Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
File: jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft (raw, json)
Hash identifier: 4a8RUsz64KDhhFB8DlZJzDGaGkLzX0w+F4BIDXoA2BI=
Subject key identifier: 42:98:F2:EA:A1:A1:F5:5A:CD:6C:CB:C5:C3:DF:F9:06:1D:C0:13:BD
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial: 0196BA48C39E6B3AC891CB7A755AE0F3418E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 13:00:52 +0000
Manifest this update: Sat 10 May 2025 13:00:52 +0000
Manifest next update: Sun 11 May 2025 13:00:52 +0000
Files and hashes: 1: 1tlTabk8kx23vgEK55RHhqMUGAo.roa (hash: ZiPvgitC32adDyXcop28a7N8FTyvMG9u4rZhMBMC7pc=)
2: GJFvvd_DhSTge6litoTaxiewidk.roa (hash: RLpkP+iqljJeiJ6QCXluN39pRk9A6A/5JPgUBEpuWhk=)
3: HzBkiKhuiqff_TTVGmLjYBovMzQ.roa (hash: qKqhsRRVPhaKh0NQ1lXqtQkYrgEiWm0P2Q/f/i1BnBs=)
4: jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl (hash: zeGNtZOx0WgCet5vuF673vTSdNGubHePAfRMA4ay6d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:c3:9e:6b:3a:c8:91:cb:7a:75:5a:e0:f3:41:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Validity
Not Before: May 10 13:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=4298f2eaa1a1f55acd6ccbc5c3dff9061dc013bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:ac:d7:fc:ed:1c:0c:28:47:91:b1:a9:15:
5f:bb:ff:c3:5c:e7:02:74:72:ae:65:03:38:57:0f:
4b:a5:6f:96:dd:94:1c:a5:ab:28:de:fb:b6:af:60:
4d:69:1d:74:bc:99:55:c0:5c:d3:71:8d:be:7f:7a:
f7:21:fb:0d:76:07:9c:57:de:39:71:4a:77:e1:ef:
8c:40:97:c4:92:aa:47:c2:c3:85:8d:07:35:81:54:
ae:ba:ff:8f:e4:63:04:d6:8c:79:ba:28:f9:33:50:
4f:b9:b6:3d:a3:d9:4b:09:7d:31:10:44:1f:d8:7b:
dd:53:94:26:3f:ca:66:2f:f5:fb:19:2a:a2:ad:a4:
ca:9c:1e:5a:e0:5d:83:0e:40:f6:4c:12:f6:d9:fc:
39:6a:9d:19:e1:9f:bd:e1:b8:1b:3a:3a:41:b1:01:
4f:d1:f9:3d:3f:fb:65:1b:f5:a1:f9:8b:35:62:f9:
18:c2:df:64:3c:ad:d2:d4:21:26:a2:11:13:5a:ab:
85:63:66:7c:22:13:46:a5:8e:56:19:69:ba:4a:bb:
a3:09:14:3f:8b:b3:58:b5:f3:f5:b8:af:34:75:2d:
c0:c7:1d:83:42:d5:f8:a2:45:39:5c:c6:1e:e4:58:
90:c8:f1:3e:af:fe:ee:a6:b9:20:bb:37:28:9a:28:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:98:F2:EA:A1:A1:F5:5A:CD:6C:CB:C5:C3:DF:F9:06:1D:C0:13:BD
X509v3 Authority Key Identifier:
keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c6:af:12:1b:39:ad:09:a9:58:a3:c8:b5:0c:c0:5b:62:f7:
5e:c0:cd:15:2f:09:74:a1:50:92:03:b5:81:64:6d:0f:64:b3:
de:7b:50:77:d6:1b:b3:24:2e:9e:fe:ed:dc:99:30:3d:7a:ed:
32:69:c0:ee:f2:4b:94:b1:6a:28:18:57:ba:97:25:4d:d5:c7:
4c:1d:6e:6d:41:71:2c:ad:84:15:06:c2:05:35:7d:a5:dc:82:
95:65:8f:0f:31:06:5c:e9:89:98:b0:a8:ef:06:a8:b4:c6:e7:
19:c0:a0:c0:d9:cf:60:6a:a9:43:61:3e:22:bc:06:0d:ed:c4:
66:ab:3e:27:b6:04:99:b1:c4:0a:cc:62:81:a0:eb:61:9c:6d:
ae:a0:97:50:b1:fa:63:15:04:a9:bc:c0:a6:4d:86:47:86:39:
5b:f5:73:72:f2:0a:f7:fb:21:00:75:4f:73:0b:c8:41:94:66:
cd:cc:13:75:ac:f8:2d:1d:19:c7:71:47:a9:23:50:03:42:f4:
65:0e:5f:d3:d9:d5:bd:c4:2c:0c:cb:bc:e5:fd:df:af:34:93:
1d:50:8f:fe:95:37:a2:e0:f4:ef:83:63:bd:6d:79:17:69:da:
5f:b0:1f:a0:6b:52:62:46:be:f7:40:63:2e:61:0c:06:7b:c2:
dd:95:b5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:51:30 2025 by rpki-client