Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
File: rujl3-xoOuXxoOvg-5b6JWswR2I.mft (raw, json)
Hash identifier: t9mwlyPZw9XiA0ZR5frnyGiNfT7/fgrsaPMQEfNtTGw=
Subject key identifier: CA:FF:EB:CF:D0:EE:F7:34:D1:37:2D:36:2C:44:70:03:33:A7:C0:51
Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
Certificate issuer: /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Certificate serial: 0196C3B922F989826C50136EAE2149AB7AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
Manifest number: 0DF4
Signing time: Mon 12 May 2025 09:00:12 +0000
Manifest this update: Mon 12 May 2025 09:00:12 +0000
Manifest next update: Tue 13 May 2025 09:00:12 +0000
Files and hashes: 1: I1hQSc_aI8nnk6g1vpjyTdXYNJI.roa (hash: h2IeKZyMJz7T7nR3ubhVngPyKXqYp/CJM8eA4imhJCk=)
2: rujl3-xoOuXxoOvg-5b6JWswR2I.crl (hash: kvv3U34I/HaowQ/PIuTtCm3lERntRrOjMbfry5TqCTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:22:f9:89:82:6c:50:13:6e:ae:21:49:ab:7a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Validity
Not Before: May 12 09:00:12 2025 GMT
Not After : May 13 09:00:12 2025 GMT
Subject: CN=caffebcfd0eef734d1372d362c44700333a7c051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:5f:0e:26:9c:47:f8:4c:37:3d:b6:4d:4a:
6d:5e:45:b3:1b:8e:0c:c7:ca:63:be:4b:18:7c:8e:
72:5a:01:05:1f:1e:73:54:2f:4c:bb:67:f7:e7:dd:
dc:00:de:c6:42:63:21:bb:89:7b:d3:8b:4e:4e:bb:
3e:53:59:e0:d9:d8:a4:d7:2d:6e:79:52:b2:44:46:
ed:16:4b:14:22:ab:17:27:62:34:87:33:3c:b6:ff:
dd:1e:a0:06:f8:4a:27:83:69:61:52:91:18:38:9d:
07:24:c9:d1:48:50:40:67:53:f5:1a:f0:d5:7a:61:
ab:c5:c3:ef:af:eb:18:9e:2b:c6:d9:96:06:5f:1c:
5a:1e:4b:51:78:3c:69:20:4c:29:16:a4:ff:21:da:
9b:74:60:ec:78:1c:84:4f:57:db:9a:cf:a0:19:93:
10:2d:4b:16:fc:0a:7e:37:bf:78:c1:78:75:ea:da:
1a:9a:b0:38:1c:fc:a6:29:71:9d:ed:8b:c5:72:29:
01:ac:02:db:ff:e4:41:d6:b8:b5:42:4a:28:7c:31:
05:71:3b:f2:50:ae:d7:53:69:82:7f:59:ec:98:33:
91:32:03:74:67:28:0a:62:c6:8c:e0:53:1a:e3:96:
07:fe:0c:88:b6:a1:13:0e:32:6c:2e:5f:3d:f1:25:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FF:EB:CF:D0:EE:F7:34:D1:37:2D:36:2C:44:70:03:33:A7:C0:51
X509v3 Authority Key Identifier:
keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ea:d3:f4:26:7c:3d:a6:33:61:a2:17:f3:8d:6f:94:13:c0:
01:1f:8f:cb:4c:98:d0:09:8e:4e:66:4f:84:92:4c:18:72:f2:
95:36:d9:ac:5f:51:2b:0f:d7:8c:01:88:ac:e4:28:1d:67:1a:
e7:e9:0d:33:01:49:ec:c4:9c:bf:b2:85:95:46:45:bb:b2:a0:
ed:c8:c8:d5:9e:e5:46:cd:b8:48:40:d7:5d:2c:2c:6a:cc:86:
be:9e:50:3c:90:25:ce:af:8a:5c:34:69:1a:19:32:e4:07:b2:
16:74:e0:c7:d6:18:a8:41:35:29:6c:b4:bf:ec:ad:f1:a6:a8:
ed:11:a7:20:b8:77:8d:98:8f:af:28:05:46:d1:64:9a:c7:cf:
cc:2c:7d:26:a8:ce:4c:c0:6a:8d:b0:a6:29:41:9c:c6:3e:ee:
47:1e:19:60:1f:a4:44:10:9d:08:00:1e:f4:2d:91:90:22:23:
87:6f:c3:c1:d9:6e:a6:87:7c:00:7a:9c:aa:b4:79:8c:11:3e:
3c:39:c4:c8:36:22:47:5c:95:3b:06:65:3a:7a:fb:77:68:2f:
3b:64:7c:eb:3f:9a:19:62:96:b9:74:0f:23:ff:ca:3e:4e:a2:
02:d5:ed:eb:ec:a4:f5:a0:b7:40:76:52:4b:49:4e:fb:75:2b:
c8:5f:59:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:22:52 2025 by rpki-client