Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: liQFfIrsscnTsivyk6Hbbj4LLhwv4TQeqstrk131iMw=
Subject key identifier: DC:1F:98:BD:D0:25:F1:75:D3:22:69:B7:AD:5D:33:61:FC:50:83:97
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 0196C0EF125038E5DA95614230D04941EC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 10E3
Signing time: Sun 11 May 2025 20:00:15 +0000
Manifest this update: Sun 11 May 2025 20:00:15 +0000
Manifest next update: Mon 12 May 2025 20:00:15 +0000
Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=)
2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=)
3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: 3xggFBlvuPWzN9Lsty9xEwBxmHYAHk/5xjDfiKHNAIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:12:50:38:e5:da:95:61:42:30:d0:49:41:ec:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: May 11 20:00:15 2025 GMT
Not After : May 12 20:00:15 2025 GMT
Subject: CN=dc1f98bdd025f175d32269b7ad5d3361fc508397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:b5:7d:01:7b:a6:f7:a8:c5:9d:12:b1:7f:
c2:df:d2:6d:b5:c8:39:c7:ec:e2:b9:be:c9:2e:a9:
0d:0a:64:da:2b:c0:0a:e5:cb:df:55:bb:6f:10:a2:
f4:9b:85:ff:10:61:6c:2f:b0:03:91:41:71:b9:4a:
d8:de:cd:9d:4f:61:50:1e:99:03:07:96:d7:10:e7:
2a:0e:08:46:b1:18:02:bf:24:9d:26:e1:81:38:d4:
e0:4a:b2:d3:14:d3:71:6c:da:d8:f6:aa:73:5f:01:
50:f1:8d:a9:38:e0:54:95:e0:c0:bc:c8:3f:a1:7b:
9c:23:47:10:6a:c9:a1:0f:60:4b:b4:04:a8:29:51:
80:e4:49:41:17:48:cb:9b:14:2d:45:59:f3:ba:94:
b9:7b:2a:0b:82:f9:da:9e:a5:ac:d3:6b:da:ee:09:
3b:89:97:79:cc:3b:bb:0b:9d:50:12:9f:42:0b:b6:
29:95:8b:03:87:ca:b3:c7:fb:38:ad:dc:77:25:85:
85:e4:dd:fc:f3:f2:d7:e8:ec:9a:18:ce:83:42:71:
a0:da:13:73:db:6d:6d:b2:4a:86:35:fb:22:28:10:
fa:c4:ae:1a:b0:02:f5:45:ff:52:8e:13:59:38:0c:
b6:0c:81:de:7a:fc:b4:fe:88:44:d0:18:86:65:cb:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1F:98:BD:D0:25:F1:75:D3:22:69:B7:AD:5D:33:61:FC:50:83:97
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:63:3f:79:80:c2:d6:27:8b:ee:70:a1:fd:ba:f2:9a:35:c4:
77:d4:14:68:a2:67:67:4c:29:f1:e1:23:9b:0f:20:4e:d6:61:
b3:d1:40:aa:3f:63:09:2c:a7:ca:20:e3:90:44:72:f3:83:a5:
af:38:00:6e:80:6f:0a:d5:d0:67:e9:b7:b0:c2:70:47:9d:7b:
77:83:e7:b9:0c:5d:5b:be:e4:5b:07:e0:0f:79:77:2f:73:ce:
d1:05:32:7d:59:b3:a7:6e:c2:1b:c9:a1:76:69:47:19:85:a6:
88:2e:30:f5:7e:0c:4b:40:3b:f6:b9:18:b0:d3:f5:d2:68:ee:
fd:0e:c0:07:c7:f3:97:03:24:10:27:c7:7b:ed:9e:f7:d7:ef:
06:46:3b:bb:6e:5c:ac:b2:7a:bf:64:f0:b1:69:8f:69:4e:02:
ec:27:7a:6d:2a:0a:1e:27:52:ee:22:78:51:76:44:16:89:a0:
d7:da:ec:e8:f0:7f:40:d2:72:8b:28:8a:39:13:be:7e:97:10:
e8:64:69:18:cd:c4:0b:da:8e:9b:b4:9d:07:12:e8:1e:ae:12:
9e:d3:74:6b:cf:60:dd:cc:ad:3e:b6:f0:86:54:5d:97:af:56:
ea:8a:ee:c2:52:18:d9:58:b4:09:58:c5:0a:fe:78:cd:47:ad:
13:9b:86:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:03:39 2025 by rpki-client