Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: fViZFGWVjznRjPUXKCjcNLz5I6XpP2wihukjmXtY2KU=
Subject key identifier: BE:B2:8D:35:63:E5:1A:43:79:BE:88:8D:0D:79:9C:FE:F7:89:2F:7A
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 0196A352B6F52D5C3441BD47E5D46E2C3630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 14BA
Signing time: Tue 06 May 2025 02:00:29 +0000
Manifest this update: Tue 06 May 2025 02:00:29 +0000
Manifest next update: Wed 07 May 2025 02:00:29 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: 8Bqk1ofS3j6193fyeA1OTUQhlDSTzm2YVkhnJ12HFc0=)
2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=)
3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:52:b6:f5:2d:5c:34:41:bd:47:e5:d4:6e:2c:36:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: May 6 02:00:29 2025 GMT
Not After : May 7 02:00:29 2025 GMT
Subject: CN=beb28d3563e51a4379be888d0d799cfef7892f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:cb:a5:29:2b:9d:77:5d:f9:c0:f3:5e:78:
92:ac:1e:57:fb:7b:ff:60:e5:a4:8f:22:66:85:96:
76:da:a7:b5:ce:a6:00:9f:af:ac:3b:65:63:26:f7:
c6:b5:4a:49:f7:74:82:48:87:1f:70:5e:fc:62:2a:
94:b0:79:b1:35:12:6a:f5:2d:7e:4f:9e:73:1f:08:
ff:02:e5:84:2d:7b:87:1a:e5:99:b9:93:7b:87:08:
db:5d:3c:d7:1c:e2:a9:43:59:05:f9:0f:6a:db:b2:
3f:e8:c3:39:1a:9b:bf:fc:56:d1:9a:3f:9e:eb:c2:
27:00:a6:0e:e5:90:eb:c1:26:60:e2:8e:8c:8a:c9:
28:d5:2d:02:45:09:7d:a1:63:c9:29:0e:6a:ec:76:
5f:81:df:cc:f9:26:e1:87:aa:74:96:01:9b:0f:04:
50:98:62:5b:e6:82:02:08:f2:18:7a:dc:02:33:b3:
64:07:77:dc:95:78:22:58:56:0e:09:95:a5:00:8c:
43:4e:65:be:16:a6:8f:7e:21:b8:b4:05:c5:75:6e:
85:6e:88:81:ec:d2:3f:ea:73:be:c6:fb:c7:7f:11:
58:b2:53:d5:0b:0f:ff:6f:4e:a6:1d:db:3c:7d:8d:
29:3a:65:03:f2:db:cb:7e:f8:72:5d:1b:57:2a:c6:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B2:8D:35:63:E5:1A:43:79:BE:88:8D:0D:79:9C:FE:F7:89:2F:7A
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ee:b5:a5:1f:56:d5:e5:03:31:65:6b:59:05:c1:eb:34:9f:
4a:d8:23:2c:9a:02:40:63:af:56:df:1b:65:28:b4:83:c5:7c:
78:61:df:c0:7b:8a:64:c5:02:d1:47:2e:a5:83:1b:38:ed:bf:
2a:2b:2d:63:3d:08:cb:78:01:86:3b:c0:d4:10:7d:1a:ec:77:
14:50:45:20:94:f8:8c:43:1c:f8:37:b3:8d:4d:13:57:b2:3f:
8c:7d:ba:41:bb:77:3e:94:27:3b:d9:2f:41:a6:16:73:1c:e1:
4b:1d:e9:71:bb:0a:bc:f7:37:50:df:d8:c8:3d:de:d3:b3:de:
3c:11:43:f8:a7:a0:1c:b8:9d:25:3b:46:58:0b:67:23:62:44:
c1:6f:72:c6:47:1a:d3:1c:ed:57:c0:af:f8:41:64:d8:1f:b1:
68:11:90:a5:42:83:f9:b2:fa:57:70:71:6c:5c:33:95:aa:d6:
b4:d2:d8:20:c3:03:df:3e:5d:e7:2b:e2:ee:3c:56:62:56:a7:
59:39:9d:66:57:6d:59:6c:4d:d8:8d:7d:01:a0:a4:2f:7e:80:
54:b1:ef:b4:fb:09:48:a0:3d:4e:fe:ae:84:a7:0b:76:1a:f9:
07:12:27:f8:15:95:5a:51:06:0a:98:48:8d:b4:dc:e8:2f:a0:
34:0c:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:32:39 2025 by rpki-client