Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: IMII0NwAqiQWuj9ztCjmJJVp9v27nAL9zOQ/KjIndoc=
Subject key identifier: 84:ED:5B:1A:B6:A6:E0:9D:5D:81:71:25:E8:E9:C1:5A:0A:31:BF:40
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 01965D5F7179359439402DE9167D94306485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 02B3
Signing time: Tue 22 Apr 2025 12:00:58 +0000
Manifest this update: Tue 22 Apr 2025 12:00:58 +0000
Manifest next update: Wed 23 Apr 2025 12:00:58 +0000
Files and hashes: 1: TelciHh83ohMZLEiglr17mKx9tQ.roa (hash: WRRAn8x5n/KXtMausaPQfYREHYj3cbcPK0dMlkeLq38=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: 4zrzd6jIFRcY8ERHTgdfJBzfg9nGfkitBRV5MzNa++4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:71:79:35:94:39:40:2d:e9:16:7d:94:30:64:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Apr 22 12:00:58 2025 GMT
Not After : Apr 23 12:00:58 2025 GMT
Subject: CN=84ed5b1ab6a6e09d5d817125e8e9c15a0a31bf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:50:cd:43:7f:93:b2:70:76:eb:9f:c1:d6:
15:79:a4:6e:b0:b6:fd:54:5d:5d:f5:68:6d:6b:6b:
56:81:87:7d:03:9e:31:17:60:75:ee:1e:2c:4b:30:
35:de:31:48:2f:ef:e6:fa:0b:2d:15:5a:fe:87:73:
2d:e7:db:93:00:08:b9:bf:df:83:f2:f9:99:9b:59:
ee:2a:3b:77:60:31:67:1f:96:c0:3d:0c:4f:8a:df:
ba:a9:ee:3a:b3:45:61:60:9f:a0:99:ed:96:b2:c1:
40:2f:f7:b3:9d:e4:70:11:27:7e:71:1e:0f:2c:77:
56:29:fc:5c:f7:cc:18:1b:ba:d9:b7:86:79:ef:a8:
7e:07:21:5a:02:0b:3e:8a:df:b0:55:7c:16:26:0d:
58:9a:c1:96:d4:fc:90:18:a6:64:26:9b:09:41:71:
eb:9d:4b:f3:36:65:8b:2b:94:ed:45:b0:64:d9:86:
40:02:1c:16:83:5d:c2:a3:4e:01:54:7b:57:89:63:
35:6f:08:ef:34:0f:43:7d:4b:97:0d:78:5f:8d:b0:
cd:c8:5e:46:e4:6a:c9:c4:a7:d5:b8:57:a4:2e:0e:
a2:58:c8:7d:f8:2e:6a:8a:a8:13:95:bf:2f:c4:f7:
44:28:30:55:7a:09:32:95:5f:5a:cb:fb:af:e5:ad:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:ED:5B:1A:B6:A6:E0:9D:5D:81:71:25:E8:E9:C1:5A:0A:31:BF:40
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1a:fd:fa:0f:89:70:18:7b:09:d0:65:5a:a2:dc:5e:b7:51:
5a:06:17:f5:49:c1:a1:be:e0:52:0c:76:b8:04:ca:cd:bd:e9:
57:05:bf:6c:a2:92:94:81:5c:09:b8:8d:1f:ca:de:88:98:f7:
7e:c1:e0:45:0b:ba:9c:76:05:b2:94:cd:90:9d:80:9a:b2:0d:
8f:f9:30:14:ed:c8:be:a0:77:57:d2:32:d0:35:3b:ce:46:0b:
5f:5a:13:a0:ce:f4:7e:66:3d:61:a4:12:3f:a2:e6:3f:1f:b0:
ea:e2:73:96:50:4c:44:03:37:c3:77:c2:06:21:77:b2:51:e5:
6e:ee:1e:08:d0:6e:15:03:35:44:68:0a:8a:33:3a:31:42:2d:
9c:8c:e0:8e:9b:b8:1c:6f:6b:cc:8b:33:ff:bc:c4:95:c2:d9:
0e:0b:8f:4c:07:c7:75:c7:c7:a5:96:fa:6a:1c:0a:a3:8a:77:
53:9f:3e:d5:c8:87:74:b5:61:60:85:81:46:65:63:22:d5:fb:
8c:38:00:82:b5:03:d7:84:30:2b:0e:9b:f2:d4:1d:ce:a0:dc:
a2:77:5b:08:44:01:af:2a:78:50:bb:fa:59:aa:6c:d2:6e:74:
2f:c5:19:ff:ac:70:0b:4c:29:46:b7:7b:be:7b:53:4a:d2:95:
cc:fb:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:34:13 2025 by rpki-client