Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: OuQ2ZdSCSljPOWigMhF0nsQ4sEPEh7Hix2guCUslEnY=
Subject key identifier: A2:C5:2F:50:22:49:26:66:BD:32:38:F2:63:88:43:34:F4:6C:BB:4F
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 0196BC372672DAB6CCE20A172D0D2FF73A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 13E7
Signing time: Sat 10 May 2025 22:00:52 +0000
Manifest this update: Sat 10 May 2025 22:00:52 +0000
Manifest next update: Sun 11 May 2025 22:00:52 +0000
Files and hashes: 1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: FXCOo3wHUPxhPC87gy9GBypm9O19SXMBgGyYrYq459s=)
2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:26:72:da:b6:cc:e2:0a:17:2d:0d:2f:f7:3a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: May 10 22:00:52 2025 GMT
Not After : May 11 22:00:52 2025 GMT
Subject: CN=a2c52f5022492666bd3238f263884334f46cbb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:b2:f4:7f:b7:9b:39:4f:ad:13:1e:09:9b:
72:7c:31:f7:7e:6a:7f:ff:23:f4:f8:cb:38:1b:6e:
45:42:98:fc:03:c1:95:84:ff:82:65:02:56:4d:e9:
18:4a:33:63:b4:2e:e0:56:9a:b3:cc:24:44:7d:c8:
92:dc:eb:f3:0f:db:08:ea:4c:50:f4:ac:80:4a:30:
7e:52:c9:e6:0a:e5:7f:8e:86:15:e1:69:de:05:44:
f8:be:06:bc:27:c3:74:60:c1:9b:f9:98:da:6f:a6:
eb:33:54:30:9e:8f:f5:5e:49:34:22:1a:32:1f:15:
24:6f:fa:57:d7:42:f2:cf:77:f3:0b:89:70:94:8e:
35:2f:8f:8e:9e:10:d7:4e:47:2d:41:a8:b7:2a:3c:
cc:58:53:20:88:e9:57:0e:71:ab:54:e3:e1:3d:83:
f4:0f:a0:1b:05:24:60:c3:6d:6f:74:72:1c:7c:a4:
a9:99:06:46:6c:53:20:e9:7e:d1:54:b1:5c:e2:18:
0a:79:47:8a:3e:1e:13:e8:f5:c2:60:62:23:0e:5f:
3a:57:d1:91:ca:54:fc:83:33:28:ba:4b:9c:39:58:
74:d2:d7:60:7b:3a:80:e5:3b:3c:5a:2e:f0:06:f1:
24:d2:0a:51:1c:91:69:5b:ac:fb:ed:69:a2:f5:31:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C5:2F:50:22:49:26:66:BD:32:38:F2:63:88:43:34:F4:6C:BB:4F
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0b:ab:e3:64:7f:7d:7f:c8:c7:fd:cb:91:41:65:30:27:12:
83:33:bc:8c:8d:11:1b:a5:9a:00:83:83:84:b9:61:69:d0:aa:
da:73:40:5d:b1:a4:b1:a3:95:f4:f3:3f:a3:85:24:f8:d8:a4:
01:0d:45:ef:80:1c:7a:56:b3:83:5d:1a:bc:8f:e4:2d:cc:c1:
fa:e3:a3:a4:c7:32:c5:96:67:83:7f:8f:3e:4f:9d:97:d7:48:
c6:98:a3:ec:41:56:93:d8:66:87:0d:17:68:c3:9e:cf:ac:9e:
c1:9b:bc:0f:3e:7f:7c:0e:36:74:b1:a5:fe:9d:0a:ae:8d:45:
00:ff:ef:02:f8:32:08:3b:01:cf:59:1c:22:12:8d:a6:6b:64:
cb:66:31:ce:c4:73:fe:8f:e4:32:3b:6c:17:93:65:a6:ba:56:
c7:3e:c6:b0:94:eb:d6:80:cc:14:5a:cd:a1:31:dd:6a:50:81:
d6:e2:f2:a9:05:0d:27:b9:f3:e3:34:60:85:1b:1a:bc:3d:1e:
74:42:ef:b8:7b:01:56:1f:23:32:7e:2a:7f:c3:36:79:c0:2a:
a8:01:b8:ad:de:18:e5:0c:09:d6:b8:f9:b0:dd:ac:af:ae:ae:
ad:6d:14:8e:ae:c1:37:9f:65:09:ef:ff:59:23:15:6c:17:26:
3a:69:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:27:43 2025 by rpki-client