Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
File: jHtuGDyNUsxGBbqLXa3cZjJik-w.mft (raw, json)
Hash identifier: agv8Z2KcyqyD8O0Zmn6l+T9mKTLPXOF1lUzj6TxgAr8=
Subject key identifier: 30:6D:E1:15:6C:3B:DE:D9:FE:94:6A:15:21:94:94:8A:1C:02:34:B4
Authority key identifier: 8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
Certificate issuer: /CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Certificate serial: 0196B3D86BDDBEEB085D25FB7A11B7A6D96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
Manifest number: 14AB
Signing time: Fri 09 May 2025 07:00:27 +0000
Manifest this update: Fri 09 May 2025 07:00:27 +0000
Manifest next update: Sat 10 May 2025 07:00:27 +0000
Files and hashes: 1: hi5ZHldjJLIMs_WwcUjXAobxn_E.roa (hash: K7O/p6BErwsTAP5GquRxOQd6mPGtBXsqXpbnYVE78oE=)
2: jHtuGDyNUsxGBbqLXa3cZjJik-w.crl (hash: j/edzdDX1Qb2DrFJLyhZ6g2ItZPLcv2Sr11FSNsicGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:6b:dd:be:eb:08:5d:25:fb:7a:11:b7:a6:d9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Validity
Not Before: May 9 07:00:27 2025 GMT
Not After : May 10 07:00:27 2025 GMT
Subject: CN=306de1156c3bded9fe946a152194948a1c0234b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ed:e8:1c:07:8a:53:ac:46:38:25:fd:52:fd:
39:52:bf:9c:cf:19:d0:00:95:10:c8:ed:66:ab:4c:
df:8c:a7:61:d7:c5:fd:72:4a:0a:cd:6e:f4:c7:29:
cf:16:73:10:5e:53:04:ca:e9:5d:78:12:58:f8:c6:
25:32:8c:29:4b:ca:98:91:e7:c0:cd:0a:65:fc:8b:
7f:f5:6d:31:9b:0a:a5:5b:fb:9d:4b:99:a3:46:60:
45:36:e4:6a:cc:3d:6d:57:65:37:31:52:60:42:88:
8c:a5:c0:ec:7d:5a:1c:6d:9a:bb:65:23:60:b9:78:
5b:0c:04:d8:e5:fe:b8:ed:89:b8:03:d9:13:9f:56:
e9:89:33:a5:70:a0:66:15:a5:90:01:2a:8e:09:d7:
c8:20:4c:e1:d4:36:01:83:f4:36:72:90:5a:0f:eb:
1e:82:dc:94:23:8b:9a:e8:95:5c:30:e4:1a:8b:ba:
97:92:44:14:6b:fd:f6:29:01:35:04:d3:d8:46:a5:
0b:03:06:90:74:d8:2a:39:68:1b:c0:3f:c7:df:d8:
df:46:1e:f6:4b:c9:39:e2:3d:b1:0f:a4:b9:ed:8d:
c7:c6:0e:c5:dc:09:68:64:43:2d:db:54:12:50:a2:
00:c0:5d:9b:de:a9:1e:49:f9:f6:ba:39:e1:aa:eb:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6D:E1:15:6C:3B:DE:D9:FE:94:6A:15:21:94:94:8A:1C:02:34:B4
X509v3 Authority Key Identifier:
keyid:8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:01:e4:43:5b:54:27:e0:fd:f1:3b:b7:e8:06:0d:f5:43:dd:
9d:af:94:2a:71:15:29:d8:9d:8c:bd:d1:6f:ce:93:81:67:ea:
1d:88:1c:f2:df:a4:a4:76:eb:44:49:3d:13:79:c2:f9:bf:2e:
f4:ec:73:2d:6d:c6:0e:de:fb:7a:31:a9:27:da:03:2f:09:29:
00:65:c7:04:66:96:9d:62:ab:86:9b:52:f6:3d:73:b6:d1:7d:
9a:93:07:cd:e4:a1:53:8d:58:3a:cb:b9:05:d7:36:57:2a:5b:
2d:d1:cd:a9:13:31:70:0b:f8:7e:ff:5f:8c:d6:1f:5b:f7:4b:
79:f7:2c:7f:db:12:ab:7e:42:47:e6:47:dc:20:6d:31:86:af:
87:65:8d:41:4e:fe:5d:8a:e8:48:35:1a:5e:a5:03:65:70:f9:
08:6d:78:b0:1a:be:4c:8a:ef:a0:d8:40:65:8d:13:8f:c2:03:
7c:04:76:83:ca:e2:7f:14:fe:6f:53:d6:1a:43:4e:ac:95:e0:
71:94:bf:55:a0:a6:91:76:8d:0b:07:cc:6c:48:6d:6b:b6:46:
c0:b8:4f:16:c3:10:9c:f5:9e:8c:23:52:39:67:8b:89:19:0c:
74:18:32:aa:6a:f4:0d:92:05:50:7a:08:e9:82:56:3f:db:dc:
d4:24:8e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:45:06 2025 by rpki-client