Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: oofFqNfQFZ3mM3aAgYp3UOjm4yHQmE1ILIk/JZqgxxU=
Subject key identifier: 46:E0:25:32:1A:CA:8D:B1:18:E1:F9:54:6A:C6:C6:03:AC:12:59:A0
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 01967F0F28568A408079722F41993C5C52A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 113A
Signing time: Tue 29 Apr 2025 01:00:21 +0000
Manifest this update: Tue 29 Apr 2025 01:00:21 +0000
Manifest next update: Wed 30 Apr 2025 01:00:21 +0000
Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: Lv1HHeINGSWvhEw61A0Xn/KHAJUU6kQa6vF/wEhBRw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:28:56:8a:40:80:79:72:2f:41:99:3c:5c:52:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Apr 29 01:00:21 2025 GMT
Not After : Apr 30 01:00:21 2025 GMT
Subject: CN=46e025321aca8db118e1f9546ac6c603ac1259a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9b:ee:e1:32:3f:5d:d3:70:ec:06:5a:f0:5b:
78:e1:d6:d4:ce:4d:e9:90:36:8b:47:f5:ca:00:96:
d3:02:15:db:0d:47:50:1c:49:2f:a8:13:2a:d8:ef:
7a:c7:e2:26:da:ce:45:b2:88:56:a4:61:4a:36:61:
ff:a4:8a:c8:5b:23:7a:de:06:ce:2c:c0:c1:cd:38:
4d:2d:2c:cc:55:0d:99:1c:99:a4:a3:84:0e:7c:66:
e3:20:b4:f0:c2:c7:36:a0:d3:8e:ee:6c:92:61:68:
ee:e8:10:dc:9c:47:30:da:e5:6d:36:84:09:c7:0a:
21:71:26:15:86:96:fb:54:fb:f4:3d:7d:2b:fb:56:
8f:85:53:e6:19:87:7a:78:a2:eb:47:76:69:99:f5:
1d:2b:e5:60:10:ab:e8:94:a6:f4:a8:90:f9:92:2a:
1b:35:79:12:2a:c1:d0:f7:0a:65:5b:5e:f0:ee:7e:
1f:c4:a7:32:d6:e6:a2:76:46:47:9f:67:46:33:27:
45:c1:88:60:be:d7:e0:52:36:2d:36:31:36:e5:84:
43:25:f5:69:84:26:21:b6:7a:7d:e4:a6:fe:18:a1:
cf:79:22:4c:87:0c:aa:a5:48:8d:27:25:2a:ac:34:
ea:18:41:15:fb:59:45:8d:70:37:9a:85:9a:75:19:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E0:25:32:1A:CA:8D:B1:18:E1:F9:54:6A:C6:C6:03:AC:12:59:A0
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:53:e2:d6:15:25:b8:53:45:74:c2:e3:b3:7d:d7:e9:26:9b:
89:be:99:ff:be:23:ee:8e:35:c7:5e:93:bd:ca:ea:06:60:48:
ad:3d:1c:1f:6f:27:56:7d:25:73:4c:be:00:af:51:da:1f:b9:
0a:21:bb:47:92:5b:fa:51:34:89:49:4e:bf:02:00:f8:37:7c:
f6:40:d8:fe:81:86:fc:ad:ef:32:73:d4:dc:bb:ac:57:70:98:
1f:ed:ce:4f:96:23:7a:24:02:d5:76:d8:59:75:9b:a5:af:2e:
8c:2c:53:76:20:f6:63:39:f6:9c:38:58:b1:24:a8:ee:75:ac:
c5:f7:b3:fa:33:63:cb:c9:70:64:52:a0:65:c3:00:6d:eb:ad:
20:80:06:74:cb:34:0d:e8:45:71:08:2c:30:8b:db:0d:31:bc:
b4:4b:61:58:34:fc:f7:37:f9:a6:78:13:26:b2:60:0b:74:81:
b0:db:b1:a3:ca:32:3d:9e:16:0a:4d:94:ec:76:a1:38:c7:7d:
14:8c:13:37:97:0f:b0:43:b6:36:f8:76:e4:f2:f8:47:39:47:
1d:19:81:02:6b:20:3b:e1:02:99:5d:8f:d5:0b:8b:90:f9:93:
66:cf:08:74:1b:0e:8d:a3:9d:b9:ac:1a:2c:2c:f1:dd:db:f9:
77:d3:fd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:46 2025 by rpki-client