Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier: JT5lz2hVu3ylcckrdRsG/5dKNO6zR3kEZ9f0jE8y8po=
Subject key identifier: 67:12:82:7A:C9:EF:86:E0:48:8C:96:68:F2:EB:8C:D8:CB:B5:46:57
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 01964C34976762A3B819E7EDC725B26CF135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 04:00:37 +0000
Manifest this update: Sat 19 Apr 2025 04:00:37 +0000
Manifest next update: Sun 20 Apr 2025 04:00:37 +0000
Files and hashes: 1: dHwX8PQaURSRhzT9O267zp2eAAU.roa (hash: pQKJANjM+1Peo4ZdiwJW4yKvtPIT0ly/kwXsgNJ+gjU=)
2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: ss5AuGBvk5QzZ6Y4o8Xhg1XMCcBAfBYZrKPeeWyPPsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:97:67:62:a3:b8:19:e7:ed:c7:25:b2:6c:f1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Apr 19 04:00:37 2025 GMT
Not After : Apr 20 04:00:37 2025 GMT
Subject: CN=6712827ac9ef86e0488c9668f2eb8cd8cbb54657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:78:60:6a:2f:12:ab:2b:a7:b6:2e:35:38:
18:ea:a0:ba:9a:52:1e:c4:d1:d5:b2:54:4c:8d:13:
ee:3e:02:41:4a:c8:a9:25:de:a4:8c:2e:ba:2d:0c:
b8:c7:3d:37:1a:c3:10:46:81:bb:dc:ed:00:a2:04:
06:36:8f:26:bf:05:84:c4:07:71:b9:99:60:b7:21:
49:45:b4:d2:01:d1:ed:04:9d:f3:06:8c:ab:b9:5a:
1c:1f:f1:2e:b2:7e:06:34:62:65:a9:3a:03:ec:54:
a8:62:b8:c2:ec:37:c5:36:2f:e1:fb:04:2c:b1:c6:
f6:32:65:0a:59:6f:98:55:36:9f:cd:4e:c0:e1:9b:
b8:4e:43:29:b6:10:86:c9:c2:6f:72:70:83:12:2d:
4d:76:bf:d4:e7:f6:f2:71:fd:d0:0c:a2:ed:04:7f:
91:e4:b9:80:2a:e1:db:87:50:ce:ac:15:f6:98:d1:
2d:f8:a4:cb:75:d5:0b:e6:2a:32:fe:39:04:1b:2f:
84:81:88:cf:e8:2d:74:6e:ca:5c:5e:d0:fb:e0:8f:
26:dc:31:fc:67:2c:d3:60:e7:56:ff:aa:b0:c8:03:
ff:4b:6e:f4:f5:7b:6c:08:9c:33:cf:8c:d6:7b:e3:
2b:5c:e1:cc:47:1d:4f:ff:72:fa:76:3b:24:52:33:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:12:82:7A:C9:EF:86:E0:48:8C:96:68:F2:EB:8C:D8:CB:B5:46:57
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cf:84:ca:da:69:80:b8:47:ed:18:5a:d6:47:35:76:75:26:
f0:7a:ad:25:df:61:91:e6:43:3c:3a:24:49:0b:87:4a:08:0c:
a2:16:fb:63:c8:2d:14:2b:4d:90:4f:5f:3b:35:ab:85:61:30:
2a:7e:9b:ca:d3:4b:b7:16:4e:8e:9a:6c:ce:f5:1f:3b:7c:76:
bd:c2:26:40:a8:47:5d:d0:66:15:cb:09:b9:d9:d9:6c:99:10:
d4:bc:6e:82:5c:8a:e9:29:d8:81:db:67:2c:b0:24:cb:99:05:
f9:9c:5d:97:7b:bb:cb:9d:58:87:82:7f:f5:2f:a4:12:51:0c:
51:cc:db:f6:c8:5d:da:74:38:60:df:07:a1:41:8c:fd:50:af:
c6:5e:5d:57:12:0c:e5:97:00:ff:78:89:33:df:f3:4b:8d:20:
de:2a:5b:45:e1:a2:e3:f0:69:61:19:bf:79:da:74:73:87:c9:
a1:13:f1:d5:92:4c:19:c6:32:63:4d:2d:c8:e6:6d:07:a2:fe:
e6:c6:22:93:3e:11:c1:d1:bb:56:6d:51:78:1a:c8:dc:02:2b:
04:a0:96:c3:fb:bf:ee:28:1f:51:2e:55:23:7b:3e:b7:0a:f5:
3b:12:75:f4:66:6a:c6:44:c0:fd:47:bd:f8:9f:fc:fc:c4:9c:
0b:6a:4a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:16:49 2025 by rpki-client