
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: 7e/4vZjBeBsHt0yOpHUfpGCQk4LcGaer/xBMRhmxlJY=
Subject key identifier: E3:3B:39:17:09:31:51:A6:0F:6F:6A:00:1C:E7:79:ED:6D:E4:29:B4
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 0196C013CA995EC5E1FD9BE997E1336D8E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: 01AB
Signing time: Sun 11 May 2025 16:00:44 +0000
Manifest this update: Sun 11 May 2025 16:00:44 +0000
Manifest next update: Mon 12 May 2025 16:00:44 +0000
Files and hashes: 1: NFgVIk3I0OB4aAQE--Yl_E4ZfQE.roa (hash: tZx/juHJjFsZtx/TprO+Ju+VpXMKoq0o38hFCwQ+O44=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: 3tbQe4s/r6xfwGiWO6mAJ5eJUvcBTm6F9OmFwxE5pj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:ca:99:5e:c5:e1:fd:9b:e9:97:e1:33:6d:8e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: May 11 16:00:44 2025 GMT
Not After : May 12 16:00:44 2025 GMT
Subject: CN=e33b3917093151a60f6f6a001ce779ed6de429b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:b4:60:00:a0:34:6b:49:f4:5f:a5:97:14:
a9:12:eb:f0:31:14:0e:66:63:f9:9c:21:41:cf:cf:
c0:01:9c:d7:a8:d1:32:3e:b9:34:67:05:76:89:13:
91:04:b9:a0:00:ac:fc:0f:b9:33:cd:7a:85:c3:be:
15:d5:07:fc:0a:e4:ba:79:71:2b:ed:ea:8d:cc:f0:
78:e9:bf:6f:44:03:6f:c7:2e:b4:90:3b:34:42:5b:
d4:58:bd:d5:1a:3c:61:fc:c5:86:58:b6:32:bd:c6:
c7:fa:63:01:6f:b1:1a:80:14:5b:92:a0:4b:f3:48:
0e:2a:ff:f7:33:0f:05:92:4a:73:dc:48:40:82:f1:
d2:bc:ad:94:e7:04:da:4b:0f:2c:65:87:8d:10:1f:
b6:01:4d:0b:47:bf:e9:7b:21:89:89:50:09:db:2a:
98:4d:b5:26:fe:43:e1:c4:ae:d2:a0:cc:9d:ed:23:
41:ca:67:5d:f7:b0:2f:76:ed:6b:54:40:1b:6f:00:
57:e4:a7:57:c1:78:fd:52:71:be:f6:ff:18:c5:9d:
38:ef:ed:02:1d:26:b1:df:fb:9a:76:8d:fe:37:ea:
b1:bc:d3:8f:f2:cc:50:bf:05:81:0c:b3:db:35:f0:
cd:99:05:d0:3e:34:54:49:cb:9f:60:c7:58:c8:72:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3B:39:17:09:31:51:A6:0F:6F:6A:00:1C:E7:79:ED:6D:E4:29:B4
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c3:13:69:35:51:2d:03:24:aa:92:d7:31:af:40:21:1c:d5:
a0:bf:90:64:35:bd:93:9d:84:b5:5d:22:e9:33:0c:02:23:62:
b9:b0:65:c3:df:c8:4c:ce:64:ca:f3:5d:f9:3f:d0:ce:86:c9:
ff:b6:81:21:c5:ce:cb:fd:ea:4b:a5:7f:dd:f1:1a:3d:00:20:
bc:f0:4b:2f:17:c9:3f:1b:a4:66:f3:00:7d:71:8a:73:10:8c:
a3:76:a6:0b:66:c5:90:cf:1c:12:39:30:0a:c9:5f:3f:9d:ee:
de:91:f3:c2:70:0d:17:e7:1e:ad:85:2d:f9:48:c5:4f:15:a8:
45:a1:3e:07:dd:fc:2d:27:26:47:28:be:9b:5d:6b:66:08:c9:
23:9b:54:a6:0b:cb:ac:a2:4e:e3:41:8e:45:1b:d8:ff:7d:43:
5a:02:a1:8e:c8:f2:6b:2c:f1:b9:e2:14:70:b2:a7:f8:9d:fe:
7e:98:8b:ed:bd:0d:66:56:32:5b:e8:b5:4b:41:03:fa:b0:36:
46:7d:59:86:ba:63:83:1c:1d:9d:f4:92:c8:d3:84:7e:36:2f:
b2:a4:29:e5:8c:2e:09:d1:aa:6a:37:35:f7:10:0c:2c:7b:67:
61:b2:7b:f6:3b:19:64:fa:12:4c:e3:39:2f:09:07:31:0f:5d:
f3:72:df:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:13:11 2025 by rpki-client