Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: H4b73qOAQUJ6G1h8TDcYtqyR7JxlfyDOBnzWlj45T5k=
Subject key identifier: CE:EB:DF:27:4E:4B:17:C4:6B:EC:82:02:24:01:1D:38:FC:2B:DC:36
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 01969D1A21DC036DA9DD8C3D7AC530DA70DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 0FF1
Signing time: Sun 04 May 2025 21:00:57 +0000
Manifest this update: Sun 04 May 2025 21:00:57 +0000
Manifest next update: Mon 05 May 2025 21:00:57 +0000
Files and hashes: 1: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=)
2: ds8x3qHhuROEI3eYeW-J-KnoVOY.roa (hash: sZSMC1BrQoLmX+rojH+SOE/CV/DFjkpNZIlB8RClTc0=)
3: jQInECNXc0p8Lpjj-s1SoXORrsY.roa (hash: QgcQD1WSSYMYOa1FRqEex60YkyPfDqbnNuvvBLNxxGQ=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: sKhJcBosskzUDN1c4N/YavXqm6jJiVH6kB1hhDufTL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:1a:21:dc:03:6d:a9:dd:8c:3d:7a:c5:30:da:70:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: May 4 21:00:57 2025 GMT
Not After : May 5 21:00:57 2025 GMT
Subject: CN=ceebdf274e4b17c46bec820224011d38fc2bdc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:63:80:e0:81:a2:1f:3d:b9:c9:01:da:80:
49:72:a9:85:52:44:c0:88:e7:e4:f3:40:c1:5e:d1:
39:6d:28:31:6c:07:05:0d:d3:19:a4:16:a8:6c:9c:
1d:b0:0d:e0:1b:1f:84:cc:18:21:0b:a5:e9:a1:7e:
40:29:c6:22:9c:b4:45:0b:c2:6d:47:de:d8:e2:c4:
95:c8:25:29:4f:e2:71:b8:71:64:e9:b7:73:16:69:
cf:3d:c8:14:55:67:b5:d6:e0:68:94:69:7a:a4:98:
fd:d6:6f:e2:a1:e3:1f:c7:bd:9c:a3:50:02:d4:e1:
c2:73:10:fc:45:6d:bf:2c:23:4c:c9:96:41:5d:f1:
43:2d:8e:d5:79:c9:09:2c:ed:a3:15:9a:52:ce:30:
cc:b7:1f:06:99:57:07:42:07:69:e1:3b:f9:50:3d:
0e:9c:5a:50:c2:d4:8d:50:9c:2c:00:db:cf:2f:f3:
a2:14:08:8b:81:c3:3b:19:e5:3f:cf:df:43:83:21:
e1:06:fe:b3:4f:bc:b8:3b:b3:5c:47:de:ca:30:33:
05:90:1c:a6:7c:f4:1f:22:32:12:aa:0f:60:7f:83:
cc:25:99:4d:e6:83:df:d7:31:54:56:37:f0:52:f9:
09:f9:3a:6b:4c:1e:46:ff:f2:8c:79:22:a5:3c:b8:
6f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EB:DF:27:4E:4B:17:C4:6B:EC:82:02:24:01:1D:38:FC:2B:DC:36
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:73:ce:40:07:cc:74:42:c0:e3:84:b4:94:86:a1:de:44:cb:
5f:e1:0b:63:4f:81:f0:6e:31:17:84:d2:77:eb:5a:d3:fc:4b:
00:61:a3:01:f1:15:a0:3a:c9:89:df:00:5f:c9:b0:07:fa:69:
c0:f3:c0:4b:14:ce:da:3d:62:b9:5f:d8:ac:5b:75:12:4b:09:
05:5f:b7:dd:be:eb:4f:6c:f3:db:17:41:8d:ac:47:ac:5a:67:
a1:4f:ec:ae:a8:92:9d:a7:13:85:45:59:4b:f5:4a:13:96:17:
10:e2:98:9d:f7:b2:6b:a5:9e:71:f8:6a:66:64:ab:97:19:4a:
35:ba:96:72:6c:6a:04:60:e2:4f:5d:d2:96:5c:4d:72:80:b3:
e8:a3:82:8d:16:f6:71:c6:1e:70:b8:d2:9f:64:ea:16:26:98:
b3:8a:ef:28:c9:f6:e9:57:d1:a9:0c:c9:80:03:f2:14:d0:c4:
fb:e8:9f:f4:2a:32:a5:4b:0d:af:77:d4:2c:a5:d2:89:48:31:
da:80:cf:33:9a:ee:b4:44:2f:bb:b0:47:35:e2:85:60:91:43:
0e:e1:b7:76:41:46:8a:30:d1:c5:20:bb:1a:0d:e0:d4:09:27:
f3:13:44:9c:a1:23:33:47:e2:e5:26:45:54:7b:cc:64:3e:84:
f9:bb:a7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:04:10 2025 by rpki-client