Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: 2PE0DQEb+IReqW0ln8xFEnNjGaZMOqvw1SttCWDzi6Q=
Subject key identifier: 73:EB:76:ED:57:0D:4C:5E:07:CD:BB:00:89:11:1B:2C:08:9C:DF:97
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 01969FE4113CF9334BCAF3D5AB25A42A81A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 114B
Signing time: Mon 05 May 2025 10:00:46 +0000
Manifest this update: Mon 05 May 2025 10:00:46 +0000
Manifest next update: Tue 06 May 2025 10:00:46 +0000
Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: lFL4Qi6jsz5Uy7H2sg6M32/oPf3lDjWMovTgwdpNHhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:11:3c:f9:33:4b:ca:f3:d5:ab:25:a4:2a:81:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: May 5 10:00:46 2025 GMT
Not After : May 6 10:00:46 2025 GMT
Subject: CN=73eb76ed570d4c5e07cdbb0089111b2c089cdf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:18:5f:8a:01:58:9f:9d:ea:9a:ca:40:5b:ad:
18:79:33:94:b8:ab:ed:4d:e8:95:1d:19:95:66:2c:
61:8f:e8:68:ec:be:b8:43:1b:ba:29:16:ce:26:16:
d4:2a:dc:f5:b8:32:9b:5d:55:73:a0:b3:0a:40:fb:
e9:94:74:67:c8:ed:be:83:0d:2f:da:ea:e2:02:c4:
50:d0:2c:1a:71:5e:1f:4d:50:78:05:0e:61:f2:cd:
94:a2:8b:b6:94:fe:7d:08:ce:f9:01:f9:56:98:42:
b5:9c:c0:24:ed:b9:03:1c:01:40:ca:77:28:a6:29:
0f:b7:1f:8d:d6:b7:4a:c6:19:24:3c:a5:1d:4c:95:
f5:64:b6:5f:5a:7c:7f:74:80:7a:0a:ee:eb:2f:55:
cb:26:fd:7c:4a:8b:6c:a6:9f:28:6f:c0:70:4d:9a:
a3:45:47:d1:c2:95:10:97:24:19:97:7d:69:f1:30:
62:00:74:9c:4e:6b:7d:e9:8f:36:25:f5:38:0b:94:
e7:bf:08:1f:ac:ca:d5:1f:b3:f8:a8:8e:66:71:fb:
f4:b6:14:73:cc:2e:18:b9:1a:ac:29:4c:38:52:08:
8a:c2:54:e0:e3:b4:9f:07:eb:82:65:bc:e8:ed:ee:
6d:a1:72:61:e7:8e:69:2f:6a:27:0f:8a:da:5c:8b:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EB:76:ED:57:0D:4C:5E:07:CD:BB:00:89:11:1B:2C:08:9C:DF:97
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1f:46:c7:db:80:bf:b1:7b:5a:13:3c:d1:0a:2c:ea:49:9c:
b3:3b:d6:90:64:fb:84:89:58:ca:eb:48:4b:99:75:e6:49:0a:
c3:a7:d7:4a:ba:e9:ad:58:a5:85:ad:fb:c1:17:01:55:3a:4f:
5a:24:a8:d7:9f:39:8e:5a:f8:07:db:ba:ec:52:85:da:c9:e9:
f9:b6:17:9c:3c:1c:d3:83:6e:37:ec:5b:74:56:55:d1:c1:a1:
d5:77:e5:8e:55:f4:50:5f:ff:b2:24:09:79:c2:a6:ad:9e:8d:
0a:d9:56:81:e4:16:bd:0d:24:fa:11:f8:4c:c5:b9:8f:ae:78:
59:38:2d:3d:d0:76:e3:0e:77:94:e8:18:30:11:be:b7:ec:98:
09:1e:71:50:3a:46:fb:45:35:16:8b:b8:c0:ef:59:fd:cd:7e:
33:f0:5c:59:14:22:3f:42:dc:19:09:f6:8e:a2:ab:72:21:90:
d5:89:e2:a7:9b:1e:de:c1:9c:9a:1d:dd:44:1d:17:a2:d6:ca:
ab:c8:29:7e:fa:d1:85:ea:a3:a7:86:00:ec:9f:39:5f:6c:34:
46:44:c5:3e:f1:db:ca:1e:83:5d:3a:55:0d:13:0f:bc:f2:c1:
ae:3a:a7:38:0d:de:56:b7:4d:ee:b7:10:27:45:b6:ad:fc:4a:
d0:db:57:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:58:57 2025 by rpki-client