
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier: N1oJRozwB8ueSPY+LzfOSPy1riM3x1sx1qJSMfJlQus=
Subject key identifier: 7A:3B:3E:52:F4:59:CA:CE:97:9E:E9:AF:E5:5C:9D:40:E9:45:C4:6E
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 0196A1D27BB2E771004ADA16AE720263CA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number: 13F1
Signing time: Mon 05 May 2025 19:00:48 +0000
Manifest this update: Mon 05 May 2025 19:00:48 +0000
Manifest next update: Tue 06 May 2025 19:00:48 +0000
Files and hashes: 1: AT-JQ-Y_A09PsPmxRqqnl1VWEUg.roa (hash: F2BQnvjv4yVGmxyojFmIinn12fD07Zb4EP5XRrRv7Hg=)
2: HK8tZZEnH3XebSxA7uU7eXL76hY.roa (hash: A9qzXbhJ+D8oACcswpJV6B2AKA++OqnaZLnW9gQTaUM=)
3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: ItibxrFfPBAXyyHrKSuzJPQ8RGk+Mvrk1HooAlMUcQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:7b:b2:e7:71:00:4a:da:16:ae:72:02:63:ca:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: May 5 19:00:48 2025 GMT
Not After : May 6 19:00:48 2025 GMT
Subject: CN=7a3b3e52f459cace979ee9afe55c9d40e945c46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:23:35:8e:47:8b:76:f3:4b:2a:a9:51:5e:
9e:f4:0f:aa:4b:7a:b5:f4:b4:bb:90:76:da:58:4c:
ac:e1:a7:e2:96:c2:37:e2:14:df:11:d3:9e:85:69:
9e:29:31:89:85:bb:95:fb:f5:7b:30:b3:d3:c8:13:
7f:35:4f:e1:54:c5:df:7e:bd:9a:39:98:54:86:d7:
c8:c9:79:dc:75:ed:0b:77:96:c4:52:eb:2d:e4:e9:
74:ee:dc:47:7f:c6:77:95:cf:2a:6e:4f:92:f3:7f:
1f:0b:45:94:df:8e:4e:48:35:ba:54:05:e3:23:36:
b3:22:9e:ab:70:9a:c8:cb:39:7e:0a:02:f2:0a:1c:
b7:f8:54:c0:d5:03:8b:87:25:86:f1:66:75:82:25:
46:7a:67:9f:01:f1:9d:19:52:69:f6:0c:ac:c3:e2:
ca:2e:b3:45:18:b2:0d:2f:c1:26:97:ad:33:ab:ca:
d0:45:1c:4b:4c:47:79:c5:e0:21:47:47:5b:c1:18:
55:e6:e9:76:9c:a5:25:19:6a:d6:b3:1c:8b:05:f2:
a6:50:34:e5:be:95:cd:1b:92:17:3d:ee:77:af:05:
b7:b9:6b:39:84:49:20:29:4c:dd:22:65:53:c1:b9:
dc:b4:49:0f:b2:08:e7:8d:2b:54:49:5a:1d:4c:e2:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3B:3E:52:F4:59:CA:CE:97:9E:E9:AF:E5:5C:9D:40:E9:45:C4:6E
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:54:6d:0e:f9:51:11:17:e4:60:9e:a3:0a:00:38:22:83:77:
8f:a7:2f:d1:37:8a:69:36:11:2d:24:ed:7d:8d:60:87:a9:7d:
19:04:8d:6b:d0:42:14:7c:8a:83:69:d3:b4:54:6d:7a:09:b7:
43:4d:e1:dd:9b:fb:6c:e9:8f:c5:c8:93:14:05:cf:c9:54:7d:
e6:14:c8:a0:4b:14:07:4b:21:08:9e:20:cc:40:5a:47:b5:ca:
c5:6e:47:20:eb:ff:a3:34:e8:d3:99:ae:32:1b:cc:65:33:3c:
c1:f2:35:41:a2:61:b9:73:61:45:fe:2b:b0:64:a7:5a:79:19:
82:a8:b1:a9:0a:41:ba:f9:3e:7e:b4:56:39:4e:9e:b1:f0:c0:
b2:41:0a:70:92:b8:b2:08:64:ee:c3:11:ae:c9:d3:92:90:d6:
12:a8:1f:7b:89:15:87:60:78:69:b9:93:ba:b0:51:c2:05:16:
4e:5b:dd:b1:2e:9f:46:d5:88:a9:15:92:89:60:40:4f:83:bb:
06:ba:fa:8b:7a:a9:0c:98:96:b2:f3:c8:3e:af:f3:b7:24:3e:
7c:b2:bb:92:17:0e:48:76:03:77:b7:3c:6e:38:d7:8d:74:e6:
93:48:9a:16:2b:c4:8e:f3:54:95:5d:93:14:11:01:76:19:e2:
bc:87:2c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:49:08 2025 by rpki-client