Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: ljfoZVGX0S1CemtkxBlJuGguWxxPO0jMCF6rGjcKzEc=
Subject key identifier: FA:F6:CE:0B:6B:A5:58:70:2C:FC:4A:79:1E:F9:68:08:23:DF:38:29
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 0196C984761281BC5960D6A2792E3AD6EE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 148C
Signing time: Tue 13 May 2025 12:00:23 +0000
Manifest this update: Tue 13 May 2025 12:00:23 +0000
Manifest next update: Wed 14 May 2025 12:00:23 +0000
Files and hashes: 1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: G35bkm0c+t+5GlskwVEfSe7SKOIbH3yxEXWZYxY5QMY=)
2: ifTKeL7Q3yOfbgGQD-O0V2FKxJg.roa (hash: JhNUlPYthTeXHHV7LF1Jgo8sCxuBA07GISDC2g5jYXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:76:12:81:bc:59:60:d6:a2:79:2e:3a:d6:ee:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: May 13 12:00:23 2025 GMT
Not After : May 14 12:00:23 2025 GMT
Subject: CN=faf6ce0b6ba558702cfc4a791ef9680823df3829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:2f:26:8a:e8:05:f5:0c:06:cc:96:e2:35:
75:ab:a8:00:20:eb:9c:23:c9:30:0b:6b:3e:6f:0b:
fa:29:49:d1:59:0d:1d:1c:82:ff:0d:fa:1a:7f:af:
95:56:86:a1:20:d5:f6:d4:8f:08:7b:ba:90:b7:eb:
8f:85:89:b3:c7:fd:ac:61:4d:c1:bc:bb:6f:63:60:
4b:dd:4e:ff:bd:08:01:de:91:2f:c1:11:b8:f9:14:
68:09:96:d7:0f:cb:63:b6:08:c2:0b:9f:14:dd:6a:
89:84:0d:90:41:a8:62:a8:57:ee:5f:17:24:cf:8c:
28:48:ba:73:17:18:eb:45:47:4d:42:95:00:63:6a:
84:6a:84:04:99:7f:e1:b2:87:7b:c4:3c:df:1d:f0:
2c:da:09:ce:90:49:f8:39:0f:6b:e4:db:2b:8d:c1:
32:61:0b:b0:11:57:88:3d:9f:9c:7c:6e:dc:4d:65:
0f:55:a2:64:d8:77:d0:bf:42:e2:74:ef:01:59:1e:
2b:b7:d3:01:c2:32:70:c0:f6:f2:fd:77:5f:91:a8:
c7:82:06:4f:2d:a1:d6:54:03:1d:48:0d:cd:3d:b5:
be:85:be:05:66:2d:3f:6d:e2:31:7c:95:23:1a:3e:
42:5a:c7:82:22:74:04:11:ec:d8:72:bd:68:eb:42:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F6:CE:0B:6B:A5:58:70:2C:FC:4A:79:1E:F9:68:08:23:DF:38:29
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:03:4f:87:c2:25:6f:60:0d:dd:0b:0e:28:8b:f0:4a:2d:f1:
42:16:d6:31:b7:00:05:ae:18:db:ee:a5:b3:1c:cb:5b:e2:76:
f6:96:7b:37:eb:6f:e1:16:d4:06:8f:cc:a4:14:7b:ed:fb:8c:
0c:16:f4:2e:73:3b:15:26:c8:5d:05:cd:07:19:16:78:06:c7:
eb:2e:ea:47:a8:e1:ce:42:d8:55:dd:07:13:6f:0a:c9:a3:89:
ec:b5:f5:b4:e3:e9:d2:fb:1c:e6:1b:9a:9c:55:9f:94:b6:e7:
f0:e2:1c:0e:01:6f:76:cd:97:55:ed:20:7b:e9:9c:2d:cd:1c:
27:d4:7d:8c:8d:82:93:82:3c:44:5b:56:65:c6:8a:30:74:b8:
ee:ed:45:5a:f1:a9:a2:d0:91:f5:f3:dc:12:04:7f:d4:cf:7b:
1e:79:cc:19:73:fd:ff:8f:b9:81:17:c6:7a:53:b1:b9:f4:11:
9f:c4:e8:c3:3b:42:c8:19:d9:02:c2:70:0f:13:04:f8:a6:b1:
e5:08:d7:35:6a:04:17:0e:c9:df:d1:84:b3:0f:a1:b5:0f:30:
f1:f5:0f:dc:9f:c5:f8:ac:6a:db:74:77:7c:c7:66:26:63:29:
82:b1:58:96:60:70:f4:7e:b7:b6:18:bf:66:5e:28:64:03:a2:
58:d1:0c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:48:06 2025 by rpki-client