Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: m+1uXBWaGclhmchHiPm+wND5xqrri658jiBtwRsfF9s=
Subject key identifier: 9B:D1:FE:38:83:48:6D:30:37:F7:EE:82:B2:DC:A1:F9:42:63:B0:BE
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 0196BDEE38BA171E6685FF18B1C23D42B043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 14B6
Signing time: Sun 11 May 2025 06:00:27 +0000
Manifest this update: Sun 11 May 2025 06:00:27 +0000
Manifest next update: Mon 12 May 2025 06:00:27 +0000
Files and hashes: 1: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (hash: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: 9dDUG8Sn84tGPWIZGJTxa0otXMLA12o9wCZzR5WK6pI=)
3: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (hash: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:38:ba:17:1e:66:85:ff:18:b1:c2:3d:42:b0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: May 11 06:00:27 2025 GMT
Not After : May 12 06:00:27 2025 GMT
Subject: CN=9bd1fe3883486d3037f7ee82b2dca1f94263b0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:4b:0b:80:e6:f4:7b:1b:e0:df:1c:0b:82:
b4:ad:76:83:9e:20:af:0b:72:eb:82:9b:5f:20:61:
a5:64:fd:7e:ed:ce:60:8c:b4:8a:e9:c9:81:f6:7b:
f4:83:7c:c2:c6:3c:c2:92:fd:b2:b5:40:01:df:70:
e7:f2:60:4a:f4:84:74:17:85:df:85:89:3d:02:98:
a2:17:ef:ae:20:b0:f4:fb:bd:4b:17:89:59:01:e9:
91:4c:0b:46:1b:4b:c4:f9:85:a8:b8:95:f2:b1:8a:
a7:35:5d:e4:31:3b:69:b6:b9:21:f5:de:73:80:d7:
7f:4d:12:be:84:c9:35:d7:88:57:5c:7f:e8:af:06:
fb:96:ff:3c:ab:73:30:89:28:83:0e:e4:41:4c:0d:
08:7b:4e:f4:e2:66:f1:73:5f:18:6a:4f:60:05:bc:
43:c5:81:a0:64:44:1d:46:eb:78:9b:b5:32:d1:2c:
98:b0:cf:11:e5:a4:66:92:ec:7c:6b:2c:29:6f:af:
54:05:2b:81:eb:ba:49:92:34:f0:50:5b:c0:00:dc:
1b:ce:61:01:4d:66:1f:c1:f9:a3:96:77:ea:bf:8f:
18:23:51:cd:6b:e4:56:cb:39:b9:4e:0e:af:a0:e7:
43:47:0f:b1:71:8b:0e:41:2f:5d:69:c9:b6:8d:25:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D1:FE:38:83:48:6D:30:37:F7:EE:82:B2:DC:A1:F9:42:63:B0:BE
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:34:f4:7a:62:e2:1f:d2:46:3f:05:f1:82:d0:16:b1:4c:68:
0e:16:be:89:39:d1:0d:14:41:63:79:3c:ff:6a:b8:06:c9:bd:
71:ed:a5:5f:28:b5:bd:1d:78:bc:fc:42:e3:5e:c4:b6:b3:61:
fa:6c:b6:4f:02:45:f2:e3:11:bf:36:b8:7a:af:a8:aa:23:f7:
54:c3:5f:1e:d8:78:17:e3:21:ec:ef:5c:26:b3:3c:85:4d:e9:
39:8a:18:1b:8d:88:0b:30:33:ad:8a:00:15:4b:92:47:d7:05:
2e:5d:6a:60:dc:8c:32:3b:18:2b:c7:ab:61:95:d2:e3:4a:81:
bb:d9:e0:63:46:b8:cf:58:27:d4:95:78:90:af:05:d4:01:08:
a0:ee:d5:1a:7e:8e:91:63:4f:70:57:46:3b:69:17:ef:64:49:
f6:91:c6:4a:30:59:bd:f3:26:97:5d:12:a0:03:04:c9:c8:ef:
75:9c:27:95:12:57:be:28:68:33:db:7a:fd:92:cc:3d:86:09:
79:40:77:50:40:3e:64:34:36:f2:b7:94:9a:3a:b5:15:ea:0a:
d8:d0:12:a3:89:0f:43:33:b3:7f:d3:5e:07:3e:4a:72:46:5a:
12:f8:9b:5e:8a:60:8c:d2:66:cf:ca:ee:48:5b:93:58:da:63:
b8:c1:a9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:12:49 2025 by rpki-client