Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: rzPH298kvvJ0iz1hJU6lo3J4v30oio1x8JwC0EuW0QE=
Subject key identifier: A2:A7:DC:B4:99:76:3C:6B:88:68:44:89:D2:5C:2A:C2:96:31:B3:F1
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 0196BA7F5A6DC32229C573BFF6C9F57718B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 14C5
Signing time: Sat 10 May 2025 14:00:30 +0000
Manifest this update: Sat 10 May 2025 14:00:30 +0000
Manifest next update: Sun 11 May 2025 14:00:30 +0000
Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: YfJKfBAgv455nkQ+JLxHQGPrdHhP+FFw5aNsdXGG18I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:5a:6d:c3:22:29:c5:73:bf:f6:c9:f5:77:18:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: May 10 14:00:30 2025 GMT
Not After : May 11 14:00:30 2025 GMT
Subject: CN=a2a7dcb499763c6b88684489d25c2ac29631b3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:0c:75:11:5a:16:c1:7f:15:5b:b8:2f:6f:
03:6e:07:58:2a:c7:28:f1:12:3a:24:75:4e:45:d8:
0d:87:19:7a:9f:b7:ff:cb:94:fb:bc:1e:e5:58:c2:
38:69:22:da:2e:39:99:45:74:3e:35:ce:1c:6c:ee:
a5:54:4d:dc:ca:26:44:6d:06:44:51:e8:54:26:d0:
ab:21:8b:59:c6:b2:81:19:1f:51:19:ee:27:50:3d:
d2:dc:21:1e:b5:44:cf:a7:0d:f9:9e:61:3b:f4:02:
00:0f:30:a8:5b:02:70:0a:44:9e:43:3a:88:1d:2f:
46:2c:6a:92:9f:60:3c:00:80:e7:f4:db:16:39:28:
a8:6b:1b:fb:bb:f4:6b:25:ee:0c:76:42:8f:4c:ad:
4c:7f:a0:a0:89:20:d2:d6:30:d2:6c:8d:f0:51:d4:
67:b0:9a:be:a1:04:48:ad:c3:d1:06:d7:2c:0c:e6:
88:4f:5c:84:7f:14:d3:c3:8e:40:d3:1a:5b:62:20:
4f:a2:58:2c:47:54:63:3a:6b:07:a5:90:ee:44:f0:
1f:18:ff:fb:6e:66:a3:f4:59:b8:2f:b0:a4:17:1a:
d3:fe:ea:7e:2f:44:32:bb:9e:67:56:5a:72:c7:9c:
1f:08:ec:6d:5c:7e:ef:66:84:6c:10:fa:0b:e1:cb:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A7:DC:B4:99:76:3C:6B:88:68:44:89:D2:5C:2A:C2:96:31:B3:F1
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fe:3a:48:95:ab:7a:07:c9:42:c0:ad:2c:b7:a1:80:89:8a:
ee:15:9a:ad:7d:d5:1b:b7:57:f0:ef:31:5a:b2:55:e7:4f:51:
25:1c:31:8f:bd:86:00:a2:7c:b8:e2:c8:d0:90:50:f3:a7:7e:
77:17:ed:51:81:8a:9d:db:08:9e:73:89:51:c4:77:33:89:af:
71:6b:26:f7:0a:76:f8:7a:9c:55:0d:8b:12:7b:25:b4:03:34:
ff:7d:cc:af:3d:c4:2a:d0:b0:52:43:78:f1:f0:70:62:53:7f:
28:52:32:8e:d1:3d:6c:f4:99:54:69:d1:38:5b:dd:63:fc:2e:
af:98:93:c4:63:d6:1e:0f:86:7f:a5:b3:60:dd:cc:38:dd:2d:
71:b1:11:85:6e:a0:cf:a6:cd:2f:fb:8b:27:1a:b9:e0:2e:0f:
07:2e:36:5e:65:ed:bd:aa:5d:25:22:cf:1d:9a:07:8b:57:11:
ea:00:5c:65:13:64:5a:1f:f2:dc:94:1a:87:e1:3b:56:6f:ff:
4e:12:04:71:d0:69:04:06:f0:c0:7a:c0:07:ac:93:2d:bb:36:
36:24:b5:1c:86:ee:03:61:12:94:b1:88:4e:e9:ea:55:ec:aa:
2c:61:12:dd:93:42:19:36:6e:8a:75:bb:a1:34:ee:1e:97:50:
08:32:4b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:11:32 2025 by rpki-client