Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: sGPsrUGLandJ6t+tuZVDtAHPOWiTElrDc71laSJq16k=
Subject key identifier: 26:5B:53:F4:DB:7C:38:95:0C:A0:A4:E0:58:90:0E:3B:DB:C3:9F:97
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 0196C6BAEA4DB625E1F2378FEF3A64DB211D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 0E48
Signing time: Mon 12 May 2025 23:01:00 +0000
Manifest this update: Mon 12 May 2025 23:01:00 +0000
Manifest next update: Tue 13 May 2025 23:01:00 +0000
Files and hashes: 1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=)
2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: 2u5u5tHqNpCP+yYMa0RbnpXmVuRqCJw5sJ/MS7Nbcu0=)
3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:ba:ea:4d:b6:25:e1:f2:37:8f:ef:3a:64:db:21:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: May 12 23:01:00 2025 GMT
Not After : May 13 23:01:00 2025 GMT
Subject: CN=265b53f4db7c38950ca0a4e058900e3bdbc39f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:72:75:36:81:d2:d6:cf:be:cd:fd:1a:45:
4d:96:b7:77:27:be:c1:49:b6:3b:07:85:81:13:2c:
49:ce:57:17:4e:52:61:8b:2c:b1:c1:1e:df:04:0d:
5c:2b:d8:93:d7:cf:57:87:b4:67:42:80:2b:65:e9:
d9:5e:63:96:21:69:a0:be:12:d5:52:1a:1b:f9:e3:
d7:3e:f3:f2:68:be:d3:1f:dc:d2:6a:ca:da:2a:c1:
ad:ea:1b:96:c2:f6:dd:13:cd:dc:92:19:f0:56:d1:
ef:09:0c:01:3c:b3:ae:1c:83:1f:a3:a4:b5:6b:82:
18:e7:8e:fd:76:bc:78:c3:f6:2c:cc:82:3c:15:f9:
7a:0e:33:59:23:49:c5:dd:92:80:a9:54:a9:ad:6d:
60:fd:b9:cb:17:c2:79:c5:1e:b5:23:1b:14:ea:0e:
ae:e1:7f:22:8c:1a:81:ab:47:97:16:4b:fe:c4:f5:
bb:5f:da:13:47:19:dd:a5:cd:b1:f0:44:da:2e:03:
ec:e2:b6:42:b0:59:60:4a:24:e6:17:7b:ec:05:c8:
7a:84:19:29:a7:21:81:76:0a:a4:b1:09:25:20:96:
ef:eb:ae:f6:d2:d4:15:a5:ae:b2:1a:a3:a2:ad:9c:
0d:5a:5d:04:6e:8c:ac:17:98:21:f7:a0:7d:81:92:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5B:53:F4:DB:7C:38:95:0C:A0:A4:E0:58:90:0E:3B:DB:C3:9F:97
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bf:11:36:49:38:dd:51:c1:11:2f:56:12:15:d4:e7:ac:77:
7e:c0:b2:de:c3:d8:e2:29:4f:52:46:3a:21:bf:d2:db:65:4f:
99:81:e6:06:1c:5e:7b:da:db:94:f5:e4:42:05:55:8a:b5:cd:
17:08:af:d5:f9:de:38:92:43:35:19:b1:84:7e:bc:c1:f7:75:
0a:bb:6e:3d:01:7e:33:ca:2b:14:8d:2d:6c:b8:02:df:99:55:
68:33:e7:f3:6b:89:a3:f6:6f:71:97:f9:80:14:82:d2:21:e1:
05:e1:9c:71:35:3b:14:77:d1:97:52:5b:11:f7:67:c2:5e:0d:
f4:49:13:ef:b7:8a:16:72:84:75:ea:08:d2:3d:06:03:04:b5:
b9:d5:40:1a:6d:22:41:96:39:0c:34:98:42:a8:c1:31:66:4b:
2e:f0:69:97:d6:74:34:3b:16:dd:2d:bd:02:68:a9:7e:83:da:
ed:f5:47:70:a8:31:11:e7:92:76:13:dc:37:a5:d3:26:62:26:
a7:d4:c9:f6:df:b9:42:e4:c9:45:f1:e4:50:f7:1b:73:18:5c:
55:40:5b:b0:20:f8:c3:6e:3a:e4:56:82:bf:ea:9e:45:f6:36:
6c:c7:56:e1:1e:1c:5c:93:cc:e3:6a:4f:6d:4e:7e:c3:65:d4:
1d:7c:a1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:46:46 2025 by rpki-client