Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
File: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft (raw, json)
Hash identifier: Ja92RJyBDQl0ol53Ca7uuvEat4xTazz4E6b9UEfakAQ=
Subject key identifier: C1:2F:BF:6D:11:C1:27:09:04:CF:2C:DB:BC:E9:CA:94:45:DF:78:66
Authority key identifier: 8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
Certificate issuer: /CN=8c029fb18e19c5677244057eda38c63dc18da12a
Certificate serial: 0196BD12B159ADE7A3461AAC6C6AB8EC0E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
Manifest number: 0119
Signing time: Sun 11 May 2025 02:00:40 +0000
Manifest this update: Sun 11 May 2025 02:00:40 +0000
Manifest next update: Mon 12 May 2025 02:00:40 +0000
Files and hashes: 1: Cb3iCmSyTi57Hr9wgt7-XKl22eM.roa (hash: KWc0sd0YcpuWSqdNBF0A6JkpNXMWTuayHXK6TkwuLFE=)
2: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl (hash: RuG3JKIgd5KRBdJB8Q07kG9iaouzw5/6f91gYthHMew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:b1:59:ad:e7:a3:46:1a:ac:6c:6a:b8:ec:0e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c029fb18e19c5677244057eda38c63dc18da12a
Validity
Not Before: May 11 02:00:40 2025 GMT
Not After : May 12 02:00:40 2025 GMT
Subject: CN=c12fbf6d11c1270904cf2cdbbce9ca9445df7866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:cf:e6:57:a8:4f:9e:f6:13:9c:f7:91:9b:
9e:8b:73:a9:a6:d2:2a:9f:d5:8f:3f:f8:26:31:52:
e9:28:4a:22:e3:a3:fa:7b:ff:d1:42:b6:9e:b3:a8:
69:e3:af:ff:83:ec:27:7d:83:73:f5:c8:f6:d9:16:
65:66:c7:ec:92:ff:71:8a:58:03:d6:2b:93:71:3f:
0a:1a:d2:69:ee:2f:58:2b:45:3c:16:c9:cb:ac:28:
e2:fe:70:f3:2b:c8:ed:20:54:32:29:ce:8c:11:99:
39:ce:42:1b:4c:37:57:5e:f2:57:f8:05:14:35:8e:
b8:90:69:17:1c:9f:96:49:0c:cb:bd:20:6d:c3:3b:
dd:fb:46:4f:f2:29:d2:de:22:72:1c:83:ef:0b:da:
3e:78:6d:26:19:8b:a6:63:5c:ee:4b:99:5d:e0:e6:
e3:04:66:84:58:60:57:f2:bb:37:b9:f1:b7:cc:f0:
71:6e:d1:56:c6:f1:74:3e:a2:fd:54:06:44:8d:a4:
5c:2d:23:aa:ac:8d:d2:13:8e:7d:4e:75:4b:66:30:
0c:bf:b8:ce:1b:39:cc:fe:a2:b1:87:56:cf:f9:ad:
8d:ed:7b:44:b5:be:d7:7c:81:48:82:fb:8a:c4:9f:
1f:f5:2b:bd:fe:3c:f5:14:5a:9e:97:1f:74:1f:2a:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2F:BF:6D:11:C1:27:09:04:CF:2C:DB:BC:E9:CA:94:45:DF:78:66
X509v3 Authority Key Identifier:
keyid:8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ff:75:69:e9:03:ad:9e:ae:88:ae:6e:d0:1e:f0:ac:62:32:
2a:4e:6e:08:2f:3c:54:2c:c2:3b:07:75:71:79:40:f3:b5:0a:
95:2c:e0:f9:15:7d:cb:32:6d:a7:35:16:27:df:24:48:ed:9c:
63:bd:d0:eb:6b:d7:ae:58:70:9d:96:15:ba:05:94:95:ab:a8:
4b:7d:4b:d4:99:07:aa:f6:9f:92:3b:18:89:83:87:91:7d:1a:
1b:a9:9e:28:44:19:78:8d:fd:af:99:ac:84:d8:f1:15:87:92:
a7:3d:3d:8d:80:46:29:de:dd:4f:17:80:2e:b0:9f:3f:d3:b4:
a5:f5:92:b2:27:89:12:c9:c9:97:be:21:33:cb:ba:42:6a:42:
1b:4d:5f:17:ea:cc:d2:85:b7:8b:e5:10:41:e1:87:de:54:9d:
a1:f4:87:6e:ee:c6:36:96:2e:93:28:25:02:62:5a:12:1d:9a:
5e:a5:4d:b1:63:97:53:5a:69:75:85:78:b0:b6:de:97:a2:44:
f7:6d:cf:de:b8:a5:d5:f6:2f:76:f4:a7:51:a0:3a:d1:f5:b5:
91:f2:45:4d:a1:e6:c3:ef:7c:84:b5:be:8e:31:f1:00:c3:58:
a5:c4:b6:bc:9e:64:41:4e:19:00:0e:a2:11:df:29:b7:f6:7f:
87:a4:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:34:24 2025 by rpki-client