Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
File: jAfs12ZszvkegvfsvOC6KFM2-0U.mft (raw, json)
Hash identifier: 65EKmlRyNe9PsInHun+aqHSbjV2+TO76Hf+ikJh8qdI=
Subject key identifier: 9B:F1:5B:0D:35:75:61:59:7F:B2:BC:92:A8:CD:77:33:4A:26:27:F4
Authority key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
Certificate issuer: /CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Certificate serial: 0196BF6EA69EF16B697A878D9E9300459D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
Manifest number: 11CF
Signing time: Sun 11 May 2025 13:00:21 +0000
Manifest this update: Sun 11 May 2025 13:00:21 +0000
Manifest next update: Mon 12 May 2025 13:00:21 +0000
Files and hashes: 1: HO38BQkZbk8sOl9HIcFWqylWAn0.roa (hash: f5PO7xcOqg4j7osu62n1SoIVysgleTKMRASaV5PScOY=)
2: jAfs12ZszvkegvfsvOC6KFM2-0U.crl (hash: cs7drSB5PbLlUvSkwiy6IjoIX4eslEGYn9+8UXngj1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:a6:9e:f1:6b:69:7a:87:8d:9e:93:00:45:9d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Validity
Not Before: May 11 13:00:21 2025 GMT
Not After : May 12 13:00:21 2025 GMT
Subject: CN=9bf15b0d357561597fb2bc92a8cd77334a2627f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:60:d0:36:e0:88:df:cb:09:49:82:d7:45:
8c:0d:13:32:7c:b2:5d:52:9b:1e:93:96:1d:24:a1:
1a:02:ee:6c:bd:0b:0b:14:4a:1a:b0:2c:e0:98:c1:
dc:b8:e8:44:e2:61:58:f3:59:48:aa:00:83:10:1d:
19:d7:63:92:07:ad:02:8d:31:ac:74:d7:3e:3c:04:
16:5e:17:0a:10:f8:8f:63:b8:bb:1f:fd:64:35:69:
b4:06:61:8b:09:69:4c:aa:3f:14:8c:20:36:3f:b5:
67:a6:a5:5f:b8:90:d2:d9:11:17:f5:73:a1:4c:59:
99:91:a3:8e:87:2a:86:db:ee:c8:91:3d:a4:b3:74:
91:1e:b7:3b:3f:0b:29:f7:9c:1f:17:d3:cf:0c:2f:
4b:a4:14:45:2e:c0:74:df:80:41:80:2b:3b:e9:38:
5b:d6:90:65:a9:74:d2:83:29:af:b5:67:f6:6a:ff:
18:ad:ee:d8:cd:1f:d5:4a:cb:3c:70:66:8f:a1:ce:
5a:49:22:ef:69:9f:57:ba:08:35:96:0d:70:5d:33:
48:82:ab:d3:f7:f7:71:f7:2c:c8:f7:c6:fa:b5:6e:
d7:47:7a:11:cb:8d:84:f3:2b:6d:55:81:ea:a3:67:
8f:fd:97:29:17:d0:a3:d3:e2:17:18:54:b9:28:4b:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F1:5B:0D:35:75:61:59:7F:B2:BC:92:A8:CD:77:33:4A:26:27:F4
X509v3 Authority Key Identifier:
keyid:8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5e:23:ae:1e:6f:f3:af:ec:ef:ce:fc:ef:81:f4:74:1f:a4:
a5:dc:b3:16:33:19:37:a0:fb:21:69:cc:21:41:68:d6:d5:1d:
4e:aa:d0:6b:1a:87:c6:58:73:66:07:de:c0:32:06:e0:96:cb:
b7:7a:1f:8d:65:1a:cd:d6:7e:b8:7c:9b:dd:8f:7a:2e:46:a6:
71:47:e1:16:93:77:7f:12:3c:8c:2e:03:bc:56:68:e6:62:9c:
d8:7f:1f:29:4a:cd:2a:5e:0c:1b:69:16:a2:e6:0e:6c:73:b6:
8f:58:30:34:16:d2:2b:4d:83:38:6d:6d:16:c4:e3:2e:d6:6d:
cf:25:6b:dc:35:67:ce:d3:2a:29:85:3d:09:a1:03:03:42:85:
43:98:49:88:9f:24:2f:45:46:6f:9b:82:b1:04:24:c2:f1:57:
12:dd:1e:3d:c9:4a:04:94:7a:44:88:5f:43:97:51:d5:19:a6:
c5:65:c2:b8:57:3a:e9:c0:e3:17:03:78:07:30:ba:a8:b8:54:
00:dc:e3:dd:3b:54:34:ea:16:8f:3c:69:c8:29:99:9a:c1:76:
ec:30:c5:47:51:d1:63:ac:15:3f:07:5c:73:39:bc:dc:56:bf:
83:de:2f:11:bb:4c:8b:52:f2:30:4a:fe:80:72:fb:e4:31:ec:
1c:ab:92:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:09:04 2025 by rpki-client