Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
File: Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json)
Hash identifier: rFG7s5uSHLXyuJKqT8Kl9+CDZWAihM/YWZJ8NQHklWI=
Subject key identifier: C8:D2:93:FF:D3:25:D7:C6:39:EA:6B:BB:6A:A9:DA:B9:7D:FD:F3:DD
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 0196C45DFD4BB2045FB7BCBCF7B81399E401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
Manifest number: 0C2D
Signing time: Mon 12 May 2025 12:00:15 +0000
Manifest this update: Mon 12 May 2025 12:00:15 +0000
Manifest next update: Tue 13 May 2025 12:00:15 +0000
Files and hashes: 1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: mVjHNORPiXWKzKOkqNy8ifGGENi647cXFNLoz5iOj90=)
2: vRZENosVd-UpUXAI72NxZZVntJk.roa (hash: 3gCkbj38/RbRsH9RtMq+iOGtDMN5uG57O65jx7at2bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5d:fd:4b:b2:04:5f:b7:bc:bc:f7:b8:13:99:e4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: May 12 12:00:15 2025 GMT
Not After : May 13 12:00:15 2025 GMT
Subject: CN=c8d293ffd325d7c639ea6bbb6aa9dab97dfdf3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:5a:33:89:83:0c:b3:81:22:bf:b7:b6:44:
e6:f5:66:c0:7f:4c:b6:aa:bb:56:81:31:2e:71:cd:
3b:c3:0c:30:be:23:73:5d:3c:3f:d7:28:02:23:c5:
88:70:3f:34:f3:49:a8:99:ac:59:5a:51:b2:df:1b:
86:45:47:d2:1f:ed:c5:65:01:a6:d4:63:ef:c4:8d:
40:d7:6e:5c:c5:01:56:ae:56:32:20:4f:a2:f3:5c:
f1:95:bc:7f:66:ff:dd:5f:bf:28:45:73:49:83:85:
ec:26:ab:48:4e:84:8b:e9:ed:12:ef:bf:fd:a8:e5:
38:ad:ea:78:1b:1b:d9:c2:96:e1:58:c1:58:12:78:
74:74:56:ef:ec:4f:75:ca:6a:27:98:a6:e3:40:cd:
45:58:a5:38:b3:da:ed:f5:51:e6:89:96:0a:da:b8:
3b:75:1f:89:af:af:7d:14:db:39:4a:0d:34:50:5b:
04:af:31:b7:b7:69:8d:ee:b1:45:b4:ab:0b:a3:73:
b2:22:3b:4e:95:42:c7:5d:3f:ab:bc:fe:29:76:24:
58:27:4d:d8:87:5d:ba:14:2c:28:69:c6:cd:93:0e:
28:7b:63:40:d7:3e:5c:44:99:35:a4:49:8e:6e:c8:
71:1f:87:db:fc:66:72:a2:07:81:f4:42:4b:e1:10:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D2:93:FF:D3:25:D7:C6:39:EA:6B:BB:6A:A9:DA:B9:7D:FD:F3:DD
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8e:3d:d5:46:78:af:d4:69:eb:e4:41:43:84:45:d3:50:2e:
7b:ae:3c:1c:bb:e2:71:40:a3:7c:51:90:8b:6c:54:84:30:d9:
6d:a7:bc:f1:fc:70:38:90:26:6e:f4:37:e7:52:35:7e:e8:8c:
7b:69:00:e2:c1:54:73:21:84:6c:41:90:96:51:8c:5a:cf:bb:
96:0b:23:5f:b2:5d:8f:3d:fe:e7:8d:a4:bb:c2:dd:79:08:a2:
56:9f:7d:72:05:67:dc:bb:72:f7:1c:a3:c1:e9:bb:b0:3d:1a:
ac:21:de:c2:ad:c3:d6:b0:45:9f:81:7e:85:fd:42:60:21:cf:
d3:97:5a:8f:3e:ac:16:81:f1:85:b8:0e:6c:1a:2e:8f:f5:79:
b4:1f:18:df:2a:87:67:56:d4:38:06:b4:d3:ca:ca:2f:7c:1c:
28:e8:58:15:03:75:5e:73:69:a6:28:76:55:2d:30:60:32:f3:
b7:c8:3d:68:33:c8:e0:90:12:bf:c9:c5:ea:cb:06:ab:e5:43:
8a:29:83:ed:9d:66:92:ea:29:df:13:0b:b2:5b:a3:c3:1f:c0:
4c:ff:65:6b:fa:35:8c:68:00:61:d7:ef:25:f5:f8:d2:82:2d:
4f:30:90:98:d1:10:37:9d:c4:68:13:08:e7:f9:4c:b0:31:a3:
83:73:ac:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:35:55 2025 by rpki-client