Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: BwXt4hkggOHAPSPdgZLu+jMHu+2bvHPJNbcEIjIOoh4=
Subject key identifier: 66:27:2E:BD:FD:C9:D3:B1:37:88:DD:5C:3A:2E:7B:B5:C8:67:6C:E4
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 0196A0F6ACD934C60403AC94CF2CCD1BE622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 0C5C
Signing time: Mon 05 May 2025 15:00:42 +0000
Manifest this update: Mon 05 May 2025 15:00:42 +0000
Manifest next update: Tue 06 May 2025 15:00:42 +0000
Files and hashes: 1: TNPcdBpnbKooEgmUt2YrkLdYDmQ.roa (hash: WQcIls3E5pX4tymrsMPubCPP31sHiDGN5xYJkHTcWEg=)
2: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: 6EC0t0OP5hh0oFU+Mb4V/z+JoSq4q4Km20N/kcEMoRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:ac:d9:34:c6:04:03:ac:94:cf:2c:cd:1b:e6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: May 5 15:00:42 2025 GMT
Not After : May 6 15:00:42 2025 GMT
Subject: CN=66272ebdfdc9d3b13788dd5c3a2e7bb5c8676ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:28:b7:98:59:93:0a:dd:6d:05:d4:a6:52:
77:17:33:ce:e0:09:4d:c7:47:c3:54:92:83:a5:a0:
8c:02:75:54:40:b9:33:ee:b8:b7:3a:51:83:aa:c0:
00:65:d2:91:2d:aa:63:90:30:69:be:03:a9:46:8d:
fb:c8:20:a1:fc:3b:b1:70:99:da:47:44:45:5f:c5:
25:0b:73:09:d2:ab:6c:97:4c:32:96:18:3e:2c:27:
f1:d3:ce:9b:c4:53:2b:0d:14:ce:ee:35:6b:af:36:
89:48:ad:ce:be:2f:f4:aa:f5:f3:93:8e:da:f4:ae:
63:f3:33:4e:ef:9a:b1:c9:a1:bf:b9:92:46:7c:99:
d8:bd:42:14:c0:8e:a1:96:c1:59:61:53:ca:d8:1d:
3f:38:e7:a2:9f:39:25:b9:c4:16:29:d8:88:7d:7d:
55:a3:59:0a:69:01:0c:7f:47:8d:b1:b5:7b:cb:37:
f0:ae:b9:5f:a6:78:f0:27:80:3c:09:c7:ef:66:cd:
8f:57:fc:64:e5:52:be:9f:ab:ea:05:fc:be:c6:37:
24:49:20:73:37:2b:2f:af:f6:1c:3c:55:c0:7a:04:
c5:b6:3e:4d:ff:d2:9f:47:dc:62:35:e1:1c:a2:d1:
62:c2:0e:e5:1a:69:1b:11:d3:72:8a:ee:bb:13:46:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:27:2E:BD:FD:C9:D3:B1:37:88:DD:5C:3A:2E:7B:B5:C8:67:6C:E4
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:05:a5:d3:3b:25:e8:e6:fa:11:54:6f:96:7e:58:00:de:9d:
3e:e1:89:17:d2:aa:7f:c7:eb:39:73:c0:b8:35:89:60:ba:ad:
ef:b0:0d:83:79:6f:bf:ca:29:97:2a:16:a3:a0:48:ab:a2:0e:
1a:4e:59:77:a9:d5:08:7a:b8:2c:f7:af:fb:3e:39:fe:7f:f2:
5a:27:74:d6:9d:4a:12:8f:76:29:25:2e:c1:9b:df:51:ec:17:
b2:aa:b0:8e:65:3c:31:79:a9:be:58:8b:44:55:da:5a:5c:c6:
83:9b:5a:e8:45:a0:0a:7a:f8:b6:02:ef:3c:9b:6b:73:c2:0a:
e0:70:a1:5f:83:c3:9e:2b:60:b4:3e:77:59:bd:98:66:3b:f3:
16:b4:d8:4b:f6:f3:1f:3a:30:2d:f1:06:b2:4c:9b:ac:13:ad:
56:b5:0e:56:5e:7d:89:84:71:9c:1b:62:47:2a:79:7a:bc:36:
e2:e6:02:00:3e:04:74:a5:48:ee:34:04:80:7e:f5:2a:4e:c6:
1e:2f:a0:43:af:d3:0b:1f:5a:6b:2e:04:92:16:47:23:f4:66:
22:ff:c3:fe:de:4b:6b:6a:8c:c9:c2:a7:00:ef:98:5f:b5:e5:
c8:75:7a:0b:62:7b:e3:f4:f8:bf:c7:01:34:08:79:a3:05:21:
83:f1:b7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:42:47 2025 by rpki-client