Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
File: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft (raw, json)
Hash identifier: N5i4Mq42NwysQMrPiix6tLIUUMUY1lvOEc8NRNMMYKQ=
Subject key identifier: 5B:34:20:70:EB:5E:54:CF:E4:9F:BD:85:D8:6F:9B:A2:C7:13:66:31
Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Certificate serial: 0196790D37C88F6E92D49AAC6665E1113A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
Manifest number: 07C6
Signing time: Sun 27 Apr 2025 21:00:31 +0000
Manifest this update: Sun 27 Apr 2025 21:00:31 +0000
Manifest next update: Mon 28 Apr 2025 21:00:31 +0000
Files and hashes: 1: J6N10mOHco_CHrghtNkJ8CZXfhU.roa (hash: 30kmxFBnSaCLifn+bmjA1t+lSi7TIa3l00vfDKtB59Y=)
2: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl (hash: X6Gx4htJBeFckp/XaoqECwpyOc9nUaQXxcuMWgdaVPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:37:c8:8f:6e:92:d4:9a:ac:66:65:e1:11:3a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Validity
Not Before: Apr 27 21:00:31 2025 GMT
Not After : Apr 28 21:00:31 2025 GMT
Subject: CN=5b342070eb5e54cfe49fbd85d86f9ba2c7136631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:0d:a4:05:34:03:2c:c9:0f:e2:65:3a:1c:
51:e0:ed:99:ce:22:a2:e6:07:98:62:cb:e1:39:04:
45:4c:c9:01:b6:98:45:80:3f:e4:e3:20:bd:94:0a:
d2:a2:44:48:d9:78:5e:58:c9:e2:cd:03:b3:0d:de:
d4:3d:9d:81:7a:93:52:f4:ec:43:82:ba:d2:75:14:
a0:7a:74:fd:5c:ac:48:21:f4:29:45:39:44:4b:c7:
78:24:07:a3:dc:4a:20:47:68:21:7b:27:e5:9d:dc:
eb:b5:33:0d:c7:4b:59:ee:e8:11:3d:29:e2:15:88:
cf:6c:61:d5:18:1e:90:81:d7:f4:96:c9:a8:9b:4e:
de:bd:57:4c:f2:be:27:78:fa:bf:62:9d:67:f3:19:
ef:e6:7f:98:b1:d8:f4:88:d0:17:40:b6:15:4b:f3:
85:32:be:fd:03:01:47:0c:b6:04:a9:87:f2:12:4b:
35:66:14:82:6a:46:17:5d:69:98:7e:3e:96:fa:e0:
d3:59:07:48:67:1e:2a:c6:1f:a4:f6:34:66:09:41:
7a:12:97:c3:80:d8:f8:0e:10:51:4e:d2:81:68:be:
72:ee:3e:66:46:6d:89:45:08:63:a9:87:80:5a:73:
8a:40:44:77:75:96:ac:57:d5:c6:59:b6:15:60:bb:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:34:20:70:EB:5E:54:CF:E4:9F:BD:85:D8:6F:9B:A2:C7:13:66:31
X509v3 Authority Key Identifier:
keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:23:ca:c2:12:26:f6:2f:4d:d9:ad:be:34:b2:f1:92:92:82:
fa:a7:24:60:e4:8e:fa:89:44:49:62:1c:f0:7f:c8:86:e2:b7:
c5:03:42:2c:85:8f:a7:e2:07:fc:a1:45:23:65:ae:90:ff:48:
8e:dc:5a:71:90:c1:84:7a:d3:92:af:0e:99:f2:e3:aa:f8:0d:
2c:96:78:fa:db:c7:ad:df:d2:2a:cb:ff:e6:ec:40:fc:83:f1:
09:f8:e3:d5:5c:13:26:c9:c4:8a:e6:07:d0:92:58:95:3c:1b:
99:88:8d:71:82:35:3e:28:44:5e:1e:34:29:30:e4:3a:61:f4:
ec:34:a6:7e:4e:67:17:77:3a:30:f2:9f:e7:62:9e:ef:e1:0d:
d8:a5:17:c2:09:4c:54:68:05:2a:8a:2b:1c:37:6f:bf:d1:2c:
51:83:eb:7e:cc:e4:7d:c4:fc:dd:36:cc:98:37:85:ba:d1:04:
df:72:9b:9e:d3:30:2d:0d:8d:c2:81:c2:10:5f:d1:a5:df:dc:
b0:5f:ec:10:ff:c6:e3:1c:26:fa:ec:cc:4e:ae:e0:bb:b3:3f:
09:07:19:88:2d:ea:3a:23:71:cc:5a:7d:57:a7:8d:8f:de:f1:
15:ad:66:e8:d0:f5:4d:1e:56:0e:e1:28:65:09:a0:e6:56:a9:
a0:ec:ca:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:44:35 2025 by rpki-client