Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: WsVaV1hntKxEQcyg0DNCqNusKKRrIV8t06R1EUpok3k=
Subject key identifier: 12:27:EF:69:F0:4C:D0:36:4B:62:32:F8:BB:0B:C2:87:BE:E8:89:83
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 0196C3F0D0B8F936565DE5956672338F5563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 0D65
Signing time: Mon 12 May 2025 10:01:01 +0000
Manifest this update: Mon 12 May 2025 10:01:01 +0000
Manifest next update: Tue 13 May 2025 10:01:01 +0000
Files and hashes: 1: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (hash: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=)
2: O79Bxg0BR0VFMQ_a0ZyezMPMz0M.roa (hash: wV2tjiSpv38ZVgcsHYOWBKswr9oGmugpMMubTRaOGF4=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: bGJrQKILZl282lJ2d6xdvwkczDHY7RGcGczP0GxISEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:d0:b8:f9:36:56:5d:e5:95:66:72:33:8f:55:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: May 12 10:01:01 2025 GMT
Not After : May 13 10:01:01 2025 GMT
Subject: CN=1227ef69f04cd0364b6232f8bb0bc287bee88983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:a1:01:f8:c1:c6:a8:65:8a:7c:9d:9c:91:
0e:3b:ed:82:a2:52:eb:42:e2:cd:eb:35:52:ff:2e:
a4:a7:c1:53:6a:63:05:47:44:e7:54:0a:11:d4:b5:
6e:41:65:ee:f5:33:1c:1b:77:b9:4a:55:ee:27:25:
6e:28:58:f1:dc:37:bc:24:d2:bf:88:99:01:c1:b5:
01:d9:45:01:a4:fc:fb:30:d6:ab:92:19:4b:6a:9c:
e3:28:76:01:44:49:27:ef:eb:1c:14:8b:03:82:78:
82:73:78:ca:e1:7d:fa:8f:78:7d:cd:3d:aa:dd:c0:
74:74:11:f7:9c:05:37:79:a9:a1:63:a8:e3:57:99:
71:2e:77:04:e8:62:27:57:6f:6d:a7:8f:94:39:e0:
bb:c5:3f:b3:9f:0b:d2:4e:f0:1d:74:94:66:11:74:
7c:b4:bd:7c:d7:8b:2a:62:21:07:77:e1:46:51:09:
95:bb:16:ab:ad:5f:e4:e7:34:18:84:f7:3e:df:b2:
c3:46:a0:f1:2b:62:0d:7c:87:e6:ad:29:50:1d:92:
ae:26:a3:a4:1b:5d:3f:82:c3:33:6b:2c:9c:40:c2:
b6:3b:42:2f:8f:c3:27:69:11:f9:e8:74:63:f3:72:
c5:b6:75:87:7f:60:6b:90:3d:49:b6:7a:37:97:8c:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:27:EF:69:F0:4C:D0:36:4B:62:32:F8:BB:0B:C2:87:BE:E8:89:83
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a6:74:38:a3:b6:12:de:65:b5:c0:ba:5f:d3:83:0c:5d:f5:
6f:a3:c7:8a:3b:73:32:5b:76:7c:eb:2c:2f:96:a9:1d:37:53:
82:28:48:6d:58:f1:b6:96:0c:a9:9b:d1:24:68:aa:f6:a5:53:
c9:df:62:b3:04:61:ed:ef:b3:c0:d6:19:10:8a:79:bc:e5:fd:
3e:e3:1e:bc:99:31:90:6c:cd:75:b6:04:ad:e9:0b:e8:87:22:
b8:66:77:a3:1c:75:85:3e:25:df:c1:9a:bb:54:cc:76:83:c0:
c7:16:8a:82:6b:7b:72:9c:80:d6:88:7c:bc:7d:60:30:10:d2:
4a:1c:c1:38:c9:6c:92:56:49:12:49:0e:15:e0:5b:a1:76:12:
f7:c9:42:0b:4f:f4:f3:27:e4:6c:cf:a3:f3:12:f0:8d:c5:23:
ff:e9:53:0c:f4:57:34:ec:4e:ce:00:b9:6d:5c:72:8d:a8:cb:
8a:95:d7:d0:9f:7c:33:08:b7:51:3e:b1:38:0d:8e:82:94:42:
0e:18:64:e7:c1:76:4a:27:67:74:9c:0b:a4:e6:44:27:22:0e:
17:6a:03:7c:a8:00:81:a3:3b:c4:0d:6b:3e:7e:af:20:8e:be:
44:21:d5:e5:b2:cb:1a:28:cc:51:3b:80:5b:bf:1f:6f:57:ca:
0e:99:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:51:30 2025 by rpki-client