Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: Pp63QRqaAYx9jLpyGQqQ8jW6PDjSqkp3zcuHupKuWhM=
Subject key identifier: E3:67:9F:96:E3:11:51:6D:33:9D:E0:86:72:7F:2A:CB:A8:F3:42:AC
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 0196A5E5B6ED0F328CED86DEAD1D3260B144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0A58
Signing time: Tue 06 May 2025 14:00:17 +0000
Manifest this update: Tue 06 May 2025 14:00:17 +0000
Manifest next update: Wed 07 May 2025 14:00:17 +0000
Files and hashes: 1: hhrm1Em1WlxZZH38Jm2yxN4no3I.roa (hash: 3IW1YAxLQw3KLIWXwxwYcOQuTgohlVo0d+wGlA+Yr7I=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: F98EpA7aGCSip31/M8vlIKmGnw4alEdQjfHhl95zDRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:e5:b6:ed:0f:32:8c:ed:86:de:ad:1d:32:60:b1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: May 6 14:00:17 2025 GMT
Not After : May 7 14:00:17 2025 GMT
Subject: CN=e3679f96e311516d339de086727f2acba8f342ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:58:1f:f4:2c:b7:d1:9c:4b:9e:3f:62:f0:
c4:98:9e:ca:43:78:02:89:54:1e:1e:c2:26:cc:dd:
dc:fe:60:0d:88:64:71:47:02:7e:05:14:9a:95:a5:
e5:29:b0:04:2d:68:44:4a:2d:e4:33:ee:b0:8c:de:
28:23:5c:ba:95:41:c4:94:4c:fb:b3:50:30:61:2a:
8e:5d:dc:b6:d6:93:be:4c:d5:08:59:90:9e:10:d5:
3f:0c:9f:20:51:02:15:0b:cc:35:ce:84:81:ba:03:
23:27:a2:6d:7a:35:0f:55:a8:8b:b0:6e:c6:e1:33:
6c:dd:3f:a9:73:7a:db:50:c3:83:0d:ed:21:a1:58:
18:ec:06:3b:d7:9a:fb:40:a8:85:99:23:3f:97:da:
e4:fc:41:49:d2:48:32:ae:06:ae:12:87:94:49:a4:
a4:a7:2f:ca:5c:60:2a:1e:f6:05:06:5c:3a:e6:a3:
e9:a2:2c:0f:e1:32:94:3c:fa:0a:2c:13:75:c5:63:
9b:8f:3c:a6:66:0d:f6:0c:ec:5a:fc:ee:9d:0e:33:
98:55:5e:48:f0:c8:11:a2:85:f1:06:7b:a4:9d:70:
0d:1e:94:47:18:a3:30:33:c5:bc:90:f7:3c:43:3f:
68:bb:73:cc:b9:9f:ef:1b:89:0a:50:53:c5:c2:06:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:9F:96:E3:11:51:6D:33:9D:E0:86:72:7F:2A:CB:A8:F3:42:AC
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:65:4b:42:d1:2c:71:e0:83:38:f8:eb:22:1d:2d:e9:3a:2c:
05:2f:9c:65:30:1b:ef:a5:68:40:78:ca:81:7e:fd:88:20:23:
74:fc:27:70:c5:3b:e1:58:82:12:59:7c:dc:91:d5:aa:01:8f:
b7:16:fb:a0:67:e3:29:d5:4a:42:e0:03:8e:93:64:68:50:88:
70:d8:3e:98:b8:23:52:62:ae:9c:09:e0:a0:b3:2a:7b:ad:e7:
db:9e:39:74:92:e8:91:6d:47:72:09:29:0d:61:09:47:62:86:
87:b9:a6:18:e7:37:d2:a0:c3:05:54:52:57:cb:a6:98:22:83:
49:6f:aa:56:74:e8:10:d7:a3:4c:0a:2e:bf:e5:7c:71:99:d6:
3a:2c:a8:f9:5a:7f:64:76:8b:3f:4c:57:d3:76:5a:2f:27:b1:
0b:87:ad:69:c5:dd:5f:28:c3:1a:34:a3:cb:ef:eb:b1:b0:d9:
51:6d:a5:43:4c:bc:75:ca:c0:a3:0e:61:29:3c:4e:33:8b:78:
16:cf:12:65:3a:32:c2:d7:7d:23:d1:2f:40:20:b1:22:e7:93:
20:1a:84:b3:4b:3d:e3:56:c4:cf:78:22:ac:f7:cf:2a:8d:39:
e7:91:ec:d6:2a:6f:1d:b0:74:c0:a0:7b:80:d7:4b:dc:07:81:
cf:4a:bb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:28:49 2025 by rpki-client