Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json)
Hash identifier: 4D3NeaQ1XC+mXRHMaxyAtLA1ezLpkFIRsnwJy0G1s/A=
Subject key identifier: 21:8E:CB:BC:08:07:D2:EE:F5:2F:4F:A0:EB:6E:25:BD:42:A9:11:FA
Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Certificate serial: 0196C50337255CB136C87D68B3198BDA6103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
Manifest number: 104D
Signing time: Mon 12 May 2025 15:00:44 +0000
Manifest this update: Mon 12 May 2025 15:00:44 +0000
Manifest next update: Tue 13 May 2025 15:00:44 +0000
Files and hashes: 1: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: NA+g8Gp9TBkEXOonGE+sF5cpIBtRstk2rcR28Bip2k0=)
2: jlfdZHmVvHdz_53apg0OZWLxSVw.roa (hash: jgBY+KV60Sm5+edJ00g2iCkNCnIW/XdZGLc1p19ckko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:37:25:5c:b1:36:c8:7d:68:b3:19:8b:da:61:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Validity
Not Before: May 12 15:00:44 2025 GMT
Not After : May 13 15:00:44 2025 GMT
Subject: CN=218ecbbc0807d2eef52f4fa0eb6e25bd42a911fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:46:47:87:6b:1f:fa:f6:28:24:2f:e7:50:
e4:36:8f:59:50:9c:d9:ce:c3:82:61:51:1e:d4:83:
13:82:e1:ae:12:cc:0d:1b:53:2c:24:0f:03:39:aa:
d8:e4:6e:b8:ee:18:00:de:1f:8b:4e:c7:cb:51:ad:
06:08:ef:58:06:49:2f:98:6c:d1:e0:0d:f2:3b:76:
0f:28:89:50:1c:b4:cd:31:25:4a:8e:65:06:91:9d:
9b:e6:3f:e8:1f:ec:c9:f4:c8:c6:0c:8e:95:e7:90:
25:88:88:a5:0a:43:23:c1:39:27:fe:c0:d5:ad:af:
78:38:5f:4d:e5:70:85:b8:94:d4:6d:65:9f:b9:04:
d8:85:6d:97:28:af:5f:fe:1f:40:45:dd:a2:05:b8:
09:bf:54:8f:8a:ed:13:a9:2f:ce:1e:fe:5f:a6:56:
e9:f0:9a:c9:9c:a5:8b:6e:6e:f9:33:24:7f:33:ea:
7e:d2:e6:36:03:40:96:fe:91:6a:c9:05:90:b1:87:
a4:b1:bf:5b:ab:48:0d:62:18:75:3b:50:92:96:f2:
2e:0a:54:54:a8:db:54:37:d2:59:62:fd:39:7b:ba:
25:a4:ae:00:1d:7e:ef:53:17:1a:6d:70:6d:23:0f:
4c:b3:d3:4a:10:6c:d9:26:c4:4f:bc:3c:86:87:d1:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8E:CB:BC:08:07:D2:EE:F5:2F:4F:A0:EB:6E:25:BD:42:A9:11:FA
X509v3 Authority Key Identifier:
keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:4e:14:7e:98:68:4d:ea:ba:6c:98:1f:1a:da:87:92:0d:94:
dc:d3:a8:e0:48:94:f3:7c:b0:ad:cf:bf:c9:9c:4f:91:a3:c8:
94:03:11:69:cf:1c:b2:5a:a7:c2:d5:3d:ad:f4:e6:65:74:97:
e8:ee:2a:62:26:a7:20:96:64:81:bf:82:45:2d:07:dd:d3:0f:
4d:f4:a7:1b:54:0a:60:11:01:80:dc:77:5e:53:10:3f:de:9a:
f9:e5:94:75:cd:83:eb:64:02:e3:a5:c1:b1:cf:56:80:7b:1b:
e1:29:f5:34:dc:3b:78:c6:1d:17:59:67:7f:4f:93:95:40:52:
2a:4b:04:f4:fb:b5:1e:f7:d9:93:dd:65:bf:5f:95:a9:32:06:
8a:36:ff:7c:b4:62:ce:59:63:6e:bd:d9:41:e5:a5:56:87:38:
16:bb:5f:64:0b:5b:01:1b:33:2d:9a:fd:ab:76:80:95:11:32:
4e:6c:2a:d7:bc:f6:5d:5d:72:e0:f0:28:5e:a5:bd:7d:03:82:
72:31:0d:15:ad:b1:10:d0:51:15:78:8a:91:28:a8:af:13:92:
b9:1f:11:fc:47:06:31:cf:5a:f1:81:67:47:f0:94:fe:af:0e:
69:c9:18:f9:46:6c:7f:01:0a:2e:5d:f7:42:09:e3:9c:d5:41:
a1:6a:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:05:56 2025 by rpki-client