
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
File: jV8GavgNDp8H6oeyS9r6WdH18m8.mft (raw, json)
Hash identifier: 56/fNaLKSM7fXbcW7rbhwQibh9gZBZ7b1AGNe9b/Il0=
Subject key identifier: 23:73:F2:D8:95:CD:57:8A:38:61:CC:2E:E7:04:DB:07:3B:41:2B:8F
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Certificate issuer: /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial: 01964FA3342E4CF4D024D7CF111966368551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 20:00:17 +0000
Manifest this update: Sat 19 Apr 2025 20:00:17 +0000
Manifest next update: Sun 20 Apr 2025 20:00:17 +0000
Files and hashes: 1: Nu6PzktHZPkZpTfNWDAC1WQ31fs.roa (hash: 0olptWKqLuwlqgvdBxIZwPcl+HWoWf7gPYNB7LvpZJo=)
2: jV8GavgNDp8H6oeyS9r6WdH18m8.crl (hash: nVpkQDt82N+lxvNGX8D6M4GsZaLHmV2bZyzlPCaadVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:34:2e:4c:f4:d0:24:d7:cf:11:19:66:36:85:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Validity
Not Before: Apr 19 20:00:17 2025 GMT
Not After : Apr 20 20:00:17 2025 GMT
Subject: CN=2373f2d895cd578a3861cc2ee704db073b412b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:a7:54:1d:b6:42:7e:47:ba:2a:e3:48:29:
50:13:b0:0a:ec:ee:cc:4a:99:a5:56:99:b9:2f:b6:
5e:f9:fc:23:5a:ec:24:df:a3:7d:82:f2:a2:19:91:
94:d0:35:31:2a:0c:eb:9e:c0:a2:75:2b:2d:55:8f:
dc:ef:db:48:40:73:c6:da:e9:be:4e:14:e4:80:a3:
66:dc:2b:52:82:4f:1c:0d:b1:c0:f3:2d:2d:aa:25:
84:a2:b7:f9:6b:39:61:43:2b:e4:38:79:8d:3d:b1:
16:28:bc:13:52:82:2e:29:a7:8d:ef:90:aa:9c:53:
f6:30:ce:de:27:f8:e7:45:a5:b0:4e:fc:97:04:63:
bf:32:f3:f8:44:fe:25:dc:67:6b:01:6e:0f:01:81:
22:39:65:c4:f0:cd:89:bb:21:28:c0:a0:dd:fb:01:
1d:0a:b9:42:be:40:f8:f3:56:3d:c5:31:86:11:cd:
48:24:d3:0a:fe:92:4c:b9:44:d7:1b:bd:26:14:db:
c4:c2:b6:e3:e3:28:39:de:29:6e:75:34:f4:a6:09:
21:43:42:0b:e2:59:0b:c5:7a:c7:4e:3e:f6:7d:f1:
3c:b2:75:c0:f0:95:c6:83:09:da:5c:8e:2b:a8:ed:
db:4e:1f:16:db:f7:36:d3:2a:33:98:c4:65:07:75:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:73:F2:D8:95:CD:57:8A:38:61:CC:2E:E7:04:DB:07:3B:41:2B:8F
X509v3 Authority Key Identifier:
keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:09:c5:11:b8:53:e8:7d:bd:16:89:d2:32:8d:6c:73:fb:c7:
67:9b:2f:65:f3:53:07:7a:c9:17:c7:f1:eb:a9:01:ea:e2:40:
92:68:8d:2d:7d:0e:c9:70:41:31:0e:15:4b:3f:42:6c:d1:85:
da:8f:e7:88:93:bc:e5:3b:16:ee:18:1d:a2:e9:0e:57:aa:82:
1a:e4:6e:87:87:54:31:f7:0d:6d:eb:d4:40:76:c0:ec:f7:2e:
74:db:63:9d:7e:a2:90:c9:ee:09:74:1d:1d:63:d3:4e:33:ae:
f8:3a:bd:86:e1:65:de:ab:31:60:54:97:89:c0:a8:15:63:dd:
9a:9a:c5:53:46:e6:53:af:67:d4:ae:9c:6f:f5:c9:6c:fe:b8:
95:9b:bf:e3:97:6a:25:63:ac:c8:60:57:d3:af:3c:eb:8b:e3:
47:28:80:e7:62:1e:c6:aa:14:60:c6:a0:e5:44:1e:b1:62:49:
9a:c8:9d:13:c1:b2:1d:b5:ec:74:6c:4b:28:d7:0c:ce:35:a2:
09:28:d0:94:a4:d6:87:20:da:cd:49:67:f6:b8:bd:06:67:20:
e7:ec:79:e6:02:1b:7d:12:d0:96:5f:f8:c7:16:16:7f:f3:29:
13:c3:f7:b5:39:dc:fc:ee:1d:92:59:4d:69:ab:a0:24:7a:91:
2c:74:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:53 2025 by rpki-client