Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: QxvVMbvqi0sXOvyWxCDNY49d/HPoLxf2I6GDVIlompc=
Subject key identifier: 2C:B6:F2:5B:3F:A6:C5:5E:F1:74:B4:C4:53:05:98:E0:9F:BE:AA:37
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 0196C3F0D187D4895E77A068D983C5D5DB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 1540
Signing time: Mon 12 May 2025 10:01:01 +0000
Manifest this update: Mon 12 May 2025 10:01:01 +0000
Manifest next update: Tue 13 May 2025 10:01:01 +0000
Files and hashes: 1: JXdwz8Kh5s8D4fZUiI7MP0vHa-g.roa (hash: aGy7W4wvxfuA3DMrWGQip2XzAfgBaKwU1Q707mDCSqY=)
2: W1sV2SXycnhhhyOvaUwWx8t1ifs.roa (hash: HcxcuKRHaI2x0IIJ12wkt3W53ioexeV4UAL0OsdORr4=)
3: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: +mqJe063ltvoc7y5rpn2N7IQVnBYwxHFwLJgXF/x0A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:d1:87:d4:89:5e:77:a0:68:d9:83:c5:d5:db:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: May 12 10:01:01 2025 GMT
Not After : May 13 10:01:01 2025 GMT
Subject: CN=2cb6f25b3fa6c55ef174b4c4530598e09fbeaa37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:b4:04:ac:62:39:5f:20:22:4d:e6:7a:9a:
fd:2f:85:4b:1e:37:a2:1a:e4:4c:02:01:5a:c5:72:
6b:69:9f:61:9e:e9:eb:4d:47:7d:02:fd:19:0a:69:
05:51:dc:ac:9d:e5:c6:91:cd:9f:c7:58:6b:63:72:
68:02:65:ca:8e:16:bd:6e:f9:11:db:49:14:1e:3e:
52:8f:d1:41:79:da:b0:fe:db:b9:df:b5:dd:3d:2a:
d4:b3:33:e9:1e:8e:8c:34:b0:16:52:21:f6:b4:d5:
91:b7:24:7a:de:3c:6f:08:30:df:1a:e6:3a:40:f6:
9b:2b:cc:8d:55:e7:71:bd:a8:4e:7e:ee:f8:c2:92:
7b:b3:9b:de:98:c8:1f:bb:42:60:2b:fd:a8:42:03:
f0:69:5a:3e:1c:c9:87:08:88:65:dc:f5:f6:f5:e2:
19:02:d4:4e:18:5a:0b:0e:dd:e7:51:46:d2:bb:37:
1b:53:ef:1f:4c:85:dc:08:25:96:53:02:41:75:08:
fb:d4:bc:d4:d4:56:45:3f:b8:05:73:e6:a4:2b:52:
f1:36:e9:ae:5f:79:29:c7:48:11:c8:11:8c:4e:c0:
3e:4f:b5:e8:d1:99:da:7c:e7:f5:f6:39:dd:c1:42:
9b:c0:10:69:75:28:52:21:73:85:bf:bb:b7:fe:4e:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B6:F2:5B:3F:A6:C5:5E:F1:74:B4:C4:53:05:98:E0:9F:BE:AA:37
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:07:58:90:dc:34:01:ae:b0:ff:64:64:56:1e:c6:0c:8c:ff:
30:3d:7c:12:1c:d0:c9:c3:cd:42:1d:27:bc:9f:fe:5d:bb:57:
af:08:f8:1d:18:83:64:3b:57:03:30:00:6e:3f:17:b4:92:11:
70:a5:8a:78:37:1c:23:a1:6b:48:dd:d2:52:ce:5a:a9:89:a9:
a2:bc:63:15:af:2e:86:c9:4e:a8:14:59:91:d5:70:05:1d:af:
db:b6:97:a4:b6:52:95:b8:cf:11:8a:30:85:91:5a:72:e2:a7:
bc:e5:7c:54:f8:67:bd:9f:18:11:cb:86:a5:99:89:2c:2f:c0:
d7:43:b7:88:4a:69:78:75:dc:50:65:64:61:86:cf:cf:95:8f:
ea:fd:a0:32:9d:87:22:82:64:e2:63:93:76:39:5b:ef:2d:63:
ff:cd:b9:43:13:79:d8:61:8a:ac:77:33:be:ef:27:30:cc:6e:
50:b6:78:be:8b:2f:ab:47:ba:25:ab:a2:18:e7:84:24:d4:31:
57:a8:f7:e0:2c:4a:b1:3f:df:80:b0:ad:f2:d8:9e:e4:f5:08:
75:f6:56:36:8f:a4:ad:89:1f:e2:44:96:ab:be:bb:0f:55:9c:
cd:51:7c:9f:84:b0:8a:94:27:3c:f8:b4:b1:24:70:89:3f:91:
1c:6b:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:06:56 2025 by rpki-client