Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: BcnqQeabfTt1QMVMy2qTJmSNiXRbvOB9hhQhRkUqNDo=
Subject key identifier: 7C:53:99:74:96:8B:A9:8A:85:87:21:6C:0F:72:4D:AE:6B:46:3A:1D
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 0196729D56C119134DAC1DE2DEA50FE7BD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 0FDB
Signing time: Sat 26 Apr 2025 15:00:36 +0000
Manifest this update: Sat 26 Apr 2025 15:00:36 +0000
Manifest next update: Sun 27 Apr 2025 15:00:36 +0000
Files and hashes: 1: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=)
2: ds8x3qHhuROEI3eYeW-J-KnoVOY.roa (hash: sZSMC1BrQoLmX+rojH+SOE/CV/DFjkpNZIlB8RClTc0=)
3: jQInECNXc0p8Lpjj-s1SoXORrsY.roa (hash: QgcQD1WSSYMYOa1FRqEex60YkyPfDqbnNuvvBLNxxGQ=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: 28YHDREDzpV9O0hoDsjuQlbInN4xJAH5sJgqDyEFElM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:56:c1:19:13:4d:ac:1d:e2:de:a5:0f:e7:bd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Apr 26 15:00:36 2025 GMT
Not After : Apr 27 15:00:36 2025 GMT
Subject: CN=7c539974968ba98a8587216c0f724dae6b463a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:82:a0:6f:37:f6:26:ef:92:18:e5:39:92:
89:5c:11:cc:e9:fc:ed:69:18:5e:c1:bd:78:a3:fc:
62:48:73:8b:a9:a8:c2:0c:6e:cc:f4:62:64:a7:6f:
d4:0f:77:78:63:71:c7:40:69:39:19:bb:92:dd:69:
fb:a1:6f:2a:b6:ec:10:3e:ff:55:1b:42:c7:36:e2:
04:c5:d4:07:19:ad:5b:dd:99:61:01:45:53:24:95:
a8:03:03:52:a3:26:06:77:15:b6:8d:56:ca:ee:0a:
d8:44:02:77:77:0d:78:94:58:34:b8:06:8a:54:6d:
c2:9a:f4:67:89:d8:8a:d5:c9:4f:4e:ab:47:cf:02:
18:e2:f4:26:c2:93:58:91:55:83:df:26:2b:c3:a2:
fd:01:26:9c:ac:8c:d5:c0:7b:41:b4:bc:73:7d:4d:
a3:30:cb:7a:c6:32:d2:4b:db:80:10:a3:9a:70:8e:
e3:5e:d9:04:49:7e:d1:2f:1d:ec:1f:94:b7:7c:49:
9f:ee:6d:43:f0:05:fa:43:7f:29:da:b4:f1:40:78:
ff:c3:9c:db:0e:21:02:12:b5:cf:90:0d:7e:6c:96:
53:93:95:a6:eb:15:17:2d:54:b8:44:52:26:03:e2:
62:fd:7f:8a:78:84:aa:07:ae:35:8f:22:b1:ff:64:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:99:74:96:8B:A9:8A:85:87:21:6C:0F:72:4D:AE:6B:46:3A:1D
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7b:86:c9:17:6a:b2:02:56:7e:8d:a1:8c:fa:55:b9:14:af:
41:05:ab:1e:c0:82:24:35:aa:d2:33:c6:fb:38:35:f6:9c:f2:
a4:ef:f8:65:76:c7:7b:0c:31:b3:89:5d:ad:9a:2e:98:5e:06:
d1:b1:e6:5e:85:83:97:51:9c:25:38:c5:d3:ae:68:87:9e:ca:
d5:48:8f:23:f5:3f:4d:13:42:14:8f:23:13:b0:7f:1e:37:c6:
48:27:37:d0:be:18:6d:3c:5c:1f:44:61:40:08:17:95:21:45:
b7:15:47:fb:a6:3e:d0:1c:20:dc:c5:0c:00:1c:a4:86:ca:bb:
44:ad:33:66:2d:43:63:89:7e:3a:40:93:85:0b:a6:d3:56:ee:
d1:0a:c0:6c:b6:89:15:6a:d8:ad:ce:4c:fd:e3:63:fe:6b:79:
e9:7c:c5:52:8f:22:6a:06:1e:2c:03:39:bb:fd:6c:f3:eb:88:
03:8c:83:13:1c:40:b5:d7:d3:c2:e9:8a:2b:a7:d1:c6:8b:d2:
9d:09:f9:ec:f8:c5:01:e5:c5:c1:13:73:3e:f4:01:5c:56:26:
2b:a8:e3:ae:45:a3:00:5a:9c:df:28:91:c7:ad:f4:b4:21:34:
c0:17:6e:6c:da:f7:0b:a9:a2:3e:c1:1f:66:11:42:d7:2b:00:
74:04:47:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:51:10 2025 by rpki-client