Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
File: jc5N9oBEmFoXezAy8A_G_iJK2LM.mft (raw, json)
Hash identifier: AJ//6SC7zKolFT4RemRSSuRWXTcan128hxTIAR9mPqk=
Subject key identifier: 2F:A5:EC:E6:A3:10:CE:28:02:B0:23:CB:32:D7:EB:73:D4:E1:4F:47
Authority key identifier: 8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
Certificate issuer: /CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Certificate serial: 0196C916CD44875B19FC83239D7B4F3B5B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 10:00:36 +0000
Manifest this update: Tue 13 May 2025 10:00:36 +0000
Manifest next update: Wed 14 May 2025 10:00:36 +0000
Files and hashes: 1: QH9tbxKSp0iUql0lb1UYZe-9C60.roa (hash: j+EJALijkJNAty5MEqMWdkPqVKhawk2tfizWedc8Uwc=)
2: jc5N9oBEmFoXezAy8A_G_iJK2LM.crl (hash: 421ZopOZ++b9+rFYps2s01KJlf5TR6UomsHpxoMiTz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:cd:44:87:5b:19:fc:83:23:9d:7b:4f:3b:5b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Validity
Not Before: May 13 10:00:36 2025 GMT
Not After : May 14 10:00:36 2025 GMT
Subject: CN=2fa5ece6a310ce2802b023cb32d7eb73d4e14f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:1d:57:a9:55:1b:41:74:09:3c:c9:65:b0:
6d:73:f5:f8:b7:6b:75:4f:f0:1e:95:52:6a:09:77:
4d:1b:e9:14:d5:0c:b1:0c:82:65:3d:08:df:4c:8b:
50:0a:53:c9:dd:ea:2e:94:fa:30:9c:e4:b5:85:6c:
8c:b8:ae:16:49:da:e6:17:4a:89:b4:63:f1:3d:d9:
82:03:4d:f7:e9:a6:07:9b:96:4f:43:54:10:10:42:
ba:58:fc:79:5a:cf:ea:d1:22:bc:59:d2:16:e0:5d:
d4:92:00:47:72:f2:3d:aa:cb:89:42:7c:be:52:8d:
98:88:bd:98:c7:77:3f:b1:fc:80:55:1c:11:fb:ab:
f2:6f:cb:38:43:05:7c:3c:11:85:a3:2a:d1:87:08:
ef:98:7f:30:2d:d1:e1:08:ab:8f:38:41:66:6f:92:
c5:8b:9b:c8:23:88:2d:04:38:d7:f4:6b:d3:3d:7c:
71:3e:6d:fb:12:97:8e:fd:16:82:fb:50:90:85:fd:
9b:39:52:93:f4:03:c2:7f:07:9c:23:5b:56:cc:b2:
11:e7:8a:b4:06:fe:9e:ee:3a:1b:66:fb:6a:93:b7:
50:eb:07:3b:41:24:ea:80:b1:3c:c8:6e:6e:53:94:
4c:a6:05:24:90:42:bc:00:26:d2:c0:0b:9d:0b:a0:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A5:EC:E6:A3:10:CE:28:02:B0:23:CB:32:D7:EB:73:D4:E1:4F:47
X509v3 Authority Key Identifier:
keyid:8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9d:33:c8:f3:26:bf:11:6a:59:6f:de:d1:ce:5f:e7:fc:72:
18:15:c6:65:ab:af:f7:bb:10:b4:84:d1:59:0b:6f:16:3b:66:
2e:98:da:31:56:47:8e:91:1f:6e:6a:2e:e6:d4:45:d8:10:24:
2a:3e:29:b3:ec:0d:40:43:d4:fb:1c:a5:5a:56:c8:4b:e6:61:
d7:66:f0:42:65:05:77:f2:50:a0:ab:f8:7c:49:6a:70:ab:c7:
a7:72:83:11:a4:2c:24:d5:cd:76:2a:0d:77:97:8a:90:9e:76:
b9:ea:97:b1:5c:79:4e:b8:8e:ff:03:ff:84:e9:32:4e:36:ed:
e4:3c:c8:ac:d9:2c:1a:f9:07:12:6a:da:0d:83:ac:d9:81:25:
31:03:71:61:8d:15:5c:ec:90:59:fa:2c:8d:56:e0:8d:31:a1:
80:a1:aa:a8:c0:59:d4:4a:d8:e9:43:ba:16:11:52:09:f9:4d:
20:9e:6b:60:b0:22:01:65:4d:3c:69:15:91:50:d7:d0:72:db:
5c:c8:a1:d7:2e:17:1b:a9:7d:b3:03:c4:78:ad:7c:90:0c:36:
a1:c7:8d:e4:ea:f1:64:72:10:c8:f7:00:8f:90:63:eb:d1:30:
4c:33:87:81:0a:c1:36:83:6a:8c:e8:04:d3:f5:5e:5f:e1:4b:
a0:e9:a5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:34:31 2025 by rpki-client