Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File: Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier: EzyZmf/+3V252ipbSAL6SNBc4z+bZ9JssR3anwLZhuA=
Subject key identifier: B7:A4:EA:F6:D1:BC:2F:E9:99:CC:19:9B:07:37:2E:7D:F8:DA:8C:2F
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 0196BA116EA46EDD7973CF0CCB10CE2C74B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number: 153A
Signing time: Sat 10 May 2025 12:00:26 +0000
Manifest this update: Sat 10 May 2025 12:00:26 +0000
Manifest next update: Sun 11 May 2025 12:00:26 +0000
Files and hashes: 1: 6s_6R9Qg6B0BWMzsSYadcyCPTNI.roa (hash: 0TX6RB/i/PYM+jHhKWcDxzPxSqvqvW8BUSQ5qekuotk=)
2: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: YEhM0lz3D/n0DsTh+1e4pw4i8HJZw0Lmj7iNvp8BLyY=)
3: On6P0oyCVsJaxIEE3GftNC4qztw.roa (hash: MHdX24gf5gM9PdREHRYQX0s+qP7Sh6jKR9PNtNbtiPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:6e:a4:6e:dd:79:73:cf:0c:cb:10:ce:2c:74:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: May 10 12:00:26 2025 GMT
Not After : May 11 12:00:26 2025 GMT
Subject: CN=b7a4eaf6d1bc2fe999cc199b07372e7df8da8c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:1a:c0:be:4c:38:89:9a:32:47:f7:3d:c3:
43:43:0b:6f:e0:bf:9a:be:20:04:24:c8:0f:55:63:
fd:37:3c:d3:03:9f:fa:ad:cc:30:8f:f2:cc:65:ee:
99:04:53:03:d4:df:35:3d:3d:ef:ba:89:e4:d6:96:
8a:17:af:b3:be:c2:95:fc:b7:5b:13:23:68:a6:43:
7b:74:3e:45:1c:4e:4e:f2:44:b3:71:e1:2e:2f:1d:
91:b3:f8:3e:aa:d3:dc:6e:8c:7e:51:9f:d3:15:47:
de:51:52:35:d6:03:fb:2c:62:09:b0:1b:96:9c:c9:
4c:fe:f5:96:dd:19:51:df:5d:86:54:49:de:94:9c:
7f:42:e9:d1:4a:05:a3:af:f7:f1:23:2f:bd:8c:ef:
43:32:46:3c:56:3c:09:4d:65:c8:2e:dd:b1:7e:16:
f8:e8:8b:81:59:f5:86:19:3f:c9:17:3c:0c:2d:f4:
ae:d0:f3:82:b0:ea:60:ab:be:62:4b:9b:ad:a4:5e:
17:e7:59:22:cf:d5:87:73:f2:92:86:20:5b:cb:b8:
ea:1a:16:d1:9f:c6:b4:78:19:00:5d:e4:cf:67:67:
c6:83:84:e9:0b:9a:5c:7e:16:65:88:06:3e:a9:15:
23:b5:73:f8:4a:c9:ec:65:34:1f:db:9f:a4:9f:32:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A4:EA:F6:D1:BC:2F:E9:99:CC:19:9B:07:37:2E:7D:F8:DA:8C:2F
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:44:71:94:05:b6:44:49:d7:f1:de:32:13:c9:eb:02:7a:4d:
9c:30:26:b1:87:10:c8:a4:9f:d3:f5:74:a9:68:f4:e4:19:32:
04:8c:d5:9f:87:66:71:9a:5b:8a:dc:87:78:c6:dd:c8:86:d8:
86:3e:8c:73:07:f2:8d:a3:75:d0:db:d4:12:ad:7e:6c:26:f6:
c1:c8:c2:c2:10:de:42:6e:0f:9b:f8:56:17:ac:63:2d:fd:a6:
25:7f:9c:cb:2c:83:d4:ca:d4:58:28:52:fb:08:d6:f8:71:cb:
b5:a6:f1:d3:00:d8:61:eb:f7:c7:8e:33:67:57:be:19:c5:f6:
dc:54:34:f3:6f:c2:dc:69:a6:8b:af:11:c2:cb:3e:df:97:ea:
35:c2:08:c7:3e:9d:ee:c5:cf:51:af:5b:a5:f6:56:e6:9c:47:
90:55:ea:84:44:c5:05:f7:fc:fd:62:a5:93:48:c6:5f:a2:eb:
ab:97:a3:e4:3e:55:1d:0e:53:4c:23:8a:56:4b:7b:d7:07:0e:
5f:80:01:ce:57:8a:87:6e:a1:bb:93:ac:f3:c8:96:15:c6:4d:
05:ff:a1:4b:da:9c:fa:a2:5b:bb:70:ce:18:49:8d:a4:f3:5a:
c9:51:fc:94:58:f1:58:cc:16:b6:b5:23:5c:d8:9a:e4:b7:71:
4b:0f:e0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:00:54 2025 by rpki-client