Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: +CsKwsMp5zV4wk6qeGrreHjXRCle+ERBpY4Sx/CTS+k=
Subject key identifier: A7:DF:A3:33:00:65:43:10:76:C5:04:16:BE:30:F6:66:E5:DA:F5:7C
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 01969E2C901DA8A5866909B3C10F62EDC22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 126B
Signing time: Mon 05 May 2025 02:00:42 +0000
Manifest this update: Mon 05 May 2025 02:00:42 +0000
Manifest next update: Tue 06 May 2025 02:00:42 +0000
Files and hashes: 1: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: aDuHJyubbL+28H/PTX8oIj3r5Se/jcDZNLfqWmDSSR4=)
2: vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa (hash: mmQc628tPl3bs34ALUnwk7MYS2YDfpoBWJfmEYCNwMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:90:1d:a8:a5:86:69:09:b3:c1:0f:62:ed:c2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: May 5 02:00:42 2025 GMT
Not After : May 6 02:00:42 2025 GMT
Subject: CN=a7dfa3330065431076c50416be30f666e5daf57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:68:8e:22:f6:e4:6b:29:4b:73:d3:76:d3:
8e:6e:85:99:33:70:29:a1:71:c6:41:9f:b7:84:ed:
5f:da:07:53:7e:ea:ba:e3:ed:03:e3:9e:98:f2:83:
9f:e3:1e:f4:cf:e2:43:2b:da:29:7c:9a:79:fa:4f:
8d:ba:b5:8b:a1:be:99:e0:68:7d:f0:90:a9:1d:63:
45:48:de:61:d5:8b:a0:fe:96:e3:18:89:77:1c:4d:
05:0f:c7:45:e5:e8:07:2a:b1:d8:b5:52:64:1d:a6:
25:4b:d0:13:41:17:6b:9a:da:14:4c:5b:5b:ff:36:
53:fe:05:67:b3:bb:b9:a6:c5:1e:8d:eb:6a:f8:60:
ba:88:b6:1b:2e:ef:a2:d1:f6:48:9c:35:8d:82:65:
73:bd:ec:6a:f2:8d:74:33:79:8c:37:a9:86:2b:97:
48:34:93:b9:12:18:ca:44:54:e7:25:5b:e1:95:cb:
48:d4:35:66:92:95:4c:7b:b9:d1:e0:ad:32:86:cb:
05:03:01:2d:10:8c:c5:0f:ee:4f:df:6c:c2:ea:f8:
41:00:f4:cb:9c:ba:12:58:ea:b7:56:1d:00:d3:47:
b9:e6:18:c2:73:5d:8d:99:72:dc:8a:91:14:c0:40:
ae:15:e2:fe:ca:8e:94:01:1a:91:7a:de:b0:40:10:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DF:A3:33:00:65:43:10:76:C5:04:16:BE:30:F6:66:E5:DA:F5:7C
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:cc:6e:9e:19:f9:83:8e:ce:99:e2:dc:4f:8d:e3:5b:70:57:
de:db:93:51:9c:ba:db:cc:19:73:d4:fc:9a:6b:c3:3e:e8:b2:
7f:ae:ac:fb:16:a6:3b:00:8c:97:e5:59:18:a4:66:6e:f9:10:
79:78:21:07:57:bd:f5:04:29:f8:86:04:0e:f5:0c:b6:7a:d3:
49:bc:fd:e1:b2:90:5c:de:6d:aa:4b:fd:4d:8e:a5:76:ff:f6:
2d:21:c4:17:ab:89:e7:0e:91:f3:5f:4d:e6:00:c1:8f:da:47:
ce:0b:6d:86:8c:3c:f7:9c:90:77:a1:2c:0b:58:d7:fc:a7:db:
4a:1e:3f:e9:3d:da:d2:21:10:b3:2b:43:09:40:9e:48:12:1f:
88:04:2e:54:fb:bd:37:7a:fc:bc:81:7c:55:bc:7b:f0:6c:e5:
02:85:0c:67:1b:83:2f:95:9b:b1:b9:bd:b8:8e:cf:51:40:e0:
8d:23:7d:7d:bd:9d:ff:e1:44:d5:55:c9:d4:f2:d1:55:8a:89:
39:a0:b6:c6:64:5e:2f:7c:af:4d:59:5a:57:d8:ac:bf:3d:d4:
ef:07:c5:c0:ae:64:ca:5a:b1:44:cb:ba:c9:a5:d8:7a:9f:9b:
e7:1b:27:2e:8a:a9:cf:c7:42:3d:58:b7:2e:2d:b5:cc:32:1e:
eb:a8:ac:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:50:46 2025 by rpki-client