Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: cXcUBs1kw+HO9Ipb+MyZuSXrmppCbTfbdDVXRXKHC/s=
Subject key identifier: FE:5B:AA:5E:22:C6:18:2D:F4:9E:00:84:1A:64:CA:BE:4A:B2:9D:07
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 0196A1D29B61789430E18F443B3A98C70358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 129C
Signing time: Mon 05 May 2025 19:00:56 +0000
Manifest this update: Mon 05 May 2025 19:00:56 +0000
Manifest next update: Tue 06 May 2025 19:00:56 +0000
Files and hashes: 1: 3H7i_vFx5kv1rmREwXCmTM5oMqw.roa (hash: hMtleRQFOxKLJtL4y1szjPfSERJkDY1m3qfGe4WIw2I=)
2: RsZOcDmkBIUPjHAIBtXdE1isEIo.roa (hash: YV+XRYidOStCwFSLI7pqeek9g91t1Wq016mp7gDOMSA=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: a/qury5D1mgAipIUuG8sIYSYV+bKW1jFCGkiUkaVVpM=)
4: oelP10O0hKN0MJjmizXtRBBnIm0.roa (hash: Kv4VxSnM51++YGnfrGOwbQ9f/51H5VRCwP22x4tg44M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:9b:61:78:94:30:e1:8f:44:3b:3a:98:c7:03:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: May 5 19:00:56 2025 GMT
Not After : May 6 19:00:56 2025 GMT
Subject: CN=fe5baa5e22c6182df49e00841a64cabe4ab29d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:02:f2:b5:b6:76:3f:8e:6c:d2:69:90:45:2a:
5a:18:74:87:12:3d:62:4e:47:c3:2f:3f:0b:fc:af:
8f:f0:b4:ca:8e:ac:01:42:61:0c:c6:75:fb:b0:a6:
da:0c:d9:76:5f:b9:cf:59:37:33:bd:f1:f6:69:72:
9c:e4:b8:79:f8:4d:03:f1:44:d7:e9:fd:0b:38:14:
f5:7b:75:84:b3:46:59:5f:1c:45:b5:e8:f6:a9:4b:
08:c5:9d:7b:10:e6:48:f0:71:7e:0e:6d:ad:27:b4:
67:a9:bd:53:a8:0e:d7:f0:5c:ab:63:c8:0f:f1:49:
bf:bc:ef:e4:9d:15:a9:24:4f:fa:b6:53:3a:de:c2:
3a:67:8f:3a:c1:44:96:56:52:26:d5:d3:7a:25:8b:
4e:2f:63:f7:7a:fb:9f:a2:d7:c3:b8:f2:3e:37:c9:
b2:10:74:b9:47:e1:72:37:6e:77:13:16:14:bd:29:
7c:4e:1f:d0:3b:e0:eb:26:ac:d8:e9:04:38:7c:f6:
b6:8a:e7:4d:a2:07:d7:76:3b:2b:f0:d1:6e:96:63:
db:e3:95:a3:a7:4e:98:a3:89:74:5f:4d:57:e2:bb:
b1:1e:2d:0e:36:b6:2f:d6:99:8e:d0:a4:1a:59:91:
eb:a6:0d:66:a7:7c:c3:84:05:85:ab:ab:73:e4:e5:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5B:AA:5E:22:C6:18:2D:F4:9E:00:84:1A:64:CA:BE:4A:B2:9D:07
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:28:c6:5c:dd:fe:f8:92:ca:20:28:c1:28:f0:b7:22:5e:51:
f6:e5:47:dc:b8:1e:37:1a:ee:c8:5f:83:01:09:fb:2f:b7:ea:
88:c9:de:b2:d8:cb:a1:f5:01:e2:89:12:19:6a:ad:d3:6e:39:
5b:18:07:14:bc:df:ca:ed:6a:f6:e8:1f:a7:40:b4:26:4f:7e:
0d:3b:36:88:d0:57:cf:04:1c:7a:54:92:dd:25:26:0d:9f:58:
ac:45:8f:97:8d:10:0b:3a:06:65:7a:48:c2:39:11:dc:63:d1:
e6:04:f7:a0:8e:23:74:e9:a3:f0:3d:ec:2d:76:82:3c:d7:a0:
87:22:3d:ae:3f:fe:d6:eb:ab:68:f1:03:8c:b7:03:c4:3f:ef:
e7:16:7f:da:8a:2c:2b:80:6e:12:40:d8:92:9d:fd:bf:0c:6f:
84:16:81:e7:4d:1d:fd:f6:fc:6f:99:ef:a6:84:a4:85:1b:40:
53:3b:72:2c:4b:af:8e:33:05:9c:25:83:a0:6d:40:b9:a2:e1:
8e:5a:76:6a:f7:39:ea:58:ea:e5:6b:df:06:81:03:9b:0c:12:
a7:6b:c4:9a:65:60:1f:d3:e7:d9:39:27:8e:9f:9e:cb:6c:74:
69:fb:f8:87:d1:40:f2:0c:a8:75:a0:63:a7:aa:fe:de:74:cc:
9f:0e:14:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:41:07 2025 by rpki-client