Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
File: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json)
Hash identifier: i5Cabhj2knHKXE70+IAVYM2g2Pr/GDRAwY4PiIzcmFg=
Subject key identifier: EF:F7:15:E3:46:D5:27:87:F0:4A:4B:7D:5A:44:27:B9:6F:A6:E5:F7
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Certificate issuer: /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial: 0196BBC8D0180B73E94DB27D9884F730CEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
Manifest number: 14C0
Signing time: Sat 10 May 2025 20:00:21 +0000
Manifest this update: Sat 10 May 2025 20:00:21 +0000
Manifest next update: Sun 11 May 2025 20:00:21 +0000
Files and hashes: 1: LgIPOaS3n2sqiXRF04UEQLyEYsM.roa (hash: YqN1B/tx43sTxDsP8Z9eF6NTn7buBeb+1tzSiGZZDN8=)
2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: fhQwGny/AEYABmvPVNRCSI95x6NfVHlokg8F47tZMgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:d0:18:0b:73:e9:4d:b2:7d:98:84:f7:30:ce:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Validity
Not Before: May 10 20:00:21 2025 GMT
Not After : May 11 20:00:21 2025 GMT
Subject: CN=eff715e346d52787f04a4b7d5a4427b96fa6e5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:5e:0b:25:a5:e6:7a:7b:cd:3f:bc:05:c8:
0d:df:7f:2f:ff:aa:10:00:9a:6e:3c:e0:37:d2:93:
74:da:05:4d:67:62:c0:99:78:4c:ea:48:4f:3a:35:
71:08:c0:48:4a:95:0b:86:a8:2c:28:20:bd:f6:6b:
f9:02:50:8b:07:93:20:1e:0e:89:52:9f:49:67:1f:
55:04:7f:e4:2d:63:8b:98:4e:d0:27:7a:7f:e0:f9:
86:a1:cc:a0:74:b3:74:ff:92:4f:b7:77:09:bf:9a:
17:8a:62:b3:d0:3a:35:00:62:20:21:68:b7:f5:89:
0e:d0:eb:cc:09:9f:96:d4:61:40:fa:ff:90:fd:c1:
95:3d:9b:48:11:4d:18:c2:4d:b0:ce:ff:71:40:26:
9d:49:7b:9b:5b:b6:90:cc:ba:52:fc:3a:66:ad:7f:
95:2a:9d:39:30:c8:ff:ae:03:12:cd:ad:b5:d8:d9:
b9:27:d2:23:8c:af:c9:dd:98:42:8e:fe:8e:02:77:
f6:ab:d9:53:81:e2:cf:be:07:d8:cf:4d:99:db:a9:
54:87:a0:fb:47:61:56:9c:ab:16:44:c4:9c:8c:b1:
91:83:ce:86:d0:de:6b:f7:52:ed:97:a6:f2:5f:ca:
3a:61:cb:c8:9f:e2:e8:c0:c7:ff:a8:38:0b:20:57:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F7:15:E3:46:D5:27:87:F0:4A:4B:7D:5A:44:27:B9:6F:A6:E5:F7
X509v3 Authority Key Identifier:
keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c3:29:e1:48:73:43:c0:37:8d:eb:e7:df:e5:83:0b:cb:8a:
ba:35:11:6c:7c:6d:22:b8:bc:ad:c9:79:44:10:7f:ac:b0:13:
65:ba:07:b0:79:d4:26:26:d9:db:a7:76:9f:5d:f5:70:5f:9d:
0f:3f:10:87:06:99:72:1d:ed:5e:d4:85:85:ff:3f:f2:aa:b2:
c0:52:8a:82:86:46:1b:14:d3:97:94:c1:8a:49:6b:3c:5d:02:
0c:9e:31:70:ea:0f:a9:22:8c:ae:9d:41:64:d2:70:d5:8d:ed:
1d:e0:1f:8f:b8:c1:1b:48:c2:01:1a:25:7a:cd:30:dc:3f:da:
df:b8:2a:66:bf:5e:79:6f:e7:8f:8c:cf:bc:3f:90:83:57:28:
0a:59:ca:64:1d:db:23:84:24:6a:88:4c:be:61:5a:73:dc:cb:
19:d5:d5:80:17:43:15:10:c4:dd:68:02:f4:d7:85:c6:cf:09:
f4:9f:78:26:90:dd:15:ef:c4:47:bf:3a:ad:17:7e:f9:01:04:
59:26:d0:80:f8:6a:c0:2e:af:b3:d3:39:f7:bb:60:de:cf:7a:
95:06:70:e6:4b:88:22:48:61:dc:65:72:6d:45:43:e3:5c:af:
25:5c:db:e8:68:67:3c:43:fd:4d:24:51:60:0c:e6:09:b9:e9:
ee:be:85:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:21:18 2025 by rpki-client