
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File: rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier: MGv+nV8DKAkev2NaRmEJPyP4jMzpec7eXy0ADcwrd6c=
Subject key identifier: CD:07:5D:61:EB:46:D0:2C:9C:40:DF:19:94:2F:0F:68:67:AF:F6:9F
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial: 0196A50A7F17764A84E7B92D311B71A8E5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number: 1145
Signing time: Tue 06 May 2025 10:00:50 +0000
Manifest this update: Tue 06 May 2025 10:00:50 +0000
Manifest next update: Wed 07 May 2025 10:00:50 +0000
Files and hashes: 1: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: WQY/3HWcuvzKEJcfffcz4IbXB/rFWUkIIQ0xoHz9sMU=)
2: w5lUFfISkdR1rbXpw9EFPEpBgSE.roa (hash: aLxhVjIpLB1JtYTTNVzOUaAGXHTvMRlaiMUbkJdp7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:7f:17:76:4a:84:e7:b9:2d:31:1b:71:a8:e5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Validity
Not Before: May 6 10:00:50 2025 GMT
Not After : May 7 10:00:50 2025 GMT
Subject: CN=cd075d61eb46d02c9c40df19942f0f6867aff69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:a2:c1:4b:15:80:4c:89:a4:bc:62:56:12:
c8:ca:ab:43:d7:e6:38:2c:aa:d6:3f:23:3a:df:06:
e9:6f:49:14:f8:2e:8f:59:f7:36:70:5c:42:1f:80:
b6:dd:05:66:96:3d:23:f0:e9:13:9d:86:0a:69:c0:
92:a0:ee:18:a3:43:34:d2:08:ac:27:b7:6e:c6:a1:
37:d5:b9:a4:35:ff:13:8c:a9:37:fd:12:78:1f:bc:
d0:f4:d4:f4:55:83:d6:fe:21:20:0d:9b:5b:04:7a:
41:f9:a1:c9:f4:44:e7:3c:d8:51:bf:d5:99:b5:f7:
27:bd:d3:e3:b4:30:ae:32:95:31:04:bc:81:53:c9:
ee:d9:87:5d:b5:f0:05:cf:eb:c7:67:e7:42:94:d8:
7f:f3:76:2f:3c:ad:d0:11:fe:43:a7:ff:79:b3:db:
32:17:fe:da:9a:73:d9:41:af:70:5c:05:8d:be:9b:
57:f2:bb:b5:69:09:b7:8b:85:cb:13:ab:55:0f:e8:
da:cd:1f:e3:cf:80:84:9d:52:e8:df:f8:12:ec:bb:
53:b0:5a:7f:1e:dd:f2:26:6f:58:69:d0:78:bb:6d:
c2:41:a7:a5:54:e3:43:a0:77:77:1d:63:e6:ce:9d:
eb:09:cb:01:93:93:ad:9c:c8:3e:de:ff:b6:cd:f7:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:07:5D:61:EB:46:D0:2C:9C:40:DF:19:94:2F:0F:68:67:AF:F6:9F
X509v3 Authority Key Identifier:
keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:22:b0:c9:4a:c3:a1:35:ee:d3:a3:d5:b5:f2:63:bc:d1:e7:
2e:85:a5:f9:3b:f5:f0:87:68:79:1a:b9:d6:32:98:f9:34:bf:
9c:27:53:49:ad:a6:59:7e:8a:e5:f3:20:b7:ec:7d:af:a9:c3:
2b:65:07:7e:d5:8c:e5:f4:d7:21:3e:cd:01:1c:ce:e0:28:48:
eb:2c:fb:ad:8e:5c:f3:a5:ac:b8:7e:ef:d3:39:2a:0f:18:26:
d4:bf:37:04:43:e6:80:2f:3a:23:3d:95:b1:9e:28:10:a1:a9:
bc:71:a5:d2:9e:f8:01:bc:d9:ef:c0:e3:15:02:09:48:fc:be:
f1:84:10:2e:61:97:49:88:2f:29:ff:b8:c7:a4:86:34:c1:e3:
96:69:0e:b0:d4:b1:c2:13:18:77:90:a3:0d:60:95:52:00:d5:
e9:55:6a:ce:71:e1:ea:37:83:5a:63:85:f0:7c:3d:b1:86:06:
8b:4f:91:d1:0b:c3:ba:17:67:2b:75:7a:2a:7f:bb:a6:ec:df:
ba:84:ab:55:d8:89:0f:26:97:9f:87:e0:bf:4b:3a:1c:76:03:
10:fc:ec:aa:99:9a:82:6e:7e:3f:d6:ce:9a:c6:8b:68:c2:12:
0a:7f:44:25:7c:50:80:22:84:2f:8c:2b:ae:49:53:5f:cd:f2:
c3:db:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:55:57 2025 by rpki-client