Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
File: _JRi_vSVJI_b2XNCH96-IWJc3x4.mft (raw, json)
Hash identifier: fPP6cS59NbKWl/UU2vkNeCnEcXiwPAJJVzl2DdLi5S4=
Subject key identifier: 11:97:8B:CF:67:DD:86:67:E8:22:A9:DC:4C:FD:1C:14:48:F4:53:AC
Authority key identifier: FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
Certificate issuer: /CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Certificate serial: 0196C64C501784A459F2C565399F56E786AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
Manifest number: 0652
Signing time: Mon 12 May 2025 21:00:12 +0000
Manifest this update: Mon 12 May 2025 21:00:12 +0000
Manifest next update: Tue 13 May 2025 21:00:12 +0000
Files and hashes: 1: BDRq07Y2Ic1D-Bm-FTXEa9UI32w.roa (hash: GyOmTeK7tEqB19UhqOc1QRh1j0nV9QbQWD6z1N7zZ2I=)
2: _JRi_vSVJI_b2XNCH96-IWJc3x4.crl (hash: xcNX3eJI76/IfsZH1INLSHG6F9RqHB/+0pLQRl3jC8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:50:17:84:a4:59:f2:c5:65:39:9f:56:e7:86:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Validity
Not Before: May 12 21:00:12 2025 GMT
Not After : May 13 21:00:12 2025 GMT
Subject: CN=11978bcf67dd8667e822a9dc4cfd1c1448f453ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:35:59:53:32:22:a3:81:24:bb:3e:16:d2:
60:81:7f:74:1a:9b:6a:83:26:f2:8c:ed:86:e7:bf:
fd:b3:8a:20:b8:8e:78:d4:29:cc:e0:cd:ec:5e:7d:
4a:1b:7e:be:a1:03:b9:4b:01:ad:f8:21:52:1b:2e:
5d:8d:aa:54:28:ac:5c:21:3d:0a:0f:02:f0:6e:62:
5a:5e:2a:b6:30:5d:8f:db:84:1c:44:0e:ef:aa:cd:
e9:1e:5e:ac:18:81:aa:d5:9e:06:be:69:04:37:ae:
48:6b:9a:3c:73:d4:0e:71:a5:eb:25:90:63:43:74:
19:22:bf:7e:fd:94:18:05:f5:34:33:8e:71:1d:f1:
b8:70:b1:5c:c0:75:97:36:80:ea:d8:95:ea:fa:65:
b0:4e:86:63:71:89:12:ef:11:9b:5e:40:33:20:90:
b5:80:7b:23:8d:4f:27:8c:18:b4:bf:a4:8f:48:df:
3c:75:a9:a2:c6:cc:f0:09:1d:74:15:6c:6c:12:0a:
a5:53:27:e5:b9:7d:d8:98:e3:7d:3d:d1:57:5a:af:
a9:42:73:14:b7:9b:68:c1:30:dd:58:41:ec:31:c6:
f6:2a:8b:64:ef:a8:23:cb:4f:38:1c:51:3a:77:04:
b9:0b:c5:6d:3e:f4:47:6b:60:90:8e:4e:26:f5:e0:
c9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:8B:CF:67:DD:86:67:E8:22:A9:DC:4C:FD:1C:14:48:F4:53:AC
X509v3 Authority Key Identifier:
keyid:FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d1:a4:ec:43:c3:2e:66:c6:8a:b7:9d:b5:34:b9:6a:1f:b6:
1b:60:3a:4e:6a:1c:cc:2a:91:94:d7:35:a5:68:99:ef:be:21:
91:8d:bc:d2:b1:92:b9:2a:1f:09:cf:97:0a:d6:0b:cd:0f:1d:
b4:a9:19:d6:03:f4:a1:ec:de:0d:0f:4a:0f:01:a2:c5:1d:f4:
1b:61:e0:09:90:3c:88:2e:5e:94:2b:fd:40:6a:89:a6:bd:41:
a2:69:70:a1:fd:18:4d:27:01:98:3b:84:23:c7:9c:ab:d8:3a:
05:c0:cd:eb:ff:59:ab:f8:cd:08:c8:09:a8:2f:1b:22:b0:35:
c5:ac:c6:27:28:f0:6a:d4:d4:60:e5:4f:13:82:aa:08:d0:46:
b8:a4:cf:13:20:96:f4:76:c4:5d:26:fb:28:e9:d1:77:92:cd:
cd:21:4b:42:fd:b7:56:8f:44:f9:7d:5b:10:d2:c6:9c:2b:e6:
ac:09:fa:94:c2:cd:0d:93:2c:3c:fe:1e:1b:37:f9:a2:18:ad:
b8:ba:c5:98:ef:cd:eb:0b:d2:85:64:9d:50:be:5b:c2:23:ec:
80:b2:78:46:86:ce:b5:93:b8:f1:30:73:0b:a9:d2:05:b0:20:
92:ed:7e:e7:d2:89:cd:bc:eb:5f:c1:7f:00:43:dc:03:b2:63:
c3:d0:74:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:35:56 2025 by rpki-client