8:b5:a6:ca:51:32:08:66:
b3:cc:e5:2f:47:c5:f5:81:28:a9:6c:c0:f0:9b:de:8d:52:d9:
7d:af:79:a3:80:32:70:7c:0e:6f:89:f9:d9:c6:15:2d:ca:2f:
3b:49:1f:91:3f:8f:5a:f5:ae:ca:b1:3f:41:cd:87:0e:b3:de:
63:07:d1:40:a8:a9:48:8a:cd:a6:f4:da:bb:21:67:de:c1:fe:
39:66:88:71:66:0e:47:32:a8:bb:eb:dd:87:fe:91:d2:61:3a:
b4:8a:a4:1a:a4:a8:ed:67:c9:76:20:9f:37:8a:e5:55:c9:bb:
36:f4:e9:3e:29:3b:d5:73:1d:c4:cc:6f:fd:d7:82:cf:8b:3c:
71:62:da:b3:8d:6a:56:14:94:37:15:cd:da:dd:bb:b3:bf:03:
28:f8:dc:28:d4:93:b3:b3:8e:f2:59:ff:ed:b3:24:f7:99:43:
1b:41:13:a1:6b:52:8b:ce:9e:53:e7:87:88:66:a4:92:3a:8d:
a3:e2:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:34:59 2025 by rpki-client