Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: viq/hMo5FKynayJO1jgzPVjM2DotduDCYNjdDfmyRRo=
Subject key identifier: D5:69:E9:F1:06:42:72:3E:73:31:05:98:C2:67:1A:19:9B:59:06:F4
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 0196A4665D19C60D0A1F085A3941D9DCD074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 1427
Signing time: Tue 06 May 2025 07:01:33 +0000
Manifest this update: Tue 06 May 2025 07:01:33 +0000
Manifest next update: Wed 07 May 2025 07:01:33 +0000
Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=)
2: c9lDVYQcRQdBCo43HauWZGFuClk.roa (hash: inruiVih5EBCVj6ZjI9SCWuJ/TuQ5KyFEPVY6V2Z9e0=)
3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: NwpTUoPL4RYMEtx2t8S2XpwZM5kSBZ9atUzcqjDPtxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:66:5d:19:c6:0d:0a:1f:08:5a:39:41:d9:dc:d0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: May 6 07:01:33 2025 GMT
Not After : May 7 07:01:33 2025 GMT
Subject: CN=d569e9f10642723e73310598c2671a199b5906f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ad:2c:d4:21:93:d1:2a:0f:b8:5b:64:6e:de:
d8:36:92:d4:4f:56:cb:48:4a:a6:85:c6:32:81:f5:
99:ed:86:22:42:4d:e6:ce:6a:b7:59:76:f8:41:4d:
e6:8b:7e:eb:0f:65:47:4e:c7:d5:23:03:af:33:64:
b7:3d:06:82:ca:fd:de:0f:e1:ef:9a:d8:12:a6:7f:
4c:ff:7e:f3:7a:99:e1:96:43:cc:07:e9:f3:3e:ae:
ce:e6:b4:21:46:a9:d7:dd:83:e2:a7:99:be:5e:e2:
66:cf:1c:de:48:49:db:2e:49:52:03:dc:9b:9b:48:
6e:ce:7f:b2:55:a0:8f:c1:d1:97:7c:f4:ef:60:e6:
ea:52:17:39:c7:35:7d:ec:f8:cf:79:bd:df:7f:0c:
a9:ee:a8:5d:22:95:9b:fe:d5:22:4d:53:ec:6f:32:
7c:10:52:d1:5b:cf:e4:60:72:cf:4c:c9:d7:ad:ad:
45:57:50:87:6c:02:61:53:d0:b3:9b:ba:9f:5c:35:
14:5d:63:be:62:43:6c:d1:8a:2c:57:b4:0d:e9:a7:
18:81:26:2a:5f:e3:7d:73:fb:46:a9:6b:4a:78:38:
96:27:87:af:9c:7e:3f:eb:1c:67:b2:b7:27:4b:02:
45:79:41:a5:01:13:5c:21:20:88:ff:cf:c6:81:13:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:69:E9:F1:06:42:72:3E:73:31:05:98:C2:67:1A:19:9B:59:06:F4
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:db:5d:b2:77:9c:41:d0:f7:79:c1:16:12:6d:de:29:78:6c:
89:6c:b6:86:31:be:43:d4:fb:9b:5d:9a:96:5d:37:12:2c:8a:
50:2f:82:4c:d0:aa:82:f2:87:d1:bf:16:ef:9a:a7:56:84:d3:
97:fe:bd:4d:e6:b1:ab:0f:6d:96:13:fc:13:1f:d3:ab:a1:e1:
98:e1:6b:de:e9:58:da:78:24:49:dc:92:dd:b9:54:51:46:db:
87:85:16:85:b7:e5:2b:e4:35:ab:88:bb:24:a4:6e:10:a3:e9:
5b:d6:66:3b:26:b3:54:58:fe:37:ce:11:46:d3:38:70:2f:c1:
e1:77:2d:36:22:f5:92:01:99:30:e2:28:22:51:d8:ff:85:a1:
79:b5:73:d3:0c:b0:5e:6d:43:06:50:a8:5a:37:bd:bc:0b:77:
93:04:d2:9f:7f:42:ef:3c:f6:00:37:28:0c:6a:cc:d8:ac:98:
bc:69:41:a8:23:f3:de:8c:3a:c3:49:f7:64:df:20:50:29:ca:
36:1e:83:aa:55:ae:6f:86:96:7e:94:eb:0e:c4:bb:22:b7:ab:
02:ec:3c:76:ef:87:c6:9a:3a:3d:4a:9c:f3:89:d6:7a:70:5b:
82:a8:ad:fe:41:3d:f7:14:3e:b5:ac:2a:fd:6a:34:b2:02:66:
31:a7:90:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:18:57 2025 by rpki-client