Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
File: jdADrwR3TdPjlzBJeYmjoXFRYlI.mft (raw, json)
Hash identifier: 4CwsBVd7XPbJex6aqewlLrZWvULPDa+ddIyPoKNVsKs=
Subject key identifier: EC:DC:C3:2C:0F:99:37:95:4A:95:93:95:3D:A2:96:2B:D5:E5:80:00
Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Certificate issuer: /CN=8dd003af04774dd3e39730497989a3a171516252
Certificate serial: 0196C3B9B2D92A9F1F71D53DA406A02B24B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
Manifest number: 0FDD
Signing time: Mon 12 May 2025 09:00:48 +0000
Manifest this update: Mon 12 May 2025 09:00:48 +0000
Manifest next update: Tue 13 May 2025 09:00:48 +0000
Files and hashes: 1: jdADrwR3TdPjlzBJeYmjoXFRYlI.crl (hash: iOwqyB7XHlTAoD4mI7pLAZA1kv8ZjsPNmxAM1XdykJs=)
2: qyViuV165L-xE7uYQ2sF7wlGYBU.roa (hash: 0KdoKDI8ZdUz1uym9xGUbcM+qAI/3kuRuqeRZbordfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:b2:d9:2a:9f:1f:71:d5:3d:a4:06:a0:2b:24:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd003af04774dd3e39730497989a3a171516252
Validity
Not Before: May 12 09:00:48 2025 GMT
Not After : May 13 09:00:48 2025 GMT
Subject: CN=ecdcc32c0f9937954a9593953da2962bd5e58000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:b3:75:0d:5a:42:ba:22:0d:ca:ce:3c:01:
a0:97:b9:c4:2e:3a:8f:3d:ac:06:21:91:dd:99:7c:
19:a5:ca:94:19:42:bf:d9:ca:25:c7:0d:4e:53:da:
09:54:33:83:18:88:c5:33:9a:7c:c9:8f:90:ba:a3:
65:6c:84:49:82:a4:18:d7:b4:4c:ee:2f:ff:1a:46:
7d:0c:6d:bb:72:80:9f:1a:c3:65:fa:9c:61:d2:d0:
91:de:c0:7f:2e:10:db:b1:c6:12:13:81:6d:42:47:
b0:60:bc:78:65:a3:49:9d:bd:58:d0:e2:d1:e3:09:
9d:0f:c8:4b:3a:bc:69:0a:2a:d6:4b:20:40:84:86:
3d:bd:5e:03:1b:8f:62:cd:27:c8:64:9f:55:2c:62:
90:c4:a1:4c:81:aa:94:63:27:17:7d:0c:88:e0:71:
2a:31:f2:7e:98:05:5c:ca:fd:ed:19:51:34:d4:84:
3a:be:f4:ff:e8:a5:cc:10:3d:01:c6:fa:49:87:9b:
b5:7f:ed:17:56:d4:02:d2:5e:24:ff:9f:b1:58:c5:
ac:a7:77:62:45:c7:8c:e7:74:bb:9b:ba:dd:f2:70:
60:1d:f0:9f:d8:20:2b:35:43:1f:26:71:bc:ad:dc:
19:b5:6d:b4:c5:67:a1:16:91:70:b1:8e:be:ee:38:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DC:C3:2C:0F:99:37:95:4A:95:93:95:3D:A2:96:2B:D5:E5:80:00
X509v3 Authority Key Identifier:
keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c2:40:06:a4:10:cf:37:ef:30:23:a6:88:12:a4:d9:20:83:
5d:64:bc:68:6c:b5:77:27:59:a8:69:1c:45:b5:48:35:25:d4:
8e:c7:72:60:5c:f6:87:a5:f1:d3:36:bf:1e:4f:b9:97:cd:95:
ce:62:cb:86:d4:e5:d0:ef:93:61:4c:89:90:a7:d2:37:08:b6:
e3:cb:3b:cb:f8:e5:c5:60:e1:95:32:5c:58:8e:6f:6f:9c:18:
a9:3c:e2:02:4c:1e:19:47:e9:1e:d0:0d:c8:5f:31:2c:c9:ed:
50:f7:32:69:42:9e:94:b3:80:15:c9:8a:7f:d0:43:c1:78:6a:
9e:db:00:f3:02:f0:4f:34:c8:38:06:8c:23:79:20:9a:35:a7:
72:7c:a3:fc:fd:70:28:40:a3:c5:7f:9a:c8:19:18:94:9e:cc:
5e:e8:d6:41:39:85:b5:68:85:22:70:6e:8f:ef:b9:b8:c2:29:
88:55:50:f5:c4:8f:bf:60:44:e7:2b:54:77:c7:b5:f1:88:a2:
e0:16:62:07:5a:d3:b3:29:a1:a9:8f:12:5c:be:35:1e:77:a9:
ca:c1:c2:9b:b2:27:af:08:0a:d4:af:8a:de:4a:cf:02:92:f8:
53:88:5b:55:2e:0e:3f:f7:7e:55:8a:1d:bd:21:65:d4:2a:f4:
60:01:63:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:46:50 2025 by rpki-client