Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: WcOl/Do1tT0InVMXj8oxP7YV7LlpaXRHJgZSjD3L4lk=
Subject key identifier: 05:78:2B:7D:FA:63:62:E8:BE:7C:C2:99:3A:48:B6:BC:3D:32:B1:0A
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 0196AD685E4EF0C7CA38AB2F7B47068D93FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 0113
Signing time: Thu 08 May 2025 01:00:20 +0000
Manifest this update: Thu 08 May 2025 01:00:20 +0000
Manifest next update: Fri 09 May 2025 01:00:20 +0000
Files and hashes: 1: 1-nkTyOMqH94a8OlfukcDf7YbkNc.roa (hash: Z6uvUYmhirGQlJwClrs+HtNhQJGa2PNo7VCbu68pXz8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: uO+Q9XzwUfqTG7G7/pf+KpiefO5DxsUnFiKg+wF4B0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:68:5e:4e:f0:c7:ca:38:ab:2f:7b:47:06:8d:93:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: May 8 01:00:20 2025 GMT
Not After : May 9 01:00:20 2025 GMT
Subject: CN=05782b7dfa6362e8be7cc2993a48b6bc3d32b10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:fe:b0:2b:f7:51:2e:17:81:ef:89:e6:d7:
cd:3b:be:41:6d:47:99:b8:84:5e:36:e3:d4:82:db:
7a:7a:08:5c:fd:a8:98:f4:b1:45:d8:2a:48:a5:3c:
a2:7b:9c:7c:36:58:0f:e4:dd:36:63:f4:ab:c1:88:
29:2b:a7:36:dd:22:b5:9a:e9:78:75:95:18:2d:90:
de:a9:41:dd:ea:76:81:ce:bc:28:cf:dd:4b:13:37:
f6:17:cd:b4:1b:9b:53:0c:47:39:6d:30:3e:bb:be:
6b:b6:ed:67:52:98:c4:df:3a:2a:7a:85:1a:25:6b:
de:80:f6:d9:42:86:80:a5:1b:d8:a1:e2:9b:33:08:
c0:76:86:e6:6b:b5:d5:36:c8:91:2f:17:53:47:0a:
bc:c3:e5:ba:43:83:2a:52:84:c0:9b:94:03:6a:e1:
23:60:d8:b0:ca:8d:1a:3b:25:30:7f:0c:8a:bf:4c:
98:6e:37:e8:cb:0b:2a:31:ed:0b:0e:1e:5a:73:30:
39:e9:ae:7e:62:ee:12:37:d3:18:88:63:e5:59:18:
dd:36:d6:8e:57:8b:6a:71:10:96:b8:4c:81:e4:bf:
04:dc:e7:9d:3d:08:eb:f3:61:41:62:d2:0e:00:b2:
1c:33:1b:93:c3:05:9f:44:73:4a:85:b5:fa:ea:a2:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:78:2B:7D:FA:63:62:E8:BE:7C:C2:99:3A:48:B6:BC:3D:32:B1:0A
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e6:df:bb:9d:c7:54:cc:ef:1f:cf:86:23:90:c1:af:8f:71:
19:88:43:15:66:eb:c3:6a:87:23:ef:fd:0c:24:4e:fe:02:ad:
98:35:dc:4f:c8:29:bb:18:bc:68:29:cd:fa:50:63:4f:56:29:
bf:3a:e5:60:ca:af:72:7e:bf:61:34:bc:4a:ed:14:60:35:f8:
d7:d0:98:f5:f7:5f:0c:68:ef:66:7c:b9:5f:27:ce:cb:6f:28:
2a:00:58:ad:fe:63:09:cc:d2:c2:cf:c1:d4:10:38:1f:e9:4d:
2a:79:9f:8d:d5:c3:9d:d2:57:0d:f2:dd:8e:6f:41:29:7b:35:
9a:97:a3:21:54:b5:7a:8e:39:5c:f7:c4:c7:dd:ec:c8:6a:a0:
be:a2:60:6c:d1:3f:c9:0c:dd:af:6a:16:f8:4d:51:82:af:2c:
75:e0:85:bb:b4:99:d3:f1:15:a7:87:85:cd:68:0d:cf:a0:64:
57:e4:c0:d9:22:5b:d0:f9:d1:39:ac:2e:19:56:99:3e:74:d9:
ec:c3:19:5b:e5:7b:5c:53:85:88:95:45:3c:12:bf:13:b7:4a:
e9:29:fc:ac:f3:34:db:9d:5b:ff:00:f5:de:c5:f8:7b:4f:fc:
73:e5:31:7e:93:a3:77:24:94:e6:9d:01:ba:65:8e:c7:64:ad:
b0:f1:ba:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:03:11 2025 by rpki-client