Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier: ImI0r7oXLzyhOi0keVL3/JqnVNhdtVU9eEK2Mai0qwM=
Subject key identifier: 13:33:6D:2E:3A:15:0A:55:36:96:1F:BC:42:C0:5A:CB:0E:5E:DC:B4
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial: 01969F76064A8BE1F557C46D91EFD4497CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number: 0A16
Signing time: Mon 05 May 2025 08:00:34 +0000
Manifest this update: Mon 05 May 2025 08:00:34 +0000
Manifest next update: Tue 06 May 2025 08:00:34 +0000
Files and hashes: 1: RW_H_ESDaZiZhgwMqK0qV1tKkxQ.roa (hash: 8rlM5Gf4dfcpQSnuob8gpQKJA3IonaJYfplAZEgt4uw=)
2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: P1xN+5i+JADid5d/Rea12122Mb0EYfAXsgjE0knoFMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:06:4a:8b:e1:f5:57:c4:6d:91:ef:d4:49:7c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Validity
Not Before: May 5 08:00:34 2025 GMT
Not After : May 6 08:00:34 2025 GMT
Subject: CN=13336d2e3a150a5536961fbc42c05acb0e5edcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3c:5d:95:a6:25:b1:6d:d7:cb:4e:94:c4:1f:
f9:f5:dd:47:87:84:23:93:a3:86:99:e3:f3:24:77:
fe:de:ab:98:70:a4:ed:b8:aa:9e:27:fc:15:a6:c9:
29:4a:5a:50:11:8a:2a:e1:a7:f1:7a:fd:20:db:f5:
ca:84:bc:2a:96:4d:38:62:3e:63:2c:2e:0b:c3:44:
8c:88:6a:12:64:43:38:c3:50:fb:a5:44:29:a8:f8:
fb:33:0b:37:20:69:3f:da:85:8f:25:73:6b:17:da:
51:e7:92:d7:1d:32:23:86:d9:38:86:a3:20:8c:91:
dc:05:12:2f:13:29:d1:0c:65:51:5a:13:cd:a6:da:
20:01:17:98:9a:7f:36:9d:46:23:60:48:bd:a7:d3:
09:1e:00:a6:55:58:34:14:ce:3a:68:ec:77:47:59:
1c:20:6d:fc:ec:d8:56:53:cc:3b:91:df:de:a3:82:
b5:ca:5c:12:c3:61:ba:26:eb:2c:a0:76:5d:80:fe:
74:6e:2b:46:08:64:a5:3a:5d:c3:e1:f0:84:95:d7:
ea:42:7c:02:20:6c:da:3c:43:23:f8:b7:b8:d2:ce:
77:f0:29:5e:41:2e:20:03:99:72:ad:ee:6a:7c:ed:
1e:2b:29:e2:bc:0b:92:df:fe:f8:42:fb:15:81:7d:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:33:6D:2E:3A:15:0A:55:36:96:1F:BC:42:C0:5A:CB:0E:5E:DC:B4
X509v3 Authority Key Identifier:
keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:74:c5:29:cc:08:5d:26:67:d2:fa:fa:b7:25:ed:1f:63:e4:
30:24:25:c1:24:7f:a3:9f:68:84:84:4c:b4:0e:b9:c4:a9:75:
1f:48:87:e3:05:06:37:3a:3b:bc:5f:1b:1d:05:3f:06:e3:fe:
7b:7f:e3:be:a5:5e:fc:1b:dc:dc:76:fd:52:e2:8e:67:28:22:
e4:3e:0e:04:26:4f:84:d3:c6:46:f4:0c:bf:dd:33:22:23:dc:
d6:8d:5f:1f:d1:30:b8:b3:0f:5a:1d:74:c5:59:77:50:a8:df:
bb:ba:10:eb:83:6b:aa:e2:94:31:4d:49:0c:aa:d4:96:87:3e:
b8:b0:f5:cf:22:ef:2f:92:4d:48:4b:d5:fb:64:c7:d4:6a:dc:
aa:da:4a:8d:73:df:d5:c6:0e:55:04:58:7a:d2:3c:92:a2:12:
f8:59:96:68:a3:38:07:90:b5:69:66:72:e5:21:13:12:8d:8e:
c1:7a:da:97:99:51:61:fd:6f:2c:ac:f5:10:f1:08:0d:5c:6a:
bf:a5:21:52:ee:44:80:cf:3e:a7:eb:b9:36:19:bf:e1:b7:8d:
c9:c3:cd:5d:50:9b:d2:80:5c:02:e7:fe:f5:cd:ab:48:ef:99:
79:41:59:1b:b3:aa:13:54:c4:c5:cd:c7:73:34:c8:89:1a:3d:
70:68:ee:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:46:39 2025 by rpki-client