Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: 6Vdf/urPe/i3C7Wirey6UN9voF5N0ZGfDPvRAgBL06o=
Subject key identifier: 5F:FC:93:8F:7C:51:DE:6E:1F:0C:E3:13:3D:C7:B3:59:67:11:6D:E8
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 0196B935DDF616D6AB4CF6A3DA72C1A40D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 1414
Signing time: Sat 10 May 2025 08:00:37 +0000
Manifest this update: Sat 10 May 2025 08:00:37 +0000
Manifest next update: Sun 11 May 2025 08:00:37 +0000
Files and hashes: 1: R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa (hash: weYAVSG/ZQ3RqDZF3sJtlOJw4FVloRVdNFig6sXWzgw=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: Pb6NWMLaXKfSVciCKI0klzGmmADFRtZFlkQLENYc3bU=)
3: pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa (hash: IWh8KTHgqy6EH2ywVMGWNHIBEN+BDziBPQVDednZZvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:dd:f6:16:d6:ab:4c:f6:a3:da:72:c1:a4:0d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: May 10 08:00:37 2025 GMT
Not After : May 11 08:00:37 2025 GMT
Subject: CN=5ffc938f7c51de6e1f0ce3133dc7b35967116de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:43:78:44:fd:1d:5d:77:d5:19:cc:f8:5b:
dd:4b:ea:ca:09:0e:0d:39:a6:41:65:9a:7d:63:19:
85:76:79:15:6b:e5:5f:0f:62:72:51:52:09:56:38:
20:e1:49:10:fc:da:6d:1b:cb:30:96:5e:a3:6f:f5:
5f:d5:66:4d:f3:41:73:51:c7:28:27:cc:9c:a3:92:
c8:49:0c:76:71:c4:77:3a:16:ea:49:bc:c6:53:44:
1e:c1:1f:d9:a7:9a:03:6b:d0:f4:b9:63:4d:a4:f1:
18:f8:2c:ea:b6:44:88:ec:4a:3c:b5:72:89:44:e1:
c6:ea:55:e2:e7:ec:21:5a:10:a4:11:6a:a6:55:7f:
dc:db:62:9f:a7:a7:f9:63:e8:7d:3b:0d:cf:e8:7a:
98:87:67:2a:5f:43:f2:42:bb:36:48:86:81:b7:51:
0e:8c:b2:86:fb:ab:fe:72:f3:26:64:e3:15:d1:ac:
28:b6:57:98:35:00:5e:95:c8:ad:e8:52:4b:5e:e7:
66:78:cb:ee:c3:42:57:7e:df:af:95:d6:c9:a6:3d:
92:00:14:79:53:23:ee:db:f3:ad:a5:92:7e:d1:81:
96:fc:b5:4d:7d:03:02:21:64:2c:cb:38:09:d8:09:
1d:e7:6d:c0:2d:ea:bd:a9:f1:c6:c6:50:b8:45:33:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FC:93:8F:7C:51:DE:6E:1F:0C:E3:13:3D:C7:B3:59:67:11:6D:E8
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:92:1d:b2:9b:89:39:e0:98:85:eb:23:3e:af:a1:2b:2f:f0:
49:79:9a:9b:a9:fd:8d:4a:e7:ac:6b:17:e3:9b:6f:6c:d3:e3:
4f:43:f8:4a:81:e6:66:f6:26:f1:37:98:e3:e4:19:f3:20:71:
f1:b5:e0:7b:df:d4:74:4f:94:ed:08:82:9c:85:6d:71:28:3e:
79:ea:ac:95:42:67:64:dc:ed:a1:7e:5b:a7:c9:79:1a:78:44:
41:34:2f:da:76:3f:5c:32:15:4f:1d:2e:f7:f6:5d:cc:51:8e:
73:60:90:d8:fb:01:2c:4a:f4:16:61:be:0d:93:55:6b:34:44:
b6:5f:10:e8:e2:d5:cc:2e:e4:0b:9b:c0:0f:37:1b:c3:a0:0b:
97:32:f4:2b:be:e2:2a:2e:09:80:a2:dd:f1:8c:62:05:30:5b:
c7:52:ee:85:e7:9a:3f:93:dd:59:73:33:f5:68:13:00:d8:50:
0d:b8:de:13:18:51:a6:9a:08:44:b5:f2:29:a1:87:14:a8:93:
d8:30:7e:f9:7c:77:8b:cf:e0:08:f4:3b:b9:36:c5:03:e7:ad:
1d:2f:c2:f0:21:64:cc:53:64:69:5f:7d:08:75:b5:43:2a:06:
db:d2:1d:7c:81:f2:ae:34:26:f1:69:9b:81:49:bf:1c:78:ab:
0d:d2:d4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:30:56 2025 by rpki-client