Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: 23qqLxBo0OSj25Pdq1kDdancDYNsUANOg76h7JQ0c4c=
Subject key identifier: 21:D9:7F:09:BF:66:02:14:45:EC:5A:B5:4C:C4:BA:0B:E2:05:2B:E6
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 0196729D46740779B19534D4F60C00EF3F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 148F
Signing time: Sat 26 Apr 2025 15:00:31 +0000
Manifest this update: Sat 26 Apr 2025 15:00:31 +0000
Manifest next update: Sun 27 Apr 2025 15:00:31 +0000
Files and hashes: 1: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (hash: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: mrz2v5Bb4eNGPTHGAOY3wek1s4OuyCuO/JD5JH7zOoI=)
3: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (hash: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:46:74:07:79:b1:95:34:d4:f6:0c:00:ef:3f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Apr 26 15:00:31 2025 GMT
Not After : Apr 27 15:00:31 2025 GMT
Subject: CN=21d97f09bf66021445ec5ab54cc4ba0be2052be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:00:9f:6a:67:e4:7e:26:0a:27:06:97:7d:
e7:bd:8a:7c:7e:7b:8d:c8:9d:55:67:f8:f3:50:80:
5f:67:09:b7:f6:28:aa:bc:48:12:42:db:a8:4a:52:
71:e5:81:af:e4:69:70:7a:11:62:61:35:db:67:b6:
73:9d:2c:a2:aa:21:70:91:30:41:8c:a8:03:c5:74:
5a:cd:6d:a0:cc:b6:c7:4a:2e:b5:d5:da:04:98:64:
98:bb:23:91:e2:73:fe:d3:c9:22:a6:e3:ce:00:2b:
13:f1:bd:4f:c7:b2:b2:9a:ad:c9:f9:96:bb:70:d2:
0e:df:10:6d:0e:3b:83:8f:38:a1:de:46:6e:29:4d:
00:06:b5:a8:ad:ce:dc:99:02:7e:a5:7c:e7:2c:2f:
39:31:f0:cb:57:13:3f:d7:ea:3f:7b:3a:0b:2a:52:
99:5a:12:df:0d:51:47:2d:c9:ad:b1:f1:1a:8a:36:
d8:20:75:3f:a7:e2:3d:6d:b3:2e:e5:87:3c:c3:5f:
dd:f7:80:79:97:f0:fd:9f:41:8e:15:3e:4d:1e:13:
77:1d:60:71:86:ef:ea:30:09:47:0c:f1:14:54:1b:
c4:1c:8f:7e:c5:ec:79:74:d0:57:35:17:5e:6e:17:
6d:f5:47:08:26:0a:61:5f:bc:71:2f:cb:14:2f:15:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D9:7F:09:BF:66:02:14:45:EC:5A:B5:4C:C4:BA:0B:E2:05:2B:E6
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:81:76:63:9b:99:3c:26:ef:20:9f:f5:1a:2c:34:4d:27:97:
99:1e:a3:37:85:87:64:bd:f8:94:15:b9:b2:bc:3b:cd:0b:35:
48:f1:12:c3:58:4a:f0:ce:55:43:5f:d1:d9:03:f2:8d:44:41:
fa:3f:1e:de:cc:06:2e:39:1f:73:2d:ad:c5:4b:e8:90:56:33:
02:d3:5d:9d:87:ba:27:dd:f2:97:58:9b:ed:90:76:01:2f:7f:
a5:6b:d1:06:b8:c8:e7:c1:29:88:db:1a:d2:74:a8:5e:7f:1e:
82:d9:d8:46:4e:d2:d8:9d:e0:b4:2c:8a:c7:ae:ff:e5:1d:bb:
fb:2e:59:9c:ab:42:d1:64:0f:4e:cb:64:d5:27:b2:08:6d:3d:
5e:39:73:2c:a5:c8:3f:50:63:6c:e4:9c:3c:33:db:6d:60:4b:
a4:09:f0:33:be:87:fd:d6:5b:a0:d7:fe:5f:c6:a2:2b:4e:65:
22:37:a9:48:9c:62:c6:38:55:ad:17:8d:7b:9a:a5:a0:d7:51:
4a:f5:b7:c7:07:12:ad:06:c6:d4:f3:90:1b:1c:11:52:45:39:
37:39:2d:ff:7b:06:79:29:8f:5f:d8:74:fa:8f:c8:f1:c1:f1:
6d:d1:67:9c:83:22:4c:f7:1a:03:36:31:80:91:64:2b:84:f9:
d1:2e:86:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:13:58 2025 by rpki-client