Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
File: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft (raw, json)
Hash identifier: dw5u+ENViWtdV/3UDd8zcWn+A5Dc3l7ft/PgtG1NU1Y=
Subject key identifier: 4F:6C:8B:C3:03:D7:62:40:EF:8B:82:FC:35:15:E8:A0:E0:A0:CE:4E
Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
Certificate issuer: /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Certificate serial: 0196A0BFB16387251E3B9CC7DD53F2E2FB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
Manifest number: 019F
Signing time: Mon 05 May 2025 14:00:39 +0000
Manifest this update: Mon 05 May 2025 14:00:39 +0000
Manifest next update: Tue 06 May 2025 14:00:39 +0000
Files and hashes: 1: a8IXKpHV3NWa7LICJ758JvcRIvY.roa (hash: X2zHQ2bSxMYP23moGooOgAvqdrG84QharuHsT6bVARw=)
2: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl (hash: kZgjdJWtOURJTKojS7VP907T55cyu3Ocrf0KunhupRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:b1:63:87:25:1e:3b:9c:c7:dd:53:f2:e2:fb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Validity
Not Before: May 5 14:00:39 2025 GMT
Not After : May 6 14:00:39 2025 GMT
Subject: CN=4f6c8bc303d76240ef8b82fc3515e8a0e0a0ce4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:b3:c9:38:60:04:0f:04:02:55:34:f3:25:
44:24:f1:42:e4:50:ad:a4:54:12:ca:d0:34:69:d0:
2a:3f:cf:72:14:b4:6a:68:d2:cc:f5:d6:9b:15:9f:
ea:98:8b:39:ff:88:03:46:b9:89:7e:ed:bf:24:b5:
cf:64:53:56:ff:36:21:3c:15:d8:61:88:79:3d:3f:
77:e4:dd:9f:ec:56:5c:cb:47:c0:94:62:e2:72:5b:
c0:92:71:25:f2:81:27:83:cf:ec:3f:6e:6e:e4:74:
19:f3:2c:4c:59:52:0f:7a:94:f2:f4:8c:4b:db:90:
85:99:48:db:44:55:b9:89:c5:c0:3c:c0:8f:22:f1:
44:6f:a5:17:98:7b:26:56:89:68:54:7b:85:4c:14:
0b:76:99:58:79:2e:68:3e:23:08:ed:f3:3a:9e:4c:
1d:01:2a:c9:07:87:75:09:46:03:4a:a1:ce:05:be:
09:0b:01:7f:83:db:ff:0b:bd:c4:07:f7:56:c9:1b:
01:a9:bf:24:55:f0:da:b8:52:f7:82:ef:23:c7:dd:
eb:88:a4:90:17:19:2a:0e:2a:c0:f7:c7:57:92:95:
78:81:dd:87:33:01:61:4a:a8:7f:4c:f0:3f:86:94:
7f:d3:55:84:02:be:45:68:54:30:6a:28:d7:97:cb:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6C:8B:C3:03:D7:62:40:EF:8B:82:FC:35:15:E8:A0:E0:A0:CE:4E
X509v3 Authority Key Identifier:
keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:11:2e:4a:18:6d:b1:1d:3d:60:1a:d0:6b:85:ed:8c:6e:33:
a5:6a:a7:f6:e6:6c:c2:3d:af:c3:ef:a2:6d:e2:28:0b:c8:eb:
a1:41:ec:93:df:66:3a:d0:dd:cc:8b:c5:12:fd:51:06:07:cd:
20:be:c4:7b:40:7b:a6:b6:f6:d1:1e:0f:1c:79:2d:db:33:21:
3d:10:28:2c:df:f0:3d:5d:ec:4b:cf:45:3e:57:86:58:52:c9:
2b:8d:68:7d:f4:a7:4c:f8:b9:85:7b:c1:84:2a:bf:3c:64:29:
ce:7c:68:7e:d4:75:7b:d3:0a:a9:5d:bd:8f:35:3b:b6:60:e9:
4d:d8:fd:7b:b7:7e:4f:3b:fa:45:dc:cb:62:e6:33:46:43:2c:
5d:18:8f:28:ec:a0:63:19:e4:02:00:bc:a8:b1:7f:1f:5c:3e:
af:30:00:2c:0a:df:9d:05:96:55:f2:77:8e:63:95:65:15:65:
e9:fc:1f:09:f3:c7:b8:f2:1d:58:7e:fb:0f:f9:bb:9d:c1:13:
de:76:1b:15:5a:84:05:01:06:ff:7e:ba:c1:ac:c2:13:bc:7c:
a4:04:4e:f5:07:c4:3a:8e:21:bf:81:ae:03:62:cd:23:e3:52:
20:fd:b5:fd:cb:df:dc:37:e9:b7:c3:b8:e3:57:bb:92:4b:dc:
09:e8:5b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:07:54 2025 by rpki-client