Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: Fuk/Q7EyRL7r+bGAvE2GMltqhC1qUP5FYKOonpQfKO4=
Subject key identifier: 5F:4E:9F:B3:3A:AF:FC:C0:3C:DE:5D:2C:F7:3C:7D:9E:D1:90:6A:66
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 0196C53A0BBE77B0B56EEFDAE77F8BC8D56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 1398
Signing time: Mon 12 May 2025 16:00:37 +0000
Manifest this update: Mon 12 May 2025 16:00:37 +0000
Manifest next update: Tue 13 May 2025 16:00:37 +0000
Files and hashes: 1: 3WjmScxyPShGMsEmfTcZS4RZUd0.roa (hash: 5cWtsZDvpUp+XvqnrWOkzcAs96EsLhbvVP+8UGNRG5Q=)
2: Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa (hash: DTiudzjdSu7JP8slciOiBe/Ykx5OQa6RusVSJBvKWj0=)
3: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: pZcHLJKdL472UiIbbDIrh+QRdtU1FiUhGbADYOu0Yo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:0b:be:77:b0:b5:6e:ef:da:e7:7f:8b:c8:d5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: May 12 16:00:37 2025 GMT
Not After : May 13 16:00:37 2025 GMT
Subject: CN=5f4e9fb33aaffcc03cde5d2cf73c7d9ed1906a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:48:91:b2:a2:80:a1:46:04:4b:11:50:01:
45:ac:d8:44:88:d1:93:3a:53:40:33:33:f9:ed:bd:
7e:24:29:bc:3d:07:0d:d2:9f:79:46:68:ae:5e:d6:
29:e5:be:3b:e1:54:3b:e1:f9:bd:19:0e:ee:ef:d6:
a1:5c:c6:17:de:c4:95:f8:a9:21:75:7e:9b:f9:62:
8b:e9:22:3a:6c:8f:2b:03:53:b1:4a:2e:af:01:20:
6e:41:95:e1:b2:21:25:f2:0a:08:f7:8c:d3:cb:2e:
fa:fa:57:f9:bc:f8:e4:65:ef:f2:5c:02:d6:3e:76:
b5:d5:c2:54:f3:8d:8e:80:55:a6:81:8d:94:cb:96:
9c:d5:69:73:5f:b2:24:46:c8:04:ae:7c:51:81:5e:
1d:e4:aa:bd:20:b1:b0:98:a6:d2:ac:ec:b2:6d:2a:
ca:5f:5b:ff:5a:b3:41:b6:bd:c4:c1:b8:fe:c8:c5:
af:77:51:68:cc:6c:28:31:5e:ab:67:d1:b1:5c:02:
f6:f6:15:3f:f9:17:b9:f0:69:d8:e9:35:ea:31:5c:
79:11:20:87:01:2b:c6:3c:80:f7:75:5a:6f:62:8a:
81:e3:23:7c:3e:08:42:6a:3c:53:f2:03:d9:8f:68:
c4:c7:f3:a3:9d:2d:59:29:d4:64:2c:d3:6c:79:65:
63:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:9F:B3:3A:AF:FC:C0:3C:DE:5D:2C:F7:3C:7D:9E:D1:90:6A:66
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:01:84:1a:33:c4:96:4f:59:54:95:00:39:70:0d:58:e3:b7:
71:4e:20:1c:08:14:63:39:75:13:71:96:85:86:d6:f1:79:39:
8d:cf:83:66:00:a8:81:a5:56:1c:07:bc:24:87:b3:1f:03:f3:
5a:47:b0:e8:c7:bc:c3:9d:bb:d0:7b:2e:69:9b:5f:92:22:b4:
94:64:3c:39:5f:f8:3b:84:a2:23:ba:b4:b8:c0:4f:8d:d8:0b:
75:19:bb:2d:a4:30:8d:2c:ed:b0:ff:1c:92:12:f2:14:f6:30:
66:f4:17:e9:9e:02:f3:50:3d:de:e0:4c:44:28:b5:85:4e:1c:
d2:39:ba:74:35:41:01:db:e3:33:4a:dc:92:9c:55:01:1f:aa:
3f:ce:cd:35:f6:90:19:db:24:3b:5e:82:15:25:16:17:10:db:
a5:be:47:ea:dc:e3:11:0c:f9:b1:e1:7c:1a:15:5f:6c:e2:68:
26:5b:55:0b:36:cf:56:b4:f8:52:67:43:bb:5a:41:d6:fc:06:
5b:ee:a0:3c:60:cf:54:b7:9b:1f:6b:54:e4:17:87:64:b5:02:
d0:a6:03:58:2b:8e:c6:94:cf:8f:63:d9:d8:c8:b3:8e:9d:43:
02:83:cc:ba:67:fd:7d:2b:d3:13:84:49:68:89:32:12:a2:e3:
99:c6:08:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:22:16 2025 by rpki-client