Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: uinuxSeVT2CBIT7OxXpf8yWorygrw26AzNQB0ayAzd8=
Subject key identifier: B4:2D:F5:6A:D7:A9:3B:A0:FE:F6:BB:88:9F:D7:97:BC:D4:6B:AF:1C
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 0196B9A44E5AAB2A475994ED73A6345EE6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 0A82
Signing time: Sat 10 May 2025 10:01:14 +0000
Manifest this update: Sat 10 May 2025 10:01:14 +0000
Manifest next update: Sun 11 May 2025 10:01:14 +0000
Files and hashes: 1: B_tPzlcakKiFDBacnORzzWv1yTE.roa (hash: agYbT4sj3xKKoiRvTRiMrXGnEy5N2ggal8elxJ61JUw=)
2: HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa (hash: E94twRw9JlGZMbmmCttmzyXZguvpf/OPgy8FVeGF2rg=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: 8NbXcfvUq9qX5NP/B9TA/3clMnTLK+1I8HA5Szdshy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:4e:5a:ab:2a:47:59:94:ed:73:a6:34:5e:e6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: May 10 10:01:14 2025 GMT
Not After : May 11 10:01:14 2025 GMT
Subject: CN=b42df56ad7a93ba0fef6bb889fd797bcd46baf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:ec:96:1e:dc:22:a0:b8:e5:57:c8:7e:99:
88:c1:ae:38:3c:83:0d:e3:68:e4:82:b5:d8:8d:50:
8b:e8:f1:e1:62:fa:5c:3e:64:04:e8:ad:4e:b4:10:
8a:0d:02:8a:ed:34:b1:8b:4d:bf:cf:36:4b:e0:5d:
56:1e:a5:25:f3:c6:36:2a:ec:f3:9d:83:e3:22:43:
cc:30:fe:d0:b3:3f:e5:be:0c:33:ba:7c:93:c7:0d:
cf:44:c3:a9:f8:15:f3:7c:c8:ce:78:22:24:97:4b:
61:1e:fc:44:5e:9d:26:7a:30:f9:b7:b3:d7:f3:74:
f1:4f:a3:09:80:43:1a:45:7a:d2:1c:2b:9d:66:ae:
35:68:0c:2f:b4:b7:98:cf:84:36:b3:97:72:b0:8d:
f5:38:47:7c:13:3b:36:73:98:b6:12:8e:19:e2:ab:
da:cc:18:99:6e:d8:ef:81:6f:28:69:47:99:bb:69:
0c:e0:30:62:0c:e2:1f:c1:67:8d:8a:89:e7:91:1f:
e2:d3:dd:dd:e7:fc:e8:04:a3:bd:da:df:08:ef:3e:
9e:a0:96:f5:4c:dc:4d:54:a3:2b:21:11:70:8c:f1:
8d:43:59:1f:27:3b:6f:f5:16:1f:b1:72:9b:16:1c:
53:68:10:55:1a:d4:76:02:ff:c5:bf:79:07:3c:b3:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2D:F5:6A:D7:A9:3B:A0:FE:F6:BB:88:9F:D7:97:BC:D4:6B:AF:1C
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e5:9b:a1:5a:ae:08:50:0b:2f:64:a4:21:4f:9e:26:e4:e7:
b2:82:cd:51:30:f5:e7:fa:29:f0:6b:d9:78:65:cd:5e:a4:71:
0f:fd:9e:5e:8e:a7:e5:c6:31:29:12:77:6d:de:6c:a9:5a:0b:
4a:73:19:7c:3b:7a:d4:b3:97:f1:f2:ff:67:bd:ec:75:80:a9:
17:8f:63:13:27:98:20:b4:b4:09:44:7b:66:3a:56:ce:63:98:
fd:16:c5:60:d3:c4:18:98:f9:80:ab:63:56:81:86:96:17:4c:
50:27:6c:92:7a:ae:0f:bd:0d:5e:c5:0c:d0:ca:db:36:56:b5:
9f:41:e5:dd:53:b1:51:c2:28:53:31:b1:58:bc:54:9b:25:05:
43:bb:63:6a:df:40:42:d6:52:ee:1c:d4:e6:a6:76:eb:d1:01:
e2:bd:e2:28:55:58:ab:f9:3e:41:24:7a:3b:27:77:b9:8d:c8:
d3:df:b7:f3:c3:b3:a3:5a:c2:77:7a:16:84:c6:52:b3:7a:ad:
e5:3d:ca:88:00:9a:73:f9:df:d0:ae:c0:a6:6d:f5:19:1d:1e:
55:e4:f8:8c:5b:d0:67:54:f7:56:61:59:dc:b1:af:82:da:d1:
12:6f:41:10:12:25:a6:e0:90:fb:6e:7e:ae:16:03:25:60:23:
51:9e:a9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:36:45 2025 by rpki-client