Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier: xW21AtvXRrJsOVfuxTVz+WPyGagmHRgqKSpot5weInk=
Subject key identifier: 31:78:27:DB:88:6E:71:A5:F4:D6:83:66:FA:BE:47:C8:1B:54:8E:CB
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 0196CA6099A937F86FA4201CF50E60EE8573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number: 01E6
Signing time: Tue 13 May 2025 16:00:50 +0000
Manifest this update: Tue 13 May 2025 16:00:50 +0000
Manifest next update: Wed 14 May 2025 16:00:50 +0000
Files and hashes: 1: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (hash: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=)
2: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (hash: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=)
3: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: fQxR92dzHkBHXSk1zJO+tncsb4aRIbM4fdD2BUFyg28=)
4: l0kAn8ApI2SNAoJbZCIEyIXuAX4.roa (hash: B0SI0CCL7BAZvHBp4fUMaxE46b5MHfw4w3OsX4XuXk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:99:a9:37:f8:6f:a4:20:1c:f5:0e:60:ee:85:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: May 13 16:00:50 2025 GMT
Not After : May 14 16:00:50 2025 GMT
Subject: CN=317827db886e71a5f4d68366fabe47c81b548ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c9:f4:c4:28:bd:1a:c0:cd:01:66:a0:f0:b3:
2d:f2:a4:65:01:11:65:dd:62:c7:fa:10:c8:61:bb:
0b:1d:32:03:e5:8a:36:f5:0e:a4:22:02:ce:c0:5a:
7b:31:b2:ed:3f:cb:fc:f4:a4:67:61:f3:d2:56:0e:
f1:a8:4c:7e:90:70:f3:8b:e9:3f:94:b6:41:96:88:
e2:fc:3e:77:f3:68:89:c9:0c:17:d0:5c:32:37:80:
59:8a:13:e7:92:59:69:0a:71:22:ea:d2:0b:4e:f1:
ce:c3:d0:71:a5:19:6b:c7:18:d8:b7:8b:2f:c9:14:
c3:6e:42:59:12:7c:81:a1:7c:14:1b:4f:6f:5e:48:
55:91:80:d0:49:6b:9c:cb:5c:0d:22:eb:8b:06:38:
9b:15:53:82:af:6f:bd:6d:91:2b:2b:8a:78:19:5c:
b8:51:5d:33:b5:d1:3c:03:e7:b2:48:72:93:2b:e3:
5c:2e:e7:ef:29:ec:06:1d:da:c3:5d:f9:ba:a0:60:
29:76:05:1e:74:b0:b7:0a:33:a7:10:a5:99:30:b1:
6a:4c:2a:f0:50:6e:98:4f:c7:7c:5e:44:bf:0e:30:
06:05:fb:64:f0:f8:e8:3f:3d:9d:e4:39:72:e1:a3:
06:73:03:d4:20:83:13:b8:00:50:85:a5:c5:eb:c1:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:78:27:DB:88:6E:71:A5:F4:D6:83:66:FA:BE:47:C8:1B:54:8E:CB
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bb:01:c0:64:5f:2f:12:eb:f9:c3:bf:a4:1f:06:72:7b:ec:
7a:2f:1b:32:a8:6b:67:0d:51:6a:ad:f4:6b:8f:5e:aa:cd:19:
5b:8e:ee:9f:7e:66:09:36:06:11:54:2f:58:76:b7:7f:62:4d:
01:0e:61:5d:2d:98:05:ed:c0:b1:1f:e0:a0:4f:76:3c:58:1b:
5d:4a:b2:89:17:c5:c9:00:77:3f:69:8f:24:b0:53:40:aa:fe:
3b:fe:cf:f9:b0:f3:e1:9f:a9:8f:d9:d8:b0:20:cc:23:fd:4f:
e4:58:0b:25:49:a9:e0:a1:27:90:2c:36:db:af:d2:da:ab:b2:
45:75:76:41:58:7f:0f:1c:1f:3c:ff:f0:87:7d:e5:46:4e:15:
9a:6c:89:5b:1b:4d:7f:9f:f3:36:44:3d:57:f4:81:34:ad:39:
14:10:d2:76:6b:46:ce:61:c1:ff:7e:8c:df:17:69:f5:c5:1f:
f4:3e:6a:b6:df:dc:3f:2f:42:36:ca:8c:fe:f3:76:97:1a:1f:
79:7f:4f:51:bd:b2:cf:b7:ff:3e:2e:25:39:c6:8c:d2:ae:54:
73:4d:6f:70:9e:2d:3a:e8:bd:fb:89:a2:33:b5:55:8a:55:5b:
59:e4:a6:34:0d:d5:25:c1:b9:b6:8f:e2:dc:bf:0f:60:f4:3c:
df:30:40:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:35:46 2025 by rpki-client