Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
File: jOc1Ep93eiW_hHJyBr-XjZodsgA.mft (raw, json)
Hash identifier: r4e6rc+zT2EQgNsecWll/PhZAVbqvjk2098tefzMFSc=
Subject key identifier: C7:0A:C2:EF:B3:71:36:1C:EC:DF:24:55:00:35:40:C7:C0:97:DB:B7
Authority key identifier: 8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
Certificate issuer: /CN=8ce735129f777a25bf84727206bf978d9a1db200
Certificate serial: 0196594B6244A04D15A2FAB8AAEACF8226DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
Manifest number: 0AD8
Signing time: Mon 21 Apr 2025 17:00:34 +0000
Manifest this update: Mon 21 Apr 2025 17:00:34 +0000
Manifest next update: Tue 22 Apr 2025 17:00:34 +0000
Files and hashes: 1: 7nFNN3l5GD-t-2xZtD0Zf8RWyQ4.roa (hash: vqDVEIya4bFoWJhti8KO9chSYpm+4SzzmfR2K9/w2/k=)
2: czoe1RLJsx9dA2fYE94xeHxNmO4.roa (hash: BpNazVz7pSpyIXBvYFGh8xCscfLMGwTUrkPmKZ9aKwA=)
3: jOc1Ep93eiW_hHJyBr-XjZodsgA.crl (hash: KlL4+qqrhI6Sx9J8/9FrZ5lfNiicgglvZ92kfAnIEtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:62:44:a0:4d:15:a2:fa:b8:aa:ea:cf:82:26:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce735129f777a25bf84727206bf978d9a1db200
Validity
Not Before: Apr 21 17:00:34 2025 GMT
Not After : Apr 22 17:00:34 2025 GMT
Subject: CN=c70ac2efb371361cecdf2455003540c7c097dbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:4c:17:29:c3:72:c5:d3:ad:91:70:72:a8:
5b:6e:39:fa:1d:3a:0f:00:14:a6:44:8f:71:b2:60:
3e:81:15:d3:ff:37:74:ac:a2:04:d4:60:ad:11:91:
b6:72:75:54:fc:32:42:1c:67:89:99:a1:6f:74:1f:
07:7e:8f:98:e3:0e:ee:2c:c0:47:9d:e1:76:4a:3f:
97:cb:6d:14:fa:06:80:89:25:11:f1:dd:1b:aa:39:
a4:c6:46:02:ad:0d:9b:39:78:99:5f:d9:f0:07:f2:
6a:f8:4e:57:48:70:6a:ca:63:8f:ee:3f:d0:9f:4a:
bc:7f:93:00:69:ce:96:47:83:7a:f7:70:5e:8a:2a:
d2:01:6d:d2:0a:50:cc:81:e4:db:33:92:6d:ea:f4:
31:70:24:69:bf:a7:b2:82:e8:ca:83:ff:74:b0:0d:
3b:6d:75:03:72:c1:70:db:0e:0d:5f:44:98:65:b9:
82:d1:84:ae:0a:d0:ff:3b:63:ed:be:02:c4:aa:3e:
6e:e7:ff:1c:d8:90:80:96:f0:f1:37:cd:fa:ad:61:
90:3c:1f:e6:16:13:bb:25:48:ff:aa:cf:4f:c6:77:
98:b3:33:f8:e6:c9:69:66:90:6d:a1:bd:7b:6f:70:
6b:bc:c9:c6:00:2b:ee:77:32:ce:0b:7b:a3:f9:23:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0A:C2:EF:B3:71:36:1C:EC:DF:24:55:00:35:40:C7:C0:97:DB:B7
X509v3 Authority Key Identifier:
keyid:8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f9:fc:26:cf:db:34:10:95:c5:8a:b0:f6:59:32:01:4a:6a:
6e:c7:22:bf:22:9b:98:65:8d:ae:7c:7f:06:e3:8b:fc:0f:8f:
fb:dc:35:22:67:21:b6:3b:83:97:95:49:94:27:b4:df:56:d0:
09:61:a3:a2:6c:d3:cc:19:ee:6e:8d:70:f1:9b:5f:24:c4:8d:
f7:bd:e8:56:02:59:be:a5:78:b2:10:fb:e7:88:20:89:7e:07:
11:62:45:7a:25:88:58:c6:ea:31:f8:ef:38:7e:8a:a5:7a:8a:
bf:a3:82:34:f3:79:44:24:9c:3d:1e:b3:fe:07:61:31:c0:94:
03:e5:58:65:67:e6:d4:a7:25:d9:cb:80:0a:64:ae:4f:31:4e:
e9:7f:9c:1f:83:e3:2a:ab:af:a4:41:42:77:75:c1:a5:5b:b7:
e1:0c:ad:fa:fa:f8:b2:49:ef:8b:22:02:99:06:5a:9a:d3:4e:
90:21:52:5a:f1:20:d6:1f:80:2a:21:fc:bc:63:43:08:ad:ac:
b7:99:04:29:08:c5:52:31:b7:e6:4b:98:45:95:79:9f:db:1b:
86:d3:96:86:e5:3b:57:45:5e:c8:54:71:18:a2:53:d4:d7:ec:
f5:ef:15:20:37:ee:ca:0c:ef:37:4f:29:04:97:20:f2:83:51:
e2:87:bd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:01:29 2025 by rpki-client