Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: zp5XtHbuidSRL8pvBz/3ifn4D0hswpWXIgTPXXGQcjU=
Subject key identifier: FB:A5:15:BB:04:D1:C8:78:FA:B0:06:A3:BB:02:CC:C2:87:CC:19:B6
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 0196A79D11EADB9953E228A73F3FB1226999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 22:00:10 +0000
Manifest this update: Tue 06 May 2025 22:00:10 +0000
Manifest next update: Wed 07 May 2025 22:00:10 +0000
Files and hashes: 1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: UIzEhG+abxg7ank+/UeNjMZ68laE0TINlW0L+YHbQsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:9d:11:ea:db:99:53:e2:28:a7:3f:3f:b1:22:69:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: May 6 22:00:10 2025 GMT
Not After : May 7 22:00:10 2025 GMT
Subject: CN=fba515bb04d1c878fab006a3bb02ccc287cc19b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:95:2e:1d:69:54:c4:d6:08:5b:c0:86:07:
6b:9b:c1:c5:a3:d6:86:50:c0:3a:22:a5:0c:f2:a3:
8d:d5:85:97:25:96:05:3b:a9:27:8c:67:66:6f:a7:
2a:e9:10:e0:0d:06:6e:9b:b1:9a:d2:3d:6c:9c:21:
bf:30:f9:7d:b4:e7:75:51:1d:9b:e6:10:77:79:16:
ab:a0:35:e7:3a:3e:6a:2b:ad:fc:c0:5f:55:03:0d:
7f:a9:ff:81:26:13:6d:19:d9:84:f1:d8:51:dc:02:
8b:c8:72:27:09:4d:d8:47:e6:f8:16:ef:0c:6f:33:
64:e2:8f:fd:6a:dd:da:48:17:2b:a6:70:c9:27:53:
af:9c:99:ea:2d:17:96:9a:9e:29:3a:ae:f4:7e:ed:
2b:1f:a0:ce:42:db:28:77:d3:0f:8c:58:bf:e2:14:
27:80:6f:73:62:5b:e7:b2:a2:e9:2c:f4:80:05:6f:
05:2f:6f:a5:7a:fd:7c:5b:85:7b:a2:0f:63:e9:23:
26:b2:4a:36:43:02:ee:79:79:9a:fc:92:86:9e:76:
03:f6:1d:6f:ba:3d:a1:2e:34:68:f6:8b:c2:00:40:
48:bd:96:da:b9:83:d3:5b:3b:cf:95:a3:26:c4:6d:
d8:0f:2a:2f:b5:f9:7f:32:f7:19:89:9b:ab:b0:29:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A5:15:BB:04:D1:C8:78:FA:B0:06:A3:BB:02:CC:C2:87:CC:19:B6
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bb:59:e6:cd:1a:05:cc:05:51:74:c2:57:f8:43:58:a2:cb:
1b:9f:3c:7e:63:3b:5f:5b:6d:49:69:35:b7:2b:67:f6:01:56:
13:18:75:f3:60:f3:b7:bd:a6:cc:e1:73:ac:a5:b8:7a:4b:0a:
f9:12:c8:dc:0a:6b:f0:5e:35:cf:0a:28:94:28:b9:28:3a:89:
67:d2:35:6f:9e:ab:58:1d:cd:ae:40:c6:7d:45:ab:34:fd:ab:
02:b4:58:ef:53:c3:0a:e6:73:4f:15:71:16:fc:0a:8a:b6:fa:
81:ad:e0:51:cc:03:a8:fa:4b:fa:f2:ec:bd:0b:63:15:74:3e:
38:58:1c:fd:3b:91:ba:af:3f:de:78:16:36:30:c9:6d:db:3b:
37:55:7d:ba:e3:3c:64:fd:08:55:b8:ea:39:ba:0f:6a:36:bf:
ec:c7:84:90:c1:22:8f:0f:a4:5b:8b:a7:12:7e:f9:21:4a:2c:
94:d9:a0:e0:76:a4:72:2b:e7:a5:4e:d3:dc:1d:7b:bd:f0:29:
52:d8:75:91:a6:7f:cd:c6:31:e6:4c:c7:85:4a:ba:8a:dc:90:
fd:90:f6:70:e8:49:e3:73:43:d4:6c:c4:32:61:4d:35:f8:11:
b8:02:b2:d9:45:e3:b2:43:4e:d2:b5:42:59:ae:fb:79:45:0c:
12:8b:4a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:21:53 2025 by rpki-client