Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: 98ZkrdKXhy0jbYZik5IbKeNExAAMA2UvhsOEF5M2LLw=
Subject key identifier: D2:07:E4:CA:E2:56:F8:FC:16:31:68:45:96:3A:6A:DA:41:7B:65:6B
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 0196A1647D402D5E60B6F8946025C38BE856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 013C
Signing time: Mon 05 May 2025 17:00:39 +0000
Manifest this update: Mon 05 May 2025 17:00:39 +0000
Manifest next update: Tue 06 May 2025 17:00:39 +0000
Files and hashes: 1: 2a4uGqXqRLFwxkrNzW_s6-qnGXE.roa (hash: goHZck25hCom6tNMtTpOVgal0/zlXu42ccbA4cfzVE0=)
2: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: rIvegKFxDKbM3vv2vhjFTl84/7ftPwcl8Ebe3Gtawro=)
3: kFOw0UjGI7qti8qa1uAUEOsP1Y0.roa (hash: 3Ka4QMk7D3J6EIhtUeiuaJXa58kFmA+7bZN+m672Gvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:7d:40:2d:5e:60:b6:f8:94:60:25:c3:8b:e8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: May 5 17:00:39 2025 GMT
Not After : May 6 17:00:39 2025 GMT
Subject: CN=d207e4cae256f8fc16316845963a6ada417b656b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:ce:a3:ba:cd:dc:40:00:4a:41:5b:a1:34:
61:81:a9:bb:68:f8:d1:a3:4d:62:9c:e0:29:bb:9e:
ea:8f:36:52:17:da:a4:2d:73:b0:64:19:19:07:11:
ce:1a:09:4a:1a:57:9e:8f:91:49:60:81:fe:d8:58:
b0:85:15:bd:de:e2:b0:4d:1f:4c:4b:3e:3b:0a:f4:
dd:b7:35:9b:1c:22:f8:72:8a:5d:b9:1f:83:8d:11:
3f:a9:62:b3:cb:fb:17:ab:8e:64:ff:ba:a9:98:cf:
40:16:3e:f5:6d:9b:d6:12:c6:54:83:34:24:23:31:
df:ae:f6:8a:67:2c:af:db:cd:ec:ff:89:52:43:ed:
48:10:06:7f:7b:12:8b:e0:d5:cd:11:bc:eb:5c:bc:
35:4d:ca:86:64:24:f8:f1:c7:a2:11:e9:db:03:fe:
a3:04:e4:09:08:92:96:42:9f:f6:a2:9a:bb:26:42:
32:dd:90:96:04:cf:fe:6c:f6:fd:6d:57:c9:2c:45:
56:f6:ea:63:e5:1f:99:64:e7:28:02:b1:41:98:c7:
fb:3e:eb:9b:1e:76:63:74:1a:ab:be:20:c4:8e:e8:
2c:3a:09:b6:58:81:1f:ff:09:d1:4a:6d:98:82:b5:
d5:52:59:65:1a:fa:63:3b:11:75:d3:2b:a5:43:de:
07:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:E4:CA:E2:56:F8:FC:16:31:68:45:96:3A:6A:DA:41:7B:65:6B
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8b:e8:32:12:53:ee:f0:a9:e4:47:74:75:7b:95:a4:61:85:
75:44:51:d0:64:37:ee:b9:00:05:0c:f7:43:6e:72:a4:c7:d4:
8a:fc:f0:a4:2e:94:c4:94:4d:7f:6b:45:96:cb:64:aa:8b:8c:
c3:23:b6:59:ec:6e:d9:09:f4:71:b0:16:32:88:98:9f:85:09:
13:cb:e7:77:bd:3b:6d:93:7c:cb:53:a7:6b:f3:98:0b:1c:65:
ba:76:88:4e:2b:e0:15:9c:14:d6:cb:5e:14:c4:82:75:1c:ec:
cf:0b:87:5f:fa:64:17:2e:6a:d8:db:24:57:84:32:db:8d:72:
26:93:71:fc:44:9d:04:36:50:9b:7c:e3:97:c5:0c:c9:33:29:
36:fd:91:66:51:b9:38:64:17:28:13:21:bf:8a:6c:ea:5e:f9:
12:6b:24:b1:17:ee:ad:13:b1:2e:58:08:38:ea:f0:1a:82:6e:
89:40:9d:5b:3c:3d:47:a4:80:22:87:21:52:95:19:b2:8a:9a:
9e:93:87:e5:ff:6d:b5:77:d6:56:68:00:e7:80:9d:54:19:d8:
1a:17:a0:4f:fb:fa:9e:a3:5b:0d:eb:e7:15:3c:e7:5b:6b:1a:
35:2e:af:91:10:6c:ec:8d:6d:75:ac:9a:c8:3d:7c:ec:d1:9d:
50:45:96:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:06:10 2025 by rpki-client