Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier: kqGqBAXAjrbzja3IjLpGbgq7Yf8lOezsawJfR4Q3XsE=
Subject key identifier: 89:4A:81:F2:22:F0:30:E5:9D:93:7C:09:2D:F1:A3:0A:6F:86:0C:A5
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 0196C427729F4B27F61428E8E7A02AE7082E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number: 1557
Signing time: Mon 12 May 2025 11:00:41 +0000
Manifest this update: Mon 12 May 2025 11:00:41 +0000
Manifest next update: Tue 13 May 2025 11:00:41 +0000
Files and hashes: 1: 2FhEmcxYfTh9K3J3avRiCdDc75E.roa (hash: tOhuHX2KWyFG2B0a0se5O81lEiJFRABFP38mxTII8TU=)
2: ZobwuQJlyfTBHn_a7YG93r8zB-c.roa (hash: OuGiwc5e7Uh2SsaOmHGGMAe9pQSfXZsNsX2xOuLeEXY=)
3: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: U8OywGFvhyG1TJlSpKdS8lDjNHJhl1f40fUTb37TmnI=)
4: yT5ungE9NAr5a95GJEQ0WzC2bc4.roa (hash: 3Q09eXeA/SVTTdlEZBa1ZfiKoZceB51s1iopXPbgTXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:72:9f:4b:27:f6:14:28:e8:e7:a0:2a:e7:08:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: May 12 11:00:41 2025 GMT
Not After : May 13 11:00:41 2025 GMT
Subject: CN=894a81f222f030e59d937c092df1a30a6f860ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:11:fb:6e:f9:68:cc:46:42:21:ec:5d:9d:
79:3b:bf:f7:94:73:16:02:ea:bb:00:de:75:49:fe:
67:e8:20:fd:cd:7f:39:ca:97:b1:5d:c4:f1:83:ef:
f8:50:c6:91:e2:3d:16:7f:bd:a1:62:55:60:d6:30:
dc:f4:3a:fa:72:7f:b6:21:f1:4d:77:f8:1b:88:97:
e2:a5:9b:4f:82:11:37:38:d1:c9:b4:af:72:69:cc:
2b:4a:f9:41:d0:b4:0e:de:33:76:15:6f:7b:ed:9e:
e1:ea:91:bf:53:71:6a:89:92:b5:5f:e7:3c:c6:8c:
ef:a8:60:80:07:fe:94:57:2d:b1:25:10:48:f1:35:
82:f5:04:e3:6d:6e:79:21:35:11:cc:2f:59:25:73:
39:f3:b7:c0:6d:f6:51:a6:7c:77:7f:4c:51:fb:f6:
6e:d4:c8:ee:86:bf:c7:03:60:52:ea:50:d3:a0:e9:
d6:94:d0:e1:2b:50:71:bf:ec:3c:f8:54:b4:db:21:
1f:62:42:cd:b1:2d:7d:58:f9:d0:05:1e:24:36:d8:
b3:fa:41:95:4f:ff:4d:0f:c3:2d:3e:40:c7:ed:c4:
b4:54:6a:45:e1:72:32:95:d5:24:da:76:cd:61:24:
d8:8e:d0:43:d6:21:53:ba:db:9b:e7:c9:50:e4:3d:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:81:F2:22:F0:30:E5:9D:93:7C:09:2D:F1:A3:0A:6F:86:0C:A5
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:72:8f:ed:86:aa:d6:6d:17:78:4d:3d:e8:5a:3b:5e:36:12:
9a:c4:85:47:6e:f4:e8:1d:18:58:11:08:ec:f8:20:3a:e2:38:
a1:c5:69:b7:51:92:e3:22:f4:9f:cc:4a:00:f9:c7:1c:91:5a:
da:29:49:e6:62:cb:81:ce:06:c5:59:e6:19:f6:0a:f2:20:e2:
4a:15:fe:9b:9c:1f:88:ca:39:38:12:6a:04:e1:2d:3b:f0:1b:
66:20:c2:b8:e7:d5:08:24:ac:36:6b:ec:ce:66:7a:48:1c:16:
d0:09:5a:e5:f4:5d:88:83:29:f2:56:de:61:29:99:74:e8:ca:
a1:cd:3b:19:1d:a3:57:bb:4a:99:28:65:75:e2:f2:6b:31:33:
8a:99:be:20:fd:a2:a5:1e:74:79:57:0a:5f:1d:47:cc:43:3e:
94:58:02:9d:3a:ba:3e:f3:a8:07:71:62:6d:9d:7c:de:db:f9:
84:15:e9:2f:58:f9:c5:81:cd:1f:19:40:6d:25:e7:f0:c3:4e:
87:7e:51:18:e5:86:9d:1c:bc:1e:29:9e:61:24:bd:4a:73:c3:
81:34:c3:9e:11:02:6d:36:4f:72:f1:bc:a9:08:fe:6c:6e:a3:
01:da:ce:15:b0:28:83:36:99:75:6f:6e:a5:45:76:11:b6:d0:
ea:74:b7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:42:11 2025 by rpki-client