Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: n56Sza7hYidCvF2CMxr4CREG0+E+UUkQ5XRpnzmxfTs=
Subject key identifier: A0:21:6D:CC:55:19:73:D2:55:72:55:9E:C1:18:AD:C4:3B:9F:6A:57
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 0196A7D4C48F42C3A5ACD0C61FE6B5780743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0C1F
Signing time: Tue 06 May 2025 23:01:01 +0000
Manifest this update: Tue 06 May 2025 23:01:01 +0000
Manifest next update: Wed 07 May 2025 23:01:01 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: jQST3o3LsB3xrKhh0JF53gSYI5dhDzp1uaOSEhWEBkc=)
2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=)
3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:d4:c4:8f:42:c3:a5:ac:d0:c6:1f:e6:b5:78:07:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: May 6 23:01:01 2025 GMT
Not After : May 7 23:01:01 2025 GMT
Subject: CN=a0216dcc551973d25572559ec118adc43b9f6a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:74:92:ef:fc:34:b1:dc:af:71:b9:da:d0:
44:10:12:29:49:28:34:24:af:9e:bc:e8:ce:7c:40:
fb:bf:5b:19:8d:69:37:7b:c2:fc:b5:f5:bb:b8:a3:
7f:9d:91:64:9e:83:73:47:8a:47:5f:27:33:fb:ce:
c7:6e:0c:a3:c9:a7:cc:2f:66:ea:10:ca:dc:30:2b:
88:39:76:68:cf:91:87:25:72:2c:ae:97:19:fd:36:
70:4f:34:df:19:50:9f:8c:d7:57:cf:54:5c:ed:0e:
3d:fb:77:51:85:44:ec:95:bf:49:7e:1a:0e:6c:bf:
d9:80:fd:65:81:1d:0c:e7:d7:ca:67:c5:ee:d6:94:
ec:eb:e7:38:02:3a:93:95:2d:07:e3:a9:02:aa:2a:
8d:01:26:a9:74:38:83:e4:31:58:16:e8:97:c9:79:
54:29:19:20:c6:84:f8:26:38:bc:3d:2e:13:84:f1:
fe:e2:bf:5e:10:4c:19:0a:af:86:07:41:03:5e:82:
44:81:f6:ac:45:45:88:2b:bc:0b:1d:1f:00:9e:bb:
a9:6c:ac:f6:52:76:a2:c3:07:14:96:d6:e2:77:5f:
49:cc:1b:04:f0:64:74:13:2f:2e:8c:88:d3:f6:5d:
9f:c1:3e:df:bb:7b:d4:ce:40:29:ce:92:50:57:ca:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:21:6D:CC:55:19:73:D2:55:72:55:9E:C1:18:AD:C4:3B:9F:6A:57
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:33:ea:b5:37:54:09:6b:16:66:1f:1d:a7:51:5c:da:cf:cc:
4d:61:81:ab:c9:74:38:88:3b:27:36:7e:9e:12:79:dd:b9:b4:
a5:89:63:10:ed:74:52:d5:67:3f:8d:0b:bb:de:8f:26:e2:db:
dd:31:81:c3:07:a8:e8:8a:e5:87:12:4f:16:d5:21:c7:db:fc:
9a:9e:c1:02:1a:1c:18:30:89:44:cb:c9:57:00:8d:c9:4f:f8:
27:f1:f0:62:43:2d:b0:97:89:4a:bd:31:45:8a:c2:41:50:39:
37:89:30:51:2d:e5:c8:7a:98:3f:af:c8:bf:d4:ca:34:df:69:
e6:2c:60:e4:3e:cc:7c:cf:29:03:2f:da:0c:e7:ab:e4:0c:db:
86:fe:18:99:71:86:57:9a:8e:1d:19:39:de:78:12:e3:f2:fc:
d6:3b:53:6d:6f:69:f8:f9:a6:de:6f:b4:aa:77:44:a4:38:78:
e6:a8:d1:81:78:fe:c8:4b:59:d2:89:98:72:92:34:9c:0c:02:
09:69:9c:f6:55:d6:51:30:a7:dc:ce:ee:85:d4:cd:04:b3:93:
49:a9:cd:3b:c7:79:45:f5:42:05:66:83:54:fe:0d:73:c0:e5:
cb:ea:e3:8a:ac:4c:0f:e7:b8:b7:46:38:a3:9b:73:6e:d7:3c:
80:8e:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:13:52 2025 by rpki-client