Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: zFrFUVtzkwK36SkiHocIfaULZUhHP0Waburiv8t6CPk=
Subject key identifier: F1:6C:63:61:53:39:E8:C9:4C:A6:2E:39:9A:D0:95:B8:03:AD:D8:1C
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 0196B823419A11A585FBF33EA6A514723537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 03AE
Signing time: Sat 10 May 2025 03:00:40 +0000
Manifest this update: Sat 10 May 2025 03:00:40 +0000
Manifest next update: Sun 11 May 2025 03:00:40 +0000
Files and hashes: 1: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: AreptEUPjB268Ymi8rnWv3+Y5F/ZMIib8NuzI4vThMQ=)
2: s8IxW5tuKoaeGci5PMMsvkBpqVA.roa (hash: r/ncpxBVtrl7LSWT4Ir7OLnEXZq1sFDkQ+rRRvqTryo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:41:9a:11:a5:85:fb:f3:3e:a6:a5:14:72:35:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: May 10 03:00:40 2025 GMT
Not After : May 11 03:00:40 2025 GMT
Subject: CN=f16c63615339e8c94ca62e399ad095b803add81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:70:06:31:f1:fa:44:84:25:04:8d:52:94:
74:d9:9f:5f:cb:76:db:a6:8d:23:96:6a:ec:a3:69:
d5:85:d9:55:73:15:5a:5f:af:ec:91:d7:95:7b:c6:
c4:35:dc:0b:a8:14:b3:20:59:c6:90:b9:07:2a:37:
ff:63:68:23:2c:fa:ff:65:1e:ad:18:4b:5f:af:10:
58:66:b8:70:66:60:d8:4c:dc:2f:13:02:86:b4:fb:
ec:e1:cd:3a:8b:3e:97:af:a9:3c:07:89:a1:96:f2:
c2:27:09:37:9c:b5:e5:cb:30:f0:1f:13:1a:f4:57:
76:73:6a:11:31:2c:1a:a9:d4:9a:27:ea:fe:6e:63:
9a:32:0e:e9:c4:5e:96:51:27:f3:d7:fa:5d:8a:19:
75:16:75:c4:fd:1e:a3:e6:62:ef:30:46:3b:39:7e:
4f:e0:10:19:95:a4:a6:e4:a2:21:14:db:86:a1:d7:
0e:a7:63:14:bc:14:5f:15:26:4d:b5:75:b1:6d:02:
bd:6b:8e:82:d8:e6:49:50:b3:18:54:89:d9:f8:6d:
40:c0:c8:99:da:ad:61:f3:97:0f:24:15:04:33:68:
52:61:dc:d8:c2:e5:78:62:02:b1:dd:10:29:88:b2:
07:fb:63:cc:cd:d2:bd:ab:e2:66:2e:f0:35:ba:78:
bf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6C:63:61:53:39:E8:C9:4C:A6:2E:39:9A:D0:95:B8:03:AD:D8:1C
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f3:79:73:79:4b:89:0e:0d:5b:29:15:27:20:55:73:38:3e:
f2:32:b5:70:86:1b:2c:4b:4b:f8:36:a9:db:bc:d9:ca:02:b7:
36:68:48:5b:2a:52:03:bf:d3:69:95:52:76:68:2c:76:39:e9:
04:e7:e8:2a:2a:e9:b9:83:0b:63:24:42:43:ae:c7:6b:93:43:
5d:f7:dc:bf:f8:4e:a5:c8:55:7f:d5:e3:68:aa:e0:99:aa:a4:
c8:5a:2e:cf:89:b1:98:51:c3:a2:ca:8d:d0:31:66:7e:7e:35:
b1:ca:7a:de:82:56:c6:76:a2:52:fa:c7:3c:01:db:a6:ba:76:
15:0e:91:49:a7:ea:12:4f:3a:6a:68:db:02:76:43:ae:d6:f5:
57:cb:86:80:4b:d8:19:43:72:b1:bd:3c:12:27:77:da:a0:2f:
4b:cf:8a:2a:30:aa:bc:d0:47:f2:76:ac:7f:a1:76:3e:e4:0f:
54:81:df:32:b3:7e:08:c5:1c:47:a0:e2:12:f2:b0:43:d9:14:
bd:1e:01:ff:68:3b:81:70:e4:22:0c:0a:c4:c3:1d:ef:78:ee:
a5:cb:14:12:33:a4:68:03:2c:e4:58:28:6d:ad:58:5b:48:54:
95:23:22:22:43:a2:28:33:24:6e:ce:0b:1a:54:30:40:56:c1:
97:66:ad:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:23:34 2025 by rpki-client