Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: vhAh1OkeU3lTfVzOw3UdzKawVRU8mDBnKx2kq3nj4Z4=
Subject key identifier: 7C:15:54:CF:19:59:16:CA:D5:EE:3C:8E:2A:B9:3A:8D:CC:B0:5C:B9
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 0196A72F38529AAF9622B16871A6252BD0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 0182
Signing time: Tue 06 May 2025 20:00:11 +0000
Manifest this update: Tue 06 May 2025 20:00:11 +0000
Manifest next update: Wed 07 May 2025 20:00:11 +0000
Files and hashes: 1: EZBWVER6RlsPS5zwpSfeXDYY4_4.roa (hash: TmP6HB2vfugTxNqU8/mbrbGgjAkZNuZVMOPZ6v4m2ZU=)
2: UWM-Kz1OP0UjWcYPffeOWK62TZs.roa (hash: lnPff/3R3t0peMh+icEOeZMrkDG2dfoemotH4CHOKR8=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: XQuZ9VWhZUDop4wXY/f/egZiDITrCga3DmJ6ZD97iMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:38:52:9a:af:96:22:b1:68:71:a6:25:2b:d0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: May 6 20:00:11 2025 GMT
Not After : May 7 20:00:11 2025 GMT
Subject: CN=7c1554cf195916cad5ee3c8e2ab93a8dccb05cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:62:5e:cf:13:b7:61:5c:97:b1:b3:eb:19:b5:
b2:d3:79:cd:79:59:61:90:90:b6:dd:73:1c:f9:83:
98:16:ef:f5:67:8c:a2:bd:65:c8:ba:b5:92:94:bd:
a0:04:34:2f:4b:f9:75:c9:50:19:c7:91:b7:33:0b:
ff:fe:6d:f8:77:4e:34:26:fc:df:7a:9f:bd:85:ba:
b2:60:e8:02:22:08:f8:9d:c3:01:c5:8a:f3:9e:8d:
6f:50:8f:63:03:1c:c7:0f:ef:3e:a5:ad:95:a9:f8:
89:cf:c7:dd:fd:b7:16:c7:27:af:91:fe:a8:46:f8:
fb:48:25:6b:e0:f4:61:7f:a0:83:1d:1e:16:d3:8b:
7d:d0:5e:38:34:8c:08:b4:66:02:35:b3:bb:48:49:
08:9a:7d:06:32:70:3f:d2:49:f3:8a:02:00:0f:64:
d7:10:74:2c:63:fe:71:6e:4c:34:d6:64:9d:f5:22:
0d:9f:84:52:79:53:d6:cd:d1:82:f9:2b:85:52:e6:
97:bd:1f:52:55:b1:fb:58:86:bf:5a:eb:5b:83:92:
38:b3:96:d8:3c:06:cc:de:5f:a0:91:a1:38:cf:e3:
93:9b:28:2a:1c:16:a3:c7:1d:01:e7:b4:6e:c8:44:
75:0a:97:9c:28:48:fb:24:a1:5a:58:6c:b7:95:89:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:15:54:CF:19:59:16:CA:D5:EE:3C:8E:2A:B9:3A:8D:CC:B0:5C:B9
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3b:26:0c:c3:99:f6:6c:05:d4:ca:6c:cd:71:1d:c1:78:d7:
cb:17:f4:25:1f:e9:8a:88:bb:2d:43:27:4e:8d:59:b1:5c:75:
a0:7a:77:87:4d:72:58:17:ac:41:cd:7e:d2:3d:7a:20:94:26:
e3:9b:49:18:4e:d0:13:2a:2c:42:67:ad:91:fd:23:1b:3a:f4:
b2:2c:cd:a1:18:ce:cf:bd:e4:0b:d1:d3:92:3f:fb:06:a5:fc:
ae:4a:25:26:fb:dc:d3:19:76:2a:49:57:94:e5:33:ed:8e:6c:
95:7c:c1:68:3f:e3:bb:57:4c:a6:02:a8:36:ee:0d:5f:83:dd:
fc:aa:aa:60:da:e2:d0:9e:04:6c:0c:c8:77:31:81:91:aa:1c:
ac:c0:df:64:e4:a5:55:ed:92:4c:ce:80:a2:5d:16:c5:5e:c1:
a5:70:4f:9f:54:d0:3b:b7:83:ea:67:7d:77:b5:5c:1f:ed:fd:
5e:4b:0f:b5:20:db:c3:c7:1b:79:7c:0e:ae:ee:f7:f1:00:dc:
2f:1f:6b:d2:3e:9a:e7:91:4a:c2:df:eb:f9:c9:8a:18:4d:ee:
c9:c7:e1:7d:49:48:25:19:7d:66:9f:c3:8e:2e:29:00:33:75:
12:de:e5:a0:28:8d:eb:04:5d:a1:03:b2:32:5e:ef:f5:25:6e:
b6:f8:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:11:06 2025 by rpki-client