Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: jPb6FcJ+AXzM6zdhEUBcOMO0VyLG3V9jlmin4HnCmJA=
Subject key identifier: 5C:7D:BF:56:69:80:2D:3F:E2:6F:6F:FE:15:4E:7C:1A:27:85:FA:F5
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 01964E236568AF4B1C38E7515F7133A428E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 13AE
Signing time: Sat 19 Apr 2025 13:01:04 +0000
Manifest this update: Sat 19 Apr 2025 13:01:04 +0000
Manifest next update: Sun 20 Apr 2025 13:01:04 +0000
Files and hashes: 1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: VsLWpkXO7OfyxQ9fw4oGWMTmuwY5+WzSlsUSCZ37ymQ=)
2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:65:68:af:4b:1c:38:e7:51:5f:71:33:a4:28:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Apr 19 13:01:04 2025 GMT
Not After : Apr 20 13:01:04 2025 GMT
Subject: CN=5c7dbf5669802d3fe26f6ffe154e7c1a2785faf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:e1:a2:17:82:53:3c:d1:a9:33:c3:9b:23:
16:d7:a8:75:8d:00:55:bf:ea:81:ac:be:3a:9b:d0:
85:f9:59:fc:c7:d8:a2:a0:2c:6c:a7:1c:e9:b9:f2:
bb:58:23:7c:23:26:7b:3c:f3:61:5b:b8:a7:2c:85:
22:dc:78:09:ff:d1:05:84:76:9b:42:1e:03:60:e1:
bc:70:a0:9d:e3:af:be:6a:b5:85:40:61:f8:73:49:
42:7e:7b:8b:9d:a2:5f:94:8c:6f:6f:0e:9a:be:30:
4e:69:8a:42:18:25:b5:5c:c3:2e:33:10:19:45:98:
c3:71:6b:ac:d6:ad:17:76:ee:44:74:2f:7b:0e:f3:
02:d4:8b:bd:49:ec:83:4d:df:6c:c8:35:18:6c:a1:
60:b3:e0:f2:df:ca:4d:d1:92:23:cf:a1:e5:1e:1a:
93:07:b9:32:83:a1:3d:7f:c5:f4:93:c4:e0:47:01:
91:03:3b:48:18:25:f9:23:85:84:61:db:d3:c5:51:
99:55:e1:45:27:99:ae:32:eb:a0:cb:8d:6c:a8:66:
a3:15:dd:56:54:d6:ff:29:1b:1b:77:70:ed:e5:90:
6e:08:d2:f4:66:e3:64:5b:bb:2c:a3:be:cb:0b:4c:
dc:84:e7:9e:9a:84:c5:3c:02:aa:ee:1c:56:3f:ab:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7D:BF:56:69:80:2D:3F:E2:6F:6F:FE:15:4E:7C:1A:27:85:FA:F5
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:07:ee:6d:d8:29:44:a2:77:29:41:46:be:82:89:3b:61:5c:
56:d1:1f:e7:74:13:58:b8:f3:ec:a4:23:05:9a:9d:4b:ff:c3:
0f:73:39:ad:61:42:a2:ad:90:19:50:fd:10:6e:9d:c1:b4:53:
22:b2:54:27:94:f7:32:f5:81:d9:47:ef:d3:71:7a:fc:a3:cf:
1c:2e:92:cd:f5:e6:d4:b6:ce:01:ad:74:b4:b9:53:54:0c:d4:
22:32:57:d2:4a:72:49:d7:42:77:ca:d8:a8:2c:3e:84:3d:6c:
1c:7a:9c:5f:68:b1:c1:2d:c5:7b:80:4f:02:49:78:86:7a:71:
0a:14:e8:2f:e1:06:ff:45:c1:e5:28:d1:36:23:23:ba:fa:81:
02:0d:00:02:97:b0:c3:23:4f:cf:0b:2d:23:6e:1a:08:56:11:
6c:fc:82:c0:dc:77:9f:bb:e2:16:de:25:ef:5d:bc:c6:cf:29:
d0:87:c3:11:b3:f5:db:6e:fa:00:af:31:db:c7:bb:3a:86:1b:
9d:2f:0f:2c:ca:a7:cc:de:fc:02:69:9a:6e:b9:e1:18:74:dd:
5a:48:21:53:4c:c5:dc:b8:58:e2:9b:cf:c6:5d:bf:66:54:ac:
6b:41:1d:1b:54:8a:6e:5e:98:12:63:13:e2:6f:33:33:60:2e:
25:15:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:18:19 2025 by rpki-client