Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: 4Qf3oG/1lDrCAGxzOykWCGhBJdUeXRX6Ie2F4fHLXmQ=
Subject key identifier: 7E:C5:AB:6C:49:FF:94:3B:D0:D7:92:25:39:32:27:73:03:16:58:73
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 0196A578465A6E84C2939B6776E53DB806CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 0E60
Signing time: Tue 06 May 2025 12:00:45 +0000
Manifest this update: Tue 06 May 2025 12:00:45 +0000
Manifest next update: Wed 07 May 2025 12:00:45 +0000
Files and hashes: 1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=)
2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: pgry9KIJlaiKRVUojPqiG+4G/jKxbuSVSfmRzDetJOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:78:46:5a:6e:84:c2:93:9b:67:76:e5:3d:b8:06:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: May 6 12:00:45 2025 GMT
Not After : May 7 12:00:45 2025 GMT
Subject: CN=7ec5ab6c49ff943bd0d792253932277303165873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:85:7c:bc:30:1d:fc:e8:5a:f0:66:f2:20:
91:0d:49:52:67:76:96:e4:01:2b:7a:6a:cb:36:58:
d5:37:8d:75:c0:8a:18:2f:e5:ba:58:be:ec:81:6e:
9e:da:91:30:a2:ca:3d:39:6b:c8:1a:45:30:44:6d:
e5:f6:fb:f1:24:a6:7f:d1:cc:73:77:2f:43:3d:e3:
a3:32:d0:b0:60:75:a9:5f:3e:dc:ae:4f:32:a4:05:
5c:53:ce:6f:f2:53:be:c6:e7:82:8a:c1:30:eb:9d:
78:65:55:5f:fa:51:f6:af:e5:78:f1:3f:aa:23:dd:
ef:8a:f2:88:f1:f2:a7:7a:58:aa:df:bc:e7:12:1c:
0d:bb:e0:ef:d8:3d:80:ec:41:7a:12:10:52:cf:1a:
b0:3e:c0:b9:b0:9f:58:7a:b1:f7:0e:dd:fa:52:04:
ad:7c:e3:17:62:6e:d5:95:bf:ea:71:02:87:26:ab:
3e:9f:9c:dd:73:e3:76:43:fc:22:a9:bd:e8:54:8c:
fe:25:d4:1b:c8:ca:30:48:b6:58:c0:af:2b:dc:3e:
2b:7f:f0:6a:22:33:7b:b4:43:d2:0a:2f:e3:52:78:
a2:0f:dd:d8:ac:3e:cc:61:88:e3:d6:fe:cb:89:7c:
5c:c2:90:c6:bd:04:89:de:f4:b1:57:41:da:72:72:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C5:AB:6C:49:FF:94:3B:D0:D7:92:25:39:32:27:73:03:16:58:73
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b5:fb:8b:1b:12:40:95:1f:53:23:99:69:54:60:2f:11:d4:
67:e4:81:a0:45:1f:c4:de:1c:0c:5e:89:be:15:8b:c5:3e:61:
93:ec:05:10:c5:54:df:61:04:b1:fa:88:2c:8d:da:f0:47:45:
f4:18:07:9a:ac:c2:09:b4:f7:af:96:ba:94:8f:4e:9c:a6:c9:
9b:6d:c3:71:7b:de:d7:94:2e:15:b5:36:8c:cc:7a:b5:ca:3d:
aa:e3:c8:a5:29:f7:91:f0:32:a2:df:ad:73:5a:8d:e4:38:99:
a6:7a:c2:a1:d9:32:08:6a:d1:f4:a1:0e:1a:7c:19:76:3a:73:
20:1a:29:7e:91:f5:e7:15:3f:3a:a0:d2:ec:b6:30:c2:99:37:
0e:87:48:74:f7:03:ad:c3:59:79:e1:a0:22:0f:17:47:3a:29:
ef:76:59:5f:d4:79:f0:8e:7d:80:b1:cf:e6:09:d7:f7:61:aa:
bc:db:c2:3e:f9:35:7b:14:5c:93:6d:e4:46:d1:63:20:d7:56:
98:79:04:80:36:f0:0d:e3:d6:43:1d:dc:dd:56:1f:e8:a2:d4:
7e:91:8b:67:5f:73:39:21:99:dc:5a:d3:81:7e:b9:13:cb:ec:
95:dd:8f:e8:a3:31:77:6d:de:8b:a8:56:2e:7a:76:33:2b:7a:
a2:cc:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:10:48 2025 by rpki-client