Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: eErgTg45+nTB/s7Jmmk6J5tjM+OCtfEUJDhQF99zXR4=
Subject key identifier: 7D:05:9D:F1:4B:BF:BC:C1:05:C9:50:85:D7:2C:A2:50:E1:89:7B:81
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 0196AC56043876435212278327E56EF62F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 20:00:40 +0000
Manifest this update: Wed 07 May 2025 20:00:40 +0000
Manifest next update: Thu 08 May 2025 20:00:40 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: iBkFrWA6vsNiI3vCxywN1anQgfwaY1YeU5g7+q5Bg7U=)
2: RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa (hash: dQnKrWhdakZ+384uTWhQC1swu7fczbqA0NfqM/pjIIQ=)
3: wtfqM181rNTZILTtZZuVyGYsV2g.roa (hash: jL1T6NkOiM+9LzgY51xQQ/S9ZQ9hPL5ZNlX1CHentpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:56:04:38:76:43:52:12:27:83:27:e5:6e:f6:2f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: May 7 20:00:40 2025 GMT
Not After : May 8 20:00:40 2025 GMT
Subject: CN=7d059df14bbfbcc105c95085d72ca250e1897b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:65:da:58:f6:71:34:e3:6c:63:26:f7:37:
4d:06:ad:9f:e9:51:2c:d2:0e:85:06:f7:15:11:d1:
e7:48:90:07:d9:60:90:6f:df:e1:f4:8c:70:fa:d6:
a4:ac:38:7e:b5:44:c5:76:05:f6:b9:63:ec:ec:c0:
27:32:c0:d6:fc:e9:81:f3:9b:c8:84:cd:0a:73:44:
94:7b:5d:8e:22:86:b3:7e:4d:7d:ca:35:fe:4c:f1:
9a:d3:3c:b4:47:c3:30:3d:f2:17:b6:53:56:76:33:
19:90:16:a4:13:a3:6c:b2:00:6e:3d:9b:d1:8a:b8:
7a:17:c2:a1:3d:8c:d3:5b:a5:74:97:f7:a2:19:08:
6d:22:64:c4:1f:72:c6:80:17:ba:20:bd:78:d2:ac:
30:ab:42:5d:04:cf:41:4f:57:61:bc:d6:69:ec:ca:
76:11:fa:27:0d:df:2c:aa:58:85:95:42:b4:6e:0e:
52:8d:37:39:01:9a:67:cf:9d:b1:e4:14:e6:29:20:
f4:8a:e4:95:b3:1f:61:ec:19:09:c5:fe:34:5a:1e:
3c:68:be:7d:e9:d9:1b:55:e3:72:a9:b0:62:5b:07:
0e:86:cd:74:ea:6e:55:1a:17:19:2e:a3:ed:24:f4:
8e:b1:5b:82:9a:79:3c:af:25:f4:18:cd:ec:72:e0:
4d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:05:9D:F1:4B:BF:BC:C1:05:C9:50:85:D7:2C:A2:50:E1:89:7B:81
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c8:aa:7d:f8:68:a3:53:f2:81:20:cb:a1:49:79:cd:cd:65:
05:fe:09:92:61:d5:51:bf:5e:d1:86:f3:5f:b2:41:c9:8c:01:
84:06:a1:40:80:b1:12:41:09:96:23:c8:99:2e:8c:89:7c:6b:
e2:b0:00:4b:ac:66:1b:bb:07:0b:ef:70:03:35:3c:9d:44:d5:
63:b6:2f:85:88:76:58:a0:37:3e:97:4a:70:3e:f8:11:30:1b:
43:34:7e:7d:96:1c:1e:8d:f6:6a:d6:3e:82:25:31:62:e0:50:
0b:ed:c7:85:18:54:a5:ea:e8:84:5a:1b:e8:b8:1d:e0:da:7f:
1d:4f:09:9d:da:35:c5:c9:e7:68:14:a2:88:08:fb:41:69:ff:
f1:74:e6:f0:c6:5b:5e:67:4c:15:40:b2:df:4b:68:25:2f:b6:
79:a0:51:a2:b7:6f:93:7c:c6:4f:35:b8:b5:e5:32:30:22:6c:
80:a9:e8:8b:ba:a6:15:c1:00:de:82:ed:95:75:ff:78:8c:5c:
80:69:cb:b3:89:cc:69:2f:3b:b5:a2:ac:ca:c8:87:9a:05:47:
81:dd:c1:e5:e4:3c:5d:25:75:e7:81:94:ab:e8:9b:b2:71:b0:
59:95:d7:9e:64:e7:da:ed:78:89:0e:72:8b:05:ea:d5:85:17:
8d:e7:36:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:17:04 2025 by rpki-client