Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: PPgN41pLjZvPHy795ExVE3AU+PVVOIXxmBWe6kpmguQ=
Subject key identifier: 10:E7:10:A5:E8:73:84:56:91:D8:40:AA:80:6C:3B:2A:86:5D:80:2B
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 019640672C3D61CB233AB2E2622B2184E7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 21:00:25 +0000
Manifest this update: Wed 16 Apr 2025 21:00:25 +0000
Manifest next update: Thu 17 Apr 2025 21:00:25 +0000
Files and hashes: 1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=)
2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=)
3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: uSCuzNQM5jBx3fSHMovW2D0yMZAv6HMVjWt7mosxC78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:2c:3d:61:cb:23:3a:b2:e2:62:2b:21:84:e7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Apr 16 21:00:25 2025 GMT
Not After : Apr 17 21:00:25 2025 GMT
Subject: CN=10e710a5e873845691d840aa806c3b2a865d802b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bb:65:53:70:32:2e:5e:dc:0c:ac:3d:77:9b:
a2:24:b8:11:f0:f6:56:26:9d:1c:ca:06:7c:d0:81:
c0:eb:ac:b5:7b:5f:f9:de:14:21:6d:ae:79:df:4a:
34:a1:54:0a:68:4e:e8:30:a9:f7:3f:b4:68:4e:3d:
04:69:62:cf:91:5e:8a:24:8e:82:c5:2b:ce:0d:09:
cf:e9:b5:93:fa:36:15:1f:ae:30:b9:15:18:3f:f9:
9c:e5:0d:e2:05:7d:e7:f9:b6:2c:3e:80:74:3a:62:
0c:e7:e0:e2:0b:08:05:f3:6c:09:0d:8b:19:3f:6f:
a8:bd:da:10:d0:1c:5a:6d:d9:ee:8f:36:08:00:98:
16:16:75:41:77:42:db:2c:e0:2e:b4:70:f4:8a:72:
c7:ae:1b:71:55:b2:45:3d:2f:8d:93:f8:c6:e7:c1:
b8:89:80:ed:fb:55:1d:30:40:79:45:a5:df:54:97:
54:f6:09:18:17:ee:b3:27:62:30:37:e5:c8:2a:60:
9e:5b:c3:b6:33:15:23:49:d0:12:f4:8b:cc:2a:8e:
73:4c:74:67:8d:6b:24:51:1d:d4:54:b7:66:c8:91:
51:9d:37:8b:ff:d3:f8:1a:48:a3:1d:b1:88:29:38:
ad:9c:90:3c:45:bd:39:11:7b:4b:74:db:58:c8:6d:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E7:10:A5:E8:73:84:56:91:D8:40:AA:80:6C:3B:2A:86:5D:80:2B
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e1:4f:7f:4a:cb:97:d4:55:c5:bc:43:ca:79:84:5e:66:a8:
c1:dc:b1:cf:f4:f7:53:34:76:9a:2c:64:68:27:6b:6c:7d:2c:
c8:03:c9:19:18:72:82:89:12:3a:98:d9:f0:90:af:4b:8a:08:
c5:96:41:9f:0a:64:19:a4:1d:12:29:ef:2b:23:3b:22:74:01:
29:bf:7f:25:ad:00:62:a9:de:a3:f5:9f:24:30:4f:61:e3:92:
30:83:01:63:00:b2:f5:b9:9d:c8:20:30:04:24:b7:18:98:ae:
9a:68:2f:32:e9:1e:a3:f9:50:f1:da:2a:25:6a:73:3d:72:52:
d3:84:bf:8f:9e:6e:ed:91:df:7e:82:e4:b5:47:1d:4a:00:97:
d5:c7:48:04:51:03:07:e6:83:a2:9e:1b:8c:f8:d4:c2:fb:32:
41:82:61:e2:29:fc:68:37:26:8f:76:35:26:f8:f4:a3:7d:a6:
41:df:81:6d:c6:1f:26:f8:44:f9:fc:a0:2c:52:2a:7d:a7:4a:
3e:af:6d:e0:92:2a:6e:18:b8:1a:61:23:ed:cb:1b:56:54:56:
bd:da:e9:bf:47:99:21:74:4f:bb:7f:30:a8:3b:e5:d1:a1:b0:
c0:a0:fc:2a:69:66:01:dc:ce:0c:6f:a6:53:02:27:60:d7:b0:
9f:21:71:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:21:04 2025 by rpki-client