Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
File: jOy2jIDW2NFkiSIw-dEfJVG-04o.mft (raw, json)
Hash identifier: CDkjlqghIVRUFpKXkREedQ/R+DO+iOZgIiA7oXzG7GM=
Subject key identifier: 12:9C:09:4C:F1:CB:37:DB:0D:FB:D8:C4:F7:53:60:6A:71:95:C5:CF
Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
Certificate issuer: /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Certificate serial: 0196C683DC8D16C86CA99721A4B7E387E05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
Manifest number: 0265
Signing time: Mon 12 May 2025 22:00:52 +0000
Manifest this update: Mon 12 May 2025 22:00:52 +0000
Manifest next update: Tue 13 May 2025 22:00:52 +0000
Files and hashes: 1: A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa (hash: YVpgdnu79jTGnOSIhM9WXwxc/TAyiy91T+UdGFojKfA=)
2: jOy2jIDW2NFkiSIw-dEfJVG-04o.crl (hash: gnCUrzTvcYWyXis+0MldPZx8eIPH6sn0WZXiSfdYw14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:dc:8d:16:c8:6c:a9:97:21:a4:b7:e3:87:e0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Validity
Not Before: May 12 22:00:52 2025 GMT
Not After : May 13 22:00:52 2025 GMT
Subject: CN=129c094cf1cb37db0dfbd8c4f753606a7195c5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cb:69:38:56:07:b1:1a:f5:bf:ac:62:85:33:
45:a6:38:98:d4:86:51:f4:07:0a:77:3a:1d:9a:73:
46:4b:b8:55:37:d5:6e:62:45:6a:b1:54:91:99:76:
97:7c:91:55:0a:90:8e:a5:28:7a:59:73:68:24:d6:
fe:ad:b4:b5:18:50:e4:3a:75:ba:f7:a8:42:60:bc:
f8:8e:49:6e:d1:90:b8:81:c2:25:9f:6f:fa:8a:8b:
5a:76:bf:22:8a:98:42:c7:39:6c:94:79:d7:c4:39:
26:b3:45:49:1d:aa:fa:e7:7d:4d:54:33:80:9a:72:
17:50:d1:4e:db:56:e8:04:08:a0:0b:63:7f:59:96:
27:e6:c4:01:31:6e:69:78:eb:b3:5a:d7:33:08:c9:
c7:ed:31:d2:ca:f7:91:45:a6:dc:72:6a:26:2a:a0:
6e:8c:07:53:29:61:4a:ad:41:bd:ba:3f:36:2c:b1:
a9:1f:8d:1e:1f:2e:f7:8d:1f:d6:40:bd:6a:c9:e9:
c5:33:3f:de:f4:0d:21:b8:51:2c:ef:71:29:41:c0:
93:a8:8a:d2:c1:f1:d9:55:b8:4f:32:a2:38:45:d1:
0c:be:3f:a1:99:b9:1f:1b:a5:f2:6e:6f:58:2a:c6:
d4:c4:75:34:e5:1e:c3:98:23:01:07:48:be:4d:7a:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:09:4C:F1:CB:37:DB:0D:FB:D8:C4:F7:53:60:6A:71:95:C5:CF
X509v3 Authority Key Identifier:
keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ad:8e:f5:7d:72:04:d4:cc:17:f9:e2:26:9c:c3:a5:8e:36:
91:11:d9:66:a9:10:f7:02:c2:88:c3:6b:1e:1f:47:7f:53:9c:
79:89:e2:77:74:6f:a8:a2:46:ce:20:c0:88:41:2f:ca:a6:58:
44:22:9a:26:90:1e:8b:5e:8d:74:f2:43:d4:56:cc:92:49:96:
d7:8a:67:a6:1b:80:fa:e6:3e:ec:1b:2b:1c:b4:41:d1:4a:ca:
30:8b:00:0e:b9:83:df:72:0c:11:5e:ab:ab:df:50:e0:a3:f8:
e3:79:d1:77:ed:13:68:09:45:8f:ca:37:49:6a:90:49:43:60:
80:49:e0:d1:71:83:a8:fe:8a:5c:33:8e:a1:58:57:34:54:37:
95:42:d1:5b:e0:e3:e4:47:ad:bf:85:1f:cc:a4:d3:8d:be:cf:
19:8f:15:39:2b:f3:74:b7:b6:cc:a2:b2:a1:89:5a:d3:e6:0e:
47:e9:82:51:5c:f1:3a:64:e0:f2:55:4e:51:80:dc:ad:ff:5c:
a9:06:f8:21:76:34:71:c4:71:4d:f2:bb:b9:83:bb:04:07:df:
11:5a:1f:42:38:ac:a1:a3:4f:06:6c:e7:b5:7d:65:52:d8:c8:
f5:8f:3b:17:86:af:ba:36:f5:97:fd:e5:58:28:b3:ec:d6:82:
4f:49:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:45:01 2025 by rpki-client