Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json)
Hash identifier: tIhNSbYzI6DGv30kdb4alKH8KQ2FBA5mI42mpLX7Jsw=
Subject key identifier: 5B:2F:09:95:66:69:3F:5D:11:80:52:0D:92:67:D8:E0:0D:76:EE:83
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 019640D56830CFBE3C9939AC02952E20D913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
Manifest number: 0242
Signing time: Wed 16 Apr 2025 23:00:49 +0000
Manifest this update: Wed 16 Apr 2025 23:00:49 +0000
Manifest next update: Thu 17 Apr 2025 23:00:49 +0000
Files and hashes: 1: NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa (hash: a1KXZCaEoxN1UkOcv0YA7zkHr19aSLSv8QON/lo/20Y=)
2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: xzH2E1C6BdCBCYmD/UG+3U9sHc/QmLooteIxPPXnFkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:d5:68:30:cf:be:3c:99:39:ac:02:95:2e:20:d9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Apr 16 23:00:49 2025 GMT
Not After : Apr 17 23:00:49 2025 GMT
Subject: CN=5b2f099566693f5d1180520d9267d8e00d76ee83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:c2:98:0b:bf:0c:f7:b8:3b:8c:c6:d7:9a:
c4:07:1e:e4:29:2e:5b:27:8c:96:06:40:ea:a1:21:
82:d0:ee:70:96:b0:4d:79:0a:06:3e:6a:71:43:73:
c5:c1:8a:1e:f6:1d:d3:f6:55:ef:89:d0:26:3b:58:
19:fa:d3:26:0c:a7:1e:9d:43:ab:fc:2c:f7:fe:06:
59:98:38:cc:f6:e7:76:e3:31:53:b5:1d:d5:cd:0c:
f3:b0:92:96:b0:70:78:b8:a5:e6:e2:b9:96:23:14:
b2:0a:d7:74:ff:c7:13:95:21:36:56:e2:96:04:da:
a5:21:21:8c:09:ad:33:d3:fd:bd:62:c7:4a:e5:cc:
60:7c:70:5a:e5:9e:c1:c4:fe:18:35:06:fe:12:61:
22:c8:db:55:dd:ae:ad:44:0e:da:0e:ae:c0:41:9c:
61:db:3e:e8:1b:1a:bd:4a:10:3c:e4:e2:1f:9b:bb:
75:c4:7d:9a:b3:64:b6:84:4e:f9:f3:a8:dd:c7:a5:
87:73:1e:78:38:67:03:43:55:7d:9d:4e:83:cc:42:
08:be:56:04:1c:c3:6c:f1:44:8a:de:cc:ec:d2:fe:
f2:e0:84:4b:ef:37:e7:2b:b7:f8:da:c5:2e:7e:8f:
60:21:2b:c2:ff:eb:96:16:a8:88:d1:fc:21:ad:d2:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2F:09:95:66:69:3F:5D:11:80:52:0D:92:67:D8:E0:0D:76:EE:83
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c6:06:f0:35:83:36:d8:97:fe:e1:54:35:10:b8:71:80:cb:
d9:99:88:b9:56:f5:48:c9:67:85:d3:ca:5d:92:93:08:e5:1e:
aa:f8:66:04:0a:0e:b6:89:0c:fd:f7:d9:76:c8:5b:29:85:2f:
9e:ce:c0:57:3f:68:d3:ae:c5:b8:b2:20:d2:9c:73:49:20:38:
c1:d6:f9:2b:07:aa:2a:68:95:27:48:0b:c0:20:93:ca:89:89:
e5:26:50:9f:ab:06:f6:ea:60:34:91:24:a7:8a:bc:fb:16:87:
4e:d1:e5:34:7f:1b:18:60:9e:a7:9b:cb:0d:a5:4c:88:41:b8:
bc:88:e8:ef:cb:6d:1d:1f:31:d1:e7:26:72:97:70:da:3c:8f:
57:9d:09:b2:10:92:34:45:49:f1:61:ad:68:c8:39:ff:d8:e9:
95:f7:43:b3:35:b5:1c:55:2b:38:50:1c:c8:40:8c:9b:60:ef:
e5:2c:97:16:57:08:58:54:a7:22:ad:b7:23:db:29:67:0b:e7:
7e:5f:b9:4d:32:e7:32:33:cb:5a:d3:59:f3:22:15:ab:e4:db:
2b:22:e2:6c:b0:21:c5:56:ad:3e:7c:ae:f2:2b:61:32:71:ab:
17:56:9a:41:55:5c:26:64:c2:26:0e:39:86:e8:b2:be:f7:75:
0c:01:1b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:18:58 2025 by rpki-client