Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: 5LGCAJxsAOoSEUj9WLOs1SKWJCpiEeRhZvvpBQlabT4=
Subject key identifier: 6E:58:7F:72:01:40:5D:B3:EB:CF:97:CD:E0:C0:02:8F:85:FC:66:9D
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 0196B7EC7BA34906756472B5B5203DC93BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0A2E
Signing time: Sat 10 May 2025 02:00:50 +0000
Manifest this update: Sat 10 May 2025 02:00:50 +0000
Manifest next update: Sun 11 May 2025 02:00:50 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: 8Rf6QwFZHIj/a21XEDnDW1dNAfw1Ig7A2vOfk+9yCC4=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:7b:a3:49:06:75:64:72:b5:b5:20:3d:c9:3b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: May 10 02:00:50 2025 GMT
Not After : May 11 02:00:50 2025 GMT
Subject: CN=6e587f7201405db3ebcf97cde0c0028f85fc669d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:3f:df:b4:65:f0:52:5c:b6:2d:12:f7:b2:
03:4f:65:72:65:02:41:a2:2a:ae:cf:5f:1c:4b:f3:
5e:11:b8:a1:2f:60:ab:0b:4d:60:78:bc:24:50:a0:
1f:ba:d4:73:95:f4:a7:77:45:d3:a3:88:4c:6c:c6:
d6:75:d7:84:be:0d:cb:f5:30:b8:63:f9:34:fc:e8:
c2:14:6c:59:bf:76:94:3c:df:77:32:99:48:f5:8d:
a3:cb:77:ab:55:b3:a9:00:17:8f:b9:77:82:45:b2:
26:03:34:09:79:b9:1f:1f:d4:41:57:8a:9d:04:51:
04:a8:4a:ff:a6:6c:83:9a:4c:8b:c0:9e:aa:5a:26:
72:44:57:75:81:e4:41:e2:b4:f3:dc:6b:b0:53:05:
1a:f8:44:66:0c:03:3c:31:23:e5:86:fb:aa:d6:5f:
0e:3e:3c:39:66:d9:aa:de:51:da:e5:25:53:a3:7d:
9e:af:2e:ef:46:ad:6a:51:4f:10:ec:0f:ed:44:09:
e0:a3:aa:f0:10:96:08:36:b8:34:40:d6:be:4e:68:
6b:97:9c:6c:94:ed:72:44:2d:20:9a:4d:9e:f7:e5:
a5:3a:5e:5e:1e:d6:ff:eb:7e:67:eb:b3:28:fc:f8:
1f:dd:5f:0e:3a:4c:d6:d4:47:55:ae:00:df:25:8e:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:58:7F:72:01:40:5D:B3:EB:CF:97:CD:E0:C0:02:8F:85:FC:66:9D
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:61:c8:ad:06:b1:7b:c7:d7:0a:1e:1d:9a:0d:27:1b:b9:b0:
ae:9b:ef:f9:c4:8e:68:72:88:73:59:08:be:e8:3a:c1:4f:25:
3a:df:7b:25:c1:8d:a0:f6:61:f8:f3:04:6f:b4:01:20:03:d9:
3f:0c:2a:f4:a5:e1:3c:c9:ce:8f:e0:b8:ad:bd:88:89:da:a0:
a1:0b:28:1f:52:ab:00:63:ee:aa:b8:01:c4:cf:be:9b:46:38:
ae:8e:6a:ae:77:b5:ae:6d:c2:b6:91:cf:b8:90:30:83:dc:e9:
e7:1b:ff:1d:d4:ed:cf:16:cc:69:24:be:63:4c:9a:9b:69:04:
aa:79:c1:82:72:ca:8b:75:c9:10:63:12:5d:46:09:9c:1d:73:
d9:d0:d8:36:08:0b:24:c0:fd:7d:f3:1e:3f:ff:fe:8a:02:47:
73:48:bf:70:a3:4e:61:fb:0c:3c:a7:ff:40:16:a4:0f:d9:d9:
af:44:fb:d9:ad:11:82:5a:0a:99:28:34:6c:d9:95:6f:ba:22:
5e:68:71:06:6e:84:30:7b:af:9b:d1:35:fc:15:46:6f:ad:ee:
2a:ba:99:3f:d6:4d:d4:4d:76:a0:77:a7:56:cf:16:53:0f:f6:
ca:5d:47:b0:51:12:66:c4:60:4c:8e:ae:20:ec:d5:b7:00:d1:
5a:ca:fb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:25:41 2025 by rpki-client