Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
File: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json)
Hash identifier: xnFdN8t8laSmBRk4JBFnu61+LeM4XR/69puIdj8VRrw=
Subject key identifier: 8B:29:B7:AD:FA:A4:71:99:12:B8:74:B8:63:B6:6F:DF:27:ED:44:85
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Certificate issuer: /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial: 01969D50B3159191F8CD93A4D7C307E19F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
Manifest number: 01C1
Signing time: Sun 04 May 2025 22:00:33 +0000
Manifest this update: Sun 04 May 2025 22:00:33 +0000
Manifest next update: Mon 05 May 2025 22:00:33 +0000
Files and hashes: 1: EdJTz8Dy_KYllN7oDQj7wcm2rcA.roa (hash: fBqhHICDr0X6YXFTTdlTIs7rIkllOmDVf3b+eCpH7zk=)
2: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: lCgYKc0bAKyl0XmqaTGvXnQ10+MbxE+vnFzI7oswYfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:50:b3:15:91:91:f8:cd:93:a4:d7:c3:07:e1:9f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Validity
Not Before: May 4 22:00:33 2025 GMT
Not After : May 5 22:00:33 2025 GMT
Subject: CN=8b29b7adfaa4719912b874b863b66fdf27ed4485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:9c:ed:ae:bf:e5:42:8f:50:5c:b7:6d:c9:
a9:a7:7f:f7:61:27:6c:0b:46:63:ad:04:03:c5:24:
5b:7c:95:e9:b9:21:d0:e9:ba:3c:13:86:72:fc:31:
e3:ec:90:7a:31:b6:f1:06:70:45:d1:c1:94:7a:44:
c5:82:a8:69:f4:72:25:1c:ea:43:11:b3:20:10:cf:
28:e0:50:33:59:94:67:ab:b2:b2:5f:90:c5:45:98:
a5:6e:86:bb:00:ce:ad:45:f9:e4:a0:a9:d9:6a:ab:
73:74:57:a0:0b:19:27:d5:98:1f:70:d2:64:9d:cb:
6d:81:f6:b0:0b:f4:f0:cc:97:b9:5f:4e:2c:e3:fb:
ef:74:08:d2:03:51:e8:2c:ca:0f:42:6d:ff:2c:91:
fe:d7:b8:e0:79:d0:b5:9e:f9:8c:aa:5d:c1:1f:65:
45:05:f1:bc:61:1e:e5:ef:6d:66:9d:f0:35:51:d9:
1f:fc:ae:29:0a:28:7a:67:db:b2:7e:c2:8e:22:81:
e0:f3:53:6c:b5:8c:3b:fa:2d:5a:2f:3d:78:f1:47:
2e:47:8a:22:bd:57:c9:07:7d:ba:c1:39:62:ea:8e:
57:9d:28:93:f7:82:87:44:66:12:7a:3c:65:e0:89:
1f:6a:42:25:86:73:87:34:66:65:23:96:53:8c:db:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:29:B7:AD:FA:A4:71:99:12:B8:74:B8:63:B6:6F:DF:27:ED:44:85
X509v3 Authority Key Identifier:
keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:33:59:53:fe:69:05:43:d0:e6:a3:26:db:11:2a:1f:c5:a2:
8e:e9:1c:fe:16:1b:85:e2:90:b7:17:ca:53:62:a1:af:cd:d1:
bc:5b:ca:f9:fa:9a:30:43:6b:c3:c8:2b:0a:94:e9:93:50:25:
4e:a9:4e:82:fe:52:d3:d8:e2:2d:f9:c0:04:82:da:2f:32:c3:
91:01:25:ff:2e:f1:c8:71:c0:9f:31:c4:0c:12:d9:8a:1a:00:
79:cf:e4:9f:31:26:69:65:24:17:32:ab:f4:27:8d:fd:b4:97:
2e:28:21:b3:a0:5f:1f:54:c9:29:b1:9a:c1:87:75:ec:2d:78:
d2:91:21:b9:b4:af:53:32:17:45:36:cf:9c:70:13:3c:94:ee:
4f:de:42:81:64:a2:03:c6:83:f4:72:3b:f4:8c:1c:46:66:f0:
ab:00:78:38:98:db:7c:fe:73:7d:c6:48:db:6c:b7:40:dc:7a:
91:80:f3:1a:57:58:ee:5d:51:c4:b7:cd:94:98:76:55:a2:61:
42:1a:06:fd:f5:b9:55:f6:40:f7:fa:61:6c:7c:31:c7:a5:e3:
76:48:3a:28:e5:da:ca:e4:fb:c2:a9:f2:47:57:7e:55:91:19:
dc:88:cb:ab:97:d2:b4:2c:a2:b1:70:ca:04:f9:87:48:74:a7:
34:8f:43:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:00:57 2025 by rpki-client