Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: +06WjsTJLopGr2FPWSH+Xf1ag6x3lW8DdvN2zyygfRY=
Subject key identifier: 01:DF:20:0F:A3:69:1C:62:D9:80:0D:D2:8F:7E:15:21:FA:AE:5F:2B
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 0196A01A8A70E232571404826C76A2E9AF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 1264
Signing time: Mon 05 May 2025 11:00:15 +0000
Manifest this update: Mon 05 May 2025 11:00:15 +0000
Manifest next update: Tue 06 May 2025 11:00:15 +0000
Files and hashes: 1: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: cEJl6zCqXF9PPzRiU6aul3OH56TOCGtVUxHI65RoTbU=)
2: mW-GeUTpPcmN505mq7SBylbmL1k.roa (hash: EwfFRwG/wTzHhkN3Xr0yb1fHBsnFoko8PwS4OTwxOW8=)
3: uEHKHGYpS2KvUkesU8pcDof-YA8.roa (hash: 0K5xoA85UHkcMnN3W22ATj/hyZFWzrQ7V/CmhuM4D7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:8a:70:e2:32:57:14:04:82:6c:76:a2:e9:af:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: May 5 11:00:15 2025 GMT
Not After : May 6 11:00:15 2025 GMT
Subject: CN=01df200fa3691c62d9800dd28f7e1521faae5f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:de:63:6c:df:55:c7:17:e1:31:20:f4:a3:
4d:6d:87:ab:7b:cc:1a:8f:f2:96:80:48:29:0c:94:
41:70:37:aa:46:2a:f8:50:93:40:e8:b3:6c:19:5e:
70:90:ce:28:cc:dd:96:f9:0c:46:20:c8:5a:88:e4:
e3:98:79:59:24:af:24:38:bd:24:22:98:65:bb:a6:
93:10:af:65:97:49:48:7b:0e:b5:23:1e:eb:b9:5c:
f7:9c:92:f5:5f:c7:80:65:62:16:75:a5:63:d7:58:
1d:0e:e5:9a:ec:22:0b:52:7f:6f:26:62:89:21:04:
55:7c:86:32:bd:45:91:60:8e:31:f4:9f:28:75:de:
41:db:4e:3a:fa:95:30:e8:38:7d:aa:d6:dc:bd:b3:
ef:a4:16:30:68:3b:ff:19:a9:28:2a:dd:47:85:d6:
8a:a5:f5:2e:27:94:95:64:91:f5:e4:24:f7:c2:2e:
25:9b:dd:b6:33:0f:8c:44:4a:b6:d7:ad:79:aa:57:
c4:3f:5e:d5:b1:e4:14:63:f7:b3:ec:1f:a4:ea:ee:
9d:0a:17:cf:6a:95:99:d5:b6:74:e0:e1:f4:af:69:
60:68:e5:6a:24:46:00:59:50:38:fc:46:09:ae:7b:
3d:55:e3:06:48:d6:d9:67:94:0c:e7:11:92:a6:98:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DF:20:0F:A3:69:1C:62:D9:80:0D:D2:8F:7E:15:21:FA:AE:5F:2B
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:45:45:77:e1:ec:73:02:71:9c:a8:e3:46:f6:e4:8d:23:2a:
51:23:1e:bc:bc:5a:f3:4c:2e:a9:ca:36:69:f7:cf:e7:45:b6:
71:5a:64:3e:18:2f:b2:35:2b:f1:4b:54:52:8a:46:6c:64:6e:
17:83:81:c7:aa:82:06:f8:b9:5c:e9:d3:79:1a:1c:0d:c8:1c:
b2:8e:59:d3:0a:f8:aa:3e:ea:dd:4a:4b:27:7d:76:37:ca:f7:
30:b5:f2:5a:d6:fe:a3:83:98:b2:8e:74:f4:4d:86:9d:fb:53:
d9:85:39:3d:c1:8e:86:e5:96:49:7b:c8:55:cd:1f:1d:8c:72:
12:3b:45:28:c1:a2:0f:83:7c:7a:96:64:05:41:fe:a4:1f:2d:
67:96:5e:50:b3:0d:34:72:cd:61:97:e2:85:90:38:a7:6a:4a:
85:d7:72:6e:93:73:34:b1:73:16:03:51:0d:3d:82:81:d2:40:
26:9c:32:42:53:22:20:07:73:03:25:91:aa:a2:54:01:69:51:
69:75:cb:a1:2e:3e:15:d6:32:93:62:10:1b:36:b2:7f:81:33:
40:bf:2e:f9:e0:a6:cd:2a:db:ab:82:2c:b6:66:40:9f:70:ac:
7d:b2:ff:2e:bb:ae:da:f5:63:d8:de:03:11:cd:3a:29:07:c9:
3e:4e:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:44:37 2025 by rpki-client