Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier: Zd4Mqh6E68qpNKrxt9TaJqKBbNOntJo412ZBY1JRUSk=
Subject key identifier: 4C:21:FE:39:24:F7:2B:09:6C:F5:CE:58:DC:BD:05:FF:88:BE:78:2E
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 0196B0D7546225480D53CB4FE12F2A356979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number: 13AE
Signing time: Thu 08 May 2025 17:00:23 +0000
Manifest this update: Thu 08 May 2025 17:00:23 +0000
Manifest next update: Fri 09 May 2025 17:00:23 +0000
Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: kgJXRBOp81p4/uy4L6snV986INl3m9sr3ARQD8boI5w=)
2: D7sSJq2EzuylXPTSVOWPxBm3Ho8.roa (hash: gmpCwmfjITdv8gtFNL4Zn9iouUW+u1PcPnCsYBgoNzM=)
3: efe5amh4jlMydhivq3OF5qbDCpI.roa (hash: 6iw2gnDcZP6ZZJX73WBgPOkeEQEpMVtjxP8058iyjOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:54:62:25:48:0d:53:cb:4f:e1:2f:2a:35:69:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: May 8 17:00:23 2025 GMT
Not After : May 9 17:00:23 2025 GMT
Subject: CN=4c21fe3924f72b096cf5ce58dcbd05ff88be782e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:90:e0:50:c1:b7:68:aa:d8:28:05:d0:64:
85:45:98:6f:cc:58:fb:a1:2b:83:78:79:29:1b:d3:
16:0f:62:5c:21:15:47:ab:96:43:08:e7:9a:0e:37:
29:cb:34:4d:22:0b:3d:52:74:03:6f:13:89:5e:1c:
91:e3:01:06:b4:a6:d6:03:55:ab:91:28:57:cf:1a:
a4:53:55:90:c9:1f:89:1b:7d:d7:4a:48:92:5a:12:
0b:7d:6b:67:75:3a:b9:1e:55:b9:1e:bd:f7:54:30:
12:46:3a:51:c0:0f:91:7d:c6:81:78:6b:ab:51:0c:
85:26:8e:e5:03:05:7f:cc:91:ae:b4:67:88:0a:15:
74:df:d2:c4:06:14:48:f9:cc:17:0b:7e:54:6c:b6:
33:6a:e0:12:0b:7f:48:3b:45:fb:21:69:8b:5a:b8:
83:c8:16:3d:ca:1c:b2:18:9b:6a:fc:50:76:4a:20:
cf:16:e3:2c:fb:8a:1c:bb:1a:33:43:22:ab:ec:e5:
ed:1e:f8:d8:26:51:00:43:2d:cd:db:8e:b5:4e:f8:
55:dc:66:fd:ee:a5:88:8e:59:fd:c4:3f:ff:d2:60:
04:86:71:01:fc:c2:4f:df:9b:f0:05:6b:d7:a7:f8:
55:cd:b5:d1:76:cd:02:1c:2b:a2:2c:35:4c:35:a6:
92:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:21:FE:39:24:F7:2B:09:6C:F5:CE:58:DC:BD:05:FF:88:BE:78:2E
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bb:01:64:5f:b2:65:a0:56:ab:c1:5c:51:ca:ec:bc:e3:38:
c3:63:13:86:77:ed:95:41:e1:5a:13:e5:33:47:e9:df:45:11:
a7:83:81:4f:92:9e:d5:75:1e:26:a7:24:f2:dd:ae:e4:a7:59:
0d:53:f4:23:63:b5:11:ee:fd:9c:58:32:73:e0:a2:a4:f1:e6:
be:bd:88:bc:47:e2:ed:9d:cc:61:6e:dc:e2:b0:2c:ec:d5:64:
c7:39:90:14:5e:32:f8:fa:6a:fe:09:b0:f0:56:1e:2d:b2:be:
23:f0:59:07:36:e3:b9:3c:ce:68:86:4f:81:1c:57:42:7f:fc:
04:5c:c9:05:b6:82:8c:0b:c7:13:00:a6:9e:5f:ef:3b:bb:49:
38:78:3b:7d:3a:fc:37:d4:e3:6f:6b:e4:e2:7b:71:59:06:93:
37:b5:e1:43:1b:74:82:3f:6d:b7:8f:ff:f2:66:10:13:ce:80:
be:30:c0:24:88:d7:38:b2:05:15:f1:5f:60:8f:a9:02:ce:a2:
e0:bf:0d:83:43:b6:c5:83:0a:15:21:22:b5:b4:2b:03:d1:18:
d4:ee:7d:bf:7b:67:9a:1e:91:b5:2f:25:b0:8e:87:53:75:16:
52:46:e7:9a:bf:7e:18:7a:9a:6c:9c:92:fe:81:57:2f:03:8f:
89:f8:b6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:38:17 2025 by rpki-client