Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: aTksSrBWD5l74JbxZQZ3gjiGBU3hzM5EXZVr5hFEu+g=
Subject key identifier: 1C:93:5B:AB:09:13:88:97:0D:ED:74:16:CF:14:35:50:EF:60:8E:30
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 01965C4C5EC2FD2F35BF2F97CE16A9E6DE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 0FB8
Signing time: Tue 22 Apr 2025 07:00:30 +0000
Manifest this update: Tue 22 Apr 2025 07:00:30 +0000
Manifest next update: Wed 23 Apr 2025 07:00:30 +0000
Files and hashes: 1: As6vwkWGZxruqh4uQQnrE0_5Wkc.roa (hash: +uKniDECqLf36Ns+Ibc2IgSroQKNM4uwIuCwreWx2Qo=)
2: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: x4n5fuaengdKm+8vDbN9iN5o8XLT6l97TcfQIX5rqfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:5e:c2:fd:2f:35:bf:2f:97:ce:16:a9:e6:de:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: Apr 22 07:00:30 2025 GMT
Not After : Apr 23 07:00:30 2025 GMT
Subject: CN=1c935bab091388970ded7416cf143550ef608e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:6c:0e:7c:8c:d9:ec:77:aa:93:f0:d2:c5:
ec:12:1d:cd:de:6e:47:4f:df:30:82:3c:62:cd:01:
96:b7:d6:97:24:29:e7:86:17:45:70:af:77:6e:c1:
81:78:e2:ac:c7:c6:aa:3a:db:1a:ec:79:92:19:b7:
ab:47:4b:f0:be:cb:64:15:53:12:7f:3a:dc:e5:e1:
0b:7e:6b:01:6b:93:e1:7b:6d:a4:d2:f4:da:de:f7:
29:fb:72:0d:33:96:9f:00:aa:d4:2f:18:7c:ba:d8:
69:9b:4a:8a:f1:ee:63:30:5f:7d:35:26:ad:b8:08:
fe:ce:14:c0:9d:a7:c1:92:2a:79:cd:ff:90:0d:25:
b0:f2:51:6f:e9:a3:3e:fc:86:02:20:1a:93:b1:32:
99:3a:df:d8:ba:16:88:97:24:3a:18:c2:1a:85:af:
a0:14:d1:4a:16:b3:af:4d:82:48:6f:56:d3:91:a4:
4d:81:e5:33:5d:27:46:92:db:ff:26:b1:31:f4:6b:
f4:f8:99:fa:d4:4c:77:fc:a4:95:75:65:e4:a2:95:
01:48:9d:af:6b:67:d5:0f:c1:68:b8:24:e6:2c:29:
c2:0e:07:40:a0:a6:fd:99:23:46:fd:53:76:43:c4:
29:2a:bb:62:dc:01:89:ec:a5:bb:2f:63:44:a5:64:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:93:5B:AB:09:13:88:97:0D:ED:74:16:CF:14:35:50:EF:60:8E:30
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1f:a6:ca:60:ce:9a:c6:ff:bb:18:ae:4f:c2:87:15:90:e8:
54:4e:46:51:00:c6:98:6f:3d:78:56:4d:e3:b0:19:1b:c3:1e:
99:ab:f9:78:71:7c:09:02:36:2a:50:eb:2d:b1:ab:b4:10:ed:
f2:b2:89:bb:01:97:f2:3d:df:2c:73:1d:d5:b3:46:56:1d:03:
f6:de:0b:d0:9f:f0:0a:fb:a3:be:fb:75:fd:6b:87:21:72:fb:
b2:0b:d0:e4:74:89:75:97:e5:5d:09:19:4f:c0:d4:0d:f7:61:
a3:06:dc:af:85:ee:d8:88:3e:36:96:70:24:99:1b:2b:eb:95:
f2:33:83:1e:28:19:21:86:6c:14:57:29:12:73:2d:3e:5d:ee:
8f:54:5d:03:dc:e4:e1:4e:d6:e1:5a:89:68:08:54:87:e5:dc:
1e:5c:5c:2e:eb:7e:35:71:b1:f5:28:67:c3:5f:49:18:ab:4f:
fe:50:b6:3a:5c:60:c0:24:67:ed:cd:5a:59:9d:25:be:93:76:
b7:0d:1f:9e:7d:48:6a:35:cf:1b:64:dc:ec:22:07:f0:21:7c:
8b:ca:be:59:22:64:2f:91:d0:2a:c9:45:20:71:be:10:15:f0:
29:6c:dd:38:82:9a:c1:2c:e8:d7:b9:10:c7:04:9f:5a:68:76:
33:50:3d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:45 2025 by rpki-client