Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
File: jT81agLZZ5zokLXVHg3sLz82M2E.mft (raw, json)
Hash identifier: PFbzSWXwLilTIywfppKjUn5JGZFN+Y2noS1NMm8hbg4=
Subject key identifier: EB:48:A7:7B:4B:25:13:11:48:69:60:0E:72:4D:8B:B8:70:16:A0:29
Authority key identifier: 8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
Certificate issuer: /CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Certificate serial: 01961CFFA24A1504F346156CC6865FA4CA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
Manifest number: 0F09
Signing time: Thu 10 Apr 2025 00:00:37 +0000
Manifest this update: Thu 10 Apr 2025 00:00:37 +0000
Manifest next update: Fri 11 Apr 2025 00:00:37 +0000
Files and hashes: 1: EWrLpH4Sf73kpylzjyIWqmsW4Ak.roa (hash: WAVleiEyABWuPtt06sTvvo12euN11LhTBCh1lmQSM18=)
2: TbDm0VV2IIni5MfaMJDxPEqxHQQ.roa (hash: 7X6b+hTk4kXwHQiBVUnERgcn3N8YcwYoax1mTJYhV7U=)
3: YXd5kwg4HgCLWghJcX8C036D1Wo.roa (hash: 4mxl4tWWj/m9oN5bIXyonk91G4n197ABWNjjuhmRTbU=)
4: jT81agLZZ5zokLXVHg3sLz82M2E.crl (hash: ukWICKMJvr/y9W04X69R+VZQhHa9jf+vpRyia1Psedo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1c:ff:a2:4a:15:04:f3:46:15:6c:c6:86:5f:a4:ca:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Validity
Not Before: Apr 10 00:00:37 2025 GMT
Not After : Apr 11 00:00:37 2025 GMT
Subject: CN=eb48a77b4b2513114869600e724d8bb87016a029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:6d:16:8f:11:85:0f:c3:5d:3f:c8:0f:31:
0f:9e:be:73:28:b3:a2:b3:3d:1a:a7:a3:f8:e6:f5:
ef:5a:13:83:e0:4b:6c:eb:4f:fa:d4:3c:32:ab:9b:
17:d7:64:55:c0:8c:50:7f:de:f1:01:a9:51:e2:cb:
a3:8f:3b:17:d8:bd:dd:a8:3d:50:f5:84:94:a6:2e:
c8:96:9b:7f:5f:d6:d7:59:1a:66:85:f0:f6:4f:c8:
43:cd:18:3d:12:d4:2e:62:cd:f4:c4:39:ea:8e:b3:
7f:af:07:da:fc:3c:90:ce:94:ec:a0:19:38:3f:49:
3f:54:1a:80:4f:ac:0d:d0:83:9f:9c:11:66:0e:7c:
ec:8a:3f:22:7f:c7:de:aa:05:49:67:16:6c:77:f0:
b2:9c:55:6e:f6:bb:b9:63:75:10:f3:63:ce:8f:86:
0b:04:0b:ef:e5:9b:39:0d:f8:88:0e:b5:1b:39:e3:
68:40:48:ab:4b:d7:1a:3d:33:d2:4c:ed:51:ee:02:
17:cd:f1:80:4d:b9:9a:cf:79:75:92:6e:4f:56:24:
a9:db:09:54:aa:b8:1d:56:ab:d4:a7:10:49:00:42:
02:b9:e3:22:6c:51:5c:eb:4c:2d:a7:b3:b6:d9:13:
25:e9:5a:b2:ac:4e:46:d6:be:85:d9:eb:d3:7e:bc:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:48:A7:7B:4B:25:13:11:48:69:60:0E:72:4D:8B:B8:70:16:A0:29
X509v3 Authority Key Identifier:
keyid:8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c7:9e:a6:4d:24:54:e3:fd:a8:05:80:80:bf:c2:42:b9:3e:
bd:a1:7c:24:6b:a7:e4:c1:89:ff:8d:6a:c2:e1:99:09:2d:bf:
26:cb:6c:d8:79:c8:fb:d7:d7:77:81:e4:9b:28:f0:d2:de:6c:
da:a5:3d:5f:d2:7c:f6:d4:79:20:3c:59:9a:2b:8a:60:96:b2:
c4:4e:20:b3:3c:0e:f1:3d:f5:44:ba:30:ef:64:5c:72:25:f0:
52:0c:22:82:f3:14:e7:02:42:5d:d4:58:d8:0a:04:53:39:3c:
f6:9e:aa:d6:c3:27:38:78:c1:31:de:55:ba:50:60:8b:3f:5c:
38:65:0a:c4:f4:5d:01:e2:74:b4:20:1e:76:4c:e5:fc:75:f9:
cd:72:f5:b2:af:0f:f7:70:d8:70:c5:23:98:8a:0c:42:79:e7:
5c:70:a7:2e:f4:48:78:30:0d:45:a1:1e:19:9a:b5:71:1d:03:
9c:cb:09:09:5b:87:b2:e4:46:9c:60:5d:bb:b5:61:50:9b:fc:
65:b2:54:3a:7c:e2:2c:bb:ab:3d:ca:64:a4:99:ab:15:aa:de:
44:e3:a4:3f:33:6f:c7:12:34:96:2b:81:50:1c:2b:77:3d:53:
ef:95:40:21:52:ce:35:bb:40:4d:d3:a5:f0:30:ff:e3:c6:1c:
2a:1b:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:15:06 2025 by rpki-client