Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
File: jOc1Ep93eiW_hHJyBr-XjZodsgA.mft (raw, json)
Hash identifier: QNgoaRwdhrH3PmoPjKNSnfZljj4doDSBONOEqZytmrY=
Subject key identifier: C7:9C:91:83:30:1A:93:CF:D7:FE:1A:01:59:AB:36:11:95:9F:E9:67
Authority key identifier: 8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
Certificate issuer: /CN=8ce735129f777a25bf84727206bf978d9a1db200
Certificate serial: 0196BBC9162CADDB6B5D700D3EEAD75D10EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
Manifest number: 0B0B
Signing time: Sat 10 May 2025 20:00:39 +0000
Manifest this update: Sat 10 May 2025 20:00:39 +0000
Manifest next update: Sun 11 May 2025 20:00:39 +0000
Files and hashes: 1: 7nFNN3l5GD-t-2xZtD0Zf8RWyQ4.roa (hash: vqDVEIya4bFoWJhti8KO9chSYpm+4SzzmfR2K9/w2/k=)
2: czoe1RLJsx9dA2fYE94xeHxNmO4.roa (hash: BpNazVz7pSpyIXBvYFGh8xCscfLMGwTUrkPmKZ9aKwA=)
3: jOc1Ep93eiW_hHJyBr-XjZodsgA.crl (hash: uW7xzOWMvhoR8WjSkDKFJBhbpAFigyIxP0kXsLGaGvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c9:16:2c:ad:db:6b:5d:70:0d:3e:ea:d7:5d:10:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce735129f777a25bf84727206bf978d9a1db200
Validity
Not Before: May 10 20:00:39 2025 GMT
Not After : May 11 20:00:39 2025 GMT
Subject: CN=c79c9183301a93cfd7fe1a0159ab3611959fe967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:81:d3:56:15:19:2d:87:dc:5b:42:ba:03:
db:42:25:ed:18:7b:62:ac:5c:07:41:5b:ca:eb:f0:
df:a3:3f:c2:cd:55:cd:a1:76:60:9b:97:7c:9b:72:
d1:1c:86:f4:66:f1:7b:ff:bf:a3:1a:37:6f:97:fd:
7a:78:2d:47:09:be:27:cd:61:37:5e:cf:4d:21:fc:
bd:90:0f:35:01:cf:02:55:83:60:5f:be:e6:19:cb:
56:dc:3e:2a:cc:e3:f6:79:69:e5:b3:30:e1:16:af:
e0:59:9d:66:6a:af:5f:02:3d:d5:f0:a5:65:97:fd:
1d:39:b2:96:9a:b6:b6:a7:37:c9:25:39:f4:00:f8:
b9:36:cf:8b:0a:48:17:4f:52:1a:d0:f4:6b:34:e8:
89:8f:dd:0c:78:02:9a:cd:0b:80:5f:02:fb:7b:6b:
23:7f:d5:59:4d:23:3c:61:f1:71:89:e7:d4:ea:f8:
01:2c:41:0e:86:95:c1:d8:74:b6:ad:4d:4c:e8:56:
c4:8e:54:af:be:64:1f:4b:ab:ce:60:7f:86:2b:3e:
5a:02:09:84:42:d2:46:8c:a8:00:ab:08:85:b3:cc:
c2:81:73:eb:48:db:83:e2:66:9b:da:d6:18:65:7c:
2d:76:a3:e3:43:ff:db:05:76:f9:e7:ec:b3:f3:c1:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9C:91:83:30:1A:93:CF:D7:FE:1A:01:59:AB:36:11:95:9F:E9:67
X509v3 Authority Key Identifier:
keyid:8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:aa:3f:43:c7:be:8a:c9:cc:48:20:ce:57:ba:98:1f:22:8f:
42:3a:1a:ba:ac:95:56:b0:d3:f0:87:d0:97:95:bb:85:7a:f1:
9b:1b:5b:30:57:1f:3d:1e:81:c1:6d:93:92:f9:c0:45:6e:60:
1b:ab:23:25:1a:a5:9b:61:49:b3:7d:fe:e4:8d:66:08:df:51:
5a:55:01:8c:a3:d3:7b:88:96:d0:e2:5a:84:eb:98:17:3f:ac:
d2:08:8c:d3:98:c8:3a:72:fd:bc:c5:0c:5d:8f:03:c3:e0:b8:
93:5d:e0:24:3d:37:3e:bd:d4:76:0e:35:db:fd:44:4b:5d:86:
9a:03:ac:85:11:ee:0e:6d:a9:63:d8:7e:08:57:e2:80:39:22:
2c:44:aa:ab:bc:7e:ca:83:98:1f:d2:cc:fc:78:fc:66:1a:be:
e1:8e:df:14:a9:c8:4b:3a:50:34:ff:c1:8f:9a:b3:76:f2:82:
66:02:57:b6:1d:3c:08:0d:b3:a0:ec:d4:3f:34:ca:7e:32:13:
df:58:97:6e:18:63:e0:38:1d:ad:43:f9:06:27:4c:52:9e:51:
66:bb:17:9a:63:c5:94:97:1e:f5:45:bc:11:15:60:fe:91:cd:
b3:52:77:d2:e6:d6:95:bc:dd:0d:f1:2c:87:bb:e6:a1:77:fc:
4d:d8:ce:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:24:11 2025 by rpki-client