Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
File: jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json)
Hash identifier: 6W3ScvjtuWFpZai9+qt8tRXb/AeNeVKXcaYvPGdPTME=
Subject key identifier: 52:E0:4F:4C:EF:ED:3D:36:51:49:B9:B2:45:6C:61:82:EF:66:D6:DA
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial: 0196078AC4685497B90EA9A133EB2A6E2A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
Manifest number: 0954
Signing time: Sat 05 Apr 2025 20:00:56 +0000
Manifest this update: Sat 05 Apr 2025 20:00:56 +0000
Manifest next update: Sun 06 Apr 2025 20:00:56 +0000
Files and hashes: 1: 1RkFk6kOyZCZ0G93_QFK7wOQ0jE.roa (hash: dMUuv6OdwNCSIK7eZl1fAYrgrlFJZc1L1gPUfpLpqmg=)
2: J54Y1IoCU6EUYDsQwZq0KC6RsFc.roa (hash: xhKFAcEbOSjBXoqtlWbGh1EqEqQx5jRVKa/Fp/J2eqc=)
3: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: +p2Nnuo6ojWaNw4gaQD0Csac5fqd1eJXRx84FZBC6vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:8a:c4:68:54:97:b9:0e:a9:a1:33:eb:2a:6e:2a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Validity
Not Before: Apr 5 20:00:56 2025 GMT
Not After : Apr 6 20:00:56 2025 GMT
Subject: CN=52e04f4cefed3d365149b9b2456c6182ef66d6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:c2:7b:4b:30:c0:19:e3:8e:b8:6b:08:ec:
18:47:3a:28:86:4b:fe:60:85:87:2a:22:4c:7e:47:
dc:56:0a:73:46:b4:c7:3a:bc:e2:94:7e:d9:da:3f:
91:fa:4f:f6:76:c1:f1:bb:f8:34:f4:b6:4d:ef:1a:
fa:76:05:5b:94:84:c0:49:2a:ae:36:7e:6e:ca:fe:
da:36:02:49:8a:9e:52:68:1a:99:31:7f:eb:99:81:
30:61:23:e0:3e:5e:1e:b8:64:15:c3:f3:31:c7:1f:
fb:08:6e:f7:9c:8c:cb:63:5d:10:e8:70:f7:81:18:
d6:8e:01:c8:58:63:55:86:b1:05:c0:70:df:35:5f:
5d:d7:16:e4:0a:43:ed:34:04:28:04:f5:1f:92:ee:
be:a1:2f:1a:94:63:e7:89:c8:f6:77:30:fa:0c:de:
c9:35:bf:f9:d0:e7:58:e9:75:87:51:41:28:f0:e9:
52:6b:41:1a:61:46:bd:ad:a2:21:9c:78:0e:02:1d:
51:fa:c1:5b:34:2c:93:9c:1b:bc:27:6f:11:1a:3d:
8c:54:cd:b4:23:98:33:22:db:32:bc:a9:9b:17:e9:
cb:4a:b3:db:8b:c0:41:76:24:14:88:a0:10:0a:ee:
ca:a9:ea:c2:3b:7e:e3:55:33:40:c9:9d:2a:65:74:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E0:4F:4C:EF:ED:3D:36:51:49:B9:B2:45:6C:61:82:EF:66:D6:DA
X509v3 Authority Key Identifier:
keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:dd:c6:cc:f5:52:7e:1c:64:38:52:ae:77:c7:79:6c:ce:b6:
46:1e:17:8e:fc:6b:00:a0:08:05:0f:87:f5:0d:e0:f1:14:42:
60:78:74:23:be:c7:09:e1:f5:9d:b8:98:9e:8a:be:e4:8c:30:
41:df:8a:26:a4:3e:6d:a8:ae:68:ce:f1:17:ad:a5:29:1b:31:
fc:8d:bf:80:05:7d:71:e5:a4:c9:03:13:05:03:8f:0c:76:d4:
be:1a:e0:bb:98:e0:5d:fc:cd:5a:f4:84:9f:64:ba:9c:07:fb:
08:68:d7:57:72:b4:e4:f1:0c:bd:af:46:20:43:b7:3a:b1:da:
b9:7a:5f:42:4a:65:2e:a1:3e:30:e7:fa:59:e5:23:e8:e3:76:
f6:22:88:32:a9:83:11:e2:bf:5b:b9:76:47:44:b0:72:0b:8a:
b8:0d:75:29:f4:37:40:f8:7e:38:44:98:f5:6b:c2:46:5c:fe:
95:cc:41:04:5e:fe:cb:95:62:ed:91:7e:7d:08:2a:fc:ec:2d:
55:8d:b3:24:e3:c7:b7:02:a0:3d:32:24:b8:f5:ef:18:54:b8:
9f:f1:f2:86:4b:5b:d3:6f:54:62:7c:3f:a4:12:63:e1:af:00:
0a:fb:eb:3b:75:d2:4a:0d:a5:8d:f0:f2:9f:2a:6b:4f:00:1f:
4a:d7:50:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:12 2025 by rpki-client