Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier: TxUm5j5ljivlpmK72dfrPFRcdPSxDGaxLyebzCtC4TE=
Subject key identifier: 12:51:7C:E9:B2:92:D5:E0:A1:32:D4:AA:80:08:EA:07:6E:62:92:06
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 0196A051BD1BF142A249A16CBE86D3B78F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number: 0933
Signing time: Mon 05 May 2025 12:00:33 +0000
Manifest this update: Mon 05 May 2025 12:00:33 +0000
Manifest next update: Tue 06 May 2025 12:00:33 +0000
Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=)
2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: tlFf0sZImNOym2jAZT+RjxcFabx6mm9X9hc40MBsfDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:bd:1b:f1:42:a2:49:a1:6c:be:86:d3:b7:8f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: May 5 12:00:33 2025 GMT
Not After : May 6 12:00:33 2025 GMT
Subject: CN=12517ce9b292d5e0a132d4aa8008ea076e629206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6e:a8:f7:20:15:d5:b5:a0:f2:7d:48:5b:91:
cb:3a:3b:6c:cd:84:ba:1f:54:71:93:84:9b:b0:0b:
a0:ab:78:dc:70:81:24:a7:75:dc:5e:3c:bb:53:cb:
6a:f1:ca:37:c4:b9:0b:0b:f1:f3:f8:d7:4e:b2:b2:
6e:44:14:ed:bf:ad:65:3f:38:6e:7c:5b:a7:e2:cc:
40:15:20:bc:eb:99:3a:f6:8d:69:0b:2b:62:59:c2:
5a:80:28:15:27:34:1b:d3:b0:c0:2d:07:25:f8:82:
84:0a:74:df:e1:a2:a9:3b:1a:92:9e:8f:96:0d:0d:
39:0f:2e:cb:f8:7d:87:aa:f2:28:98:b9:9c:f2:3d:
26:0c:9c:fd:05:ab:c6:f4:a9:48:74:4d:4c:e8:78:
11:fe:c9:36:d4:b8:e7:3f:d3:42:16:36:3e:cf:62:
89:0e:72:e5:f5:3c:47:8d:e3:23:1b:40:27:4f:73:
66:1c:99:a9:18:77:53:0e:b2:9c:89:1d:ef:85:77:
f2:b4:01:40:dc:74:cb:ec:59:12:75:81:ab:53:51:
a5:6a:7b:c9:dc:6b:2f:92:ea:6e:63:b9:85:8c:5f:
ef:46:89:7a:a4:d3:ab:f8:ea:70:09:16:fb:ab:ae:
a2:3f:4b:6e:78:fa:8d:c1:6c:6b:c5:a8:ee:03:48:
dc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:51:7C:E9:B2:92:D5:E0:A1:32:D4:AA:80:08:EA:07:6E:62:92:06
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a1:82:31:c7:32:b7:f5:72:8e:83:d1:c5:1f:82:bc:e1:e5:
a3:b3:0a:9a:16:03:11:f1:42:28:65:fb:dc:70:c2:f2:0b:b7:
56:35:57:44:8d:56:09:f6:e0:5d:af:dd:1c:27:5e:2b:79:b6:
e6:e9:57:dd:50:ff:4d:4a:a6:37:8c:bd:41:3a:32:2f:e8:4d:
e8:27:4f:50:0a:06:14:05:d5:42:de:d0:a2:a4:e0:3a:3e:ee:
ab:28:13:11:08:12:6d:22:75:fb:1f:82:f0:2b:6b:ae:38:2b:
8b:2b:26:25:bc:3a:f8:2d:67:d4:71:a1:e3:32:a3:8f:28:6c:
98:ff:56:4a:01:f2:68:21:2a:ae:81:47:3b:ac:96:61:65:7b:
f1:3e:68:bd:8d:d7:9e:62:2d:40:3b:21:fc:04:96:5a:a2:d7:
de:27:8a:cc:ce:94:e5:40:da:ce:8b:15:d6:cc:ae:46:32:81:
37:df:30:77:ee:4e:c9:9a:dc:b0:24:c5:ce:7c:71:7d:d7:20:
14:74:83:bb:1c:0c:bc:48:e6:4a:68:b9:8e:aa:e5:a9:97:38:
16:75:9d:5a:c6:66:8c:33:a1:21:6a:7b:05:e9:fc:1f:6e:c0:
43:de:05:c0:d0:08:84:ae:25:4e:9b:f4:de:01:30:b6:4d:62:
73:5d:96:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:19:24 2025 by rpki-client