Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier: 9c5hgfyf9Mn1tB+fKLXdSezKoQpGOKrIOAJLXBoeLMg=
Subject key identifier: 50:C5:7E:E7:A4:8E:BA:C6:F9:65:CF:A3:51:7D:78:6A:47:33:EE:CC
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 0196BD80C5B2641ECCFEA5AA21173D75E419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number: 07F0
Signing time: Sun 11 May 2025 04:00:55 +0000
Manifest this update: Sun 11 May 2025 04:00:55 +0000
Manifest next update: Mon 12 May 2025 04:00:55 +0000
Files and hashes: 1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=)
2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: vnNBsJShdh2CZC+zQFVJslXrZIuoPA6GysHlvLENb7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:c5:b2:64:1e:cc:fe:a5:aa:21:17:3d:75:e4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: May 11 04:00:55 2025 GMT
Not After : May 12 04:00:55 2025 GMT
Subject: CN=50c57ee7a48ebac6f965cfa3517d786a4733eecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:57:da:4a:b9:3b:a3:76:9d:bd:7c:9f:f8:
f3:5e:c5:7e:c4:ce:b3:cf:fd:ae:62:6b:2b:06:9d:
70:f9:fe:22:fd:2d:6f:ed:6f:3f:ba:b1:7f:27:95:
3a:a7:d7:d0:4d:c9:d0:a6:ea:16:6c:5f:5b:dd:59:
7b:2d:15:70:d3:a9:59:0b:13:88:95:db:0f:cb:37:
50:ef:4f:55:94:57:99:b7:ba:a6:9d:65:24:d6:af:
87:84:a8:f1:6a:11:1b:f3:6d:d9:04:15:8d:a0:61:
57:26:d4:0d:2f:0c:21:7c:25:90:b1:35:77:27:7d:
c6:8d:4d:bb:b0:39:ae:be:f0:ed:dc:11:29:11:47:
28:28:1e:76:15:b4:a3:8e:20:38:3a:54:ef:d8:9c:
4b:cf:93:92:15:5b:b6:44:be:8c:5d:f1:64:3f:37:
77:44:56:12:79:2d:29:d7:7b:74:70:7f:06:a4:e8:
3c:93:96:a5:04:61:28:f7:6c:c4:3d:66:54:33:91:
be:97:d7:78:4b:f6:c8:ad:12:f4:18:3c:13:28:90:
74:c7:5f:e3:3f:8f:8c:22:af:8a:9a:fb:1e:f3:dd:
dd:9d:53:b2:6c:b7:56:fb:b6:9b:9f:14:4f:5b:96:
9a:c2:67:c6:62:55:cf:0d:22:84:a3:77:46:57:69:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C5:7E:E7:A4:8E:BA:C6:F9:65:CF:A3:51:7D:78:6A:47:33:EE:CC
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:25:df:9f:42:8a:2b:9c:2f:5a:67:67:c2:a2:9a:ef:5c:e6:
bb:fb:5b:ea:b5:31:60:8f:e4:8c:9c:db:0d:a2:47:37:96:96:
31:09:dd:60:0f:b8:a1:bc:ee:4e:b5:89:d6:43:de:84:1c:7f:
36:4d:29:ab:ba:92:c6:4d:fc:f7:e0:ea:fe:e2:8e:7a:1f:2f:
47:e5:ee:2a:b3:8d:b8:72:90:31:16:27:fa:80:16:6d:76:bf:
82:f9:38:3c:68:fb:2c:36:1c:01:13:8e:c8:3c:06:ed:2b:8a:
3f:75:52:17:b7:fb:d4:3f:7a:96:8c:22:06:ee:73:16:1f:66:
4a:90:ab:64:9c:c9:83:ae:e1:86:ea:a5:f5:96:4f:a0:4c:e3:
ef:66:e7:6a:09:16:59:ba:73:e3:04:ae:db:a8:f9:22:43:18:
99:16:49:17:34:0a:61:b8:91:15:b7:21:32:64:0b:27:c2:7d:
9a:17:38:c7:59:37:1f:c2:4b:6b:83:ae:a2:50:5a:ab:03:53:
b5:e3:b8:73:d0:a2:e4:aa:07:4f:18:6b:43:bb:75:ca:2b:a4:
7e:fe:c0:0e:14:00:ae:3f:6f:c6:74:5d:ef:93:ad:98:a3:02:
a3:9d:65:c7:59:41:5f:34:f9:24:a3:99:a7:31:b9:e2:c5:e2:
c7:64:18:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:55:05 2025 by rpki-client