Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: fCubPHdUAgQs4L6dEE44kFi6PMaZpkh0wrj7P4T3x8M=
Subject key identifier: D5:B7:4E:E4:FC:A0:16:7B:03:B9:0E:41:46:EA:89:D2:A9:4B:FA:B5
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 01967A1FF8ABF37278780A6A311269CF6543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0A0E
Signing time: Mon 28 Apr 2025 02:00:37 +0000
Manifest this update: Mon 28 Apr 2025 02:00:37 +0000
Manifest next update: Tue 29 Apr 2025 02:00:37 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: JorMwO1adoRLLLrd+uly/T7RE55KqX49WIozuR9bzrE=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:f8:ab:f3:72:78:78:0a:6a:31:12:69:cf:65:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Apr 28 02:00:37 2025 GMT
Not After : Apr 29 02:00:37 2025 GMT
Subject: CN=d5b74ee4fca0167b03b90e4146ea89d2a94bfab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:5c:db:96:48:4b:bb:c0:a9:4b:91:7f:0d:
53:df:45:79:83:55:b7:cb:02:6a:c9:2e:33:c8:a7:
ea:8c:cc:97:0e:c7:58:df:1d:63:2d:8f:66:e3:2c:
e8:18:f8:1a:5d:3a:bc:d0:8e:fb:4a:f0:21:5e:61:
30:4a:28:68:d7:73:55:b4:19:4b:f9:13:9b:2f:95:
7b:a8:bd:db:b2:a5:9c:ba:5e:92:ff:4b:0b:4a:46:
59:0b:0f:c0:73:de:74:2f:7c:8a:ab:6c:4c:01:ac:
d7:22:dd:d7:c2:1b:55:38:56:50:d4:67:29:93:f5:
07:de:7b:68:75:a5:5f:b2:27:fa:de:9d:92:5b:ad:
b7:c2:5a:85:e4:d2:e6:ed:e3:86:99:81:67:38:47:
4b:8e:0b:bd:1a:1c:a8:89:66:67:c9:61:a4:8c:77:
9c:32:0a:a1:bc:4f:7f:3c:12:c9:10:56:ab:17:3b:
5d:b2:63:21:b3:5a:6f:f1:84:ce:c2:dd:98:3a:8a:
74:09:cb:3a:71:c8:58:6e:b9:e0:21:c6:fb:70:de:
aa:fb:56:1c:ba:db:55:40:40:27:c6:11:24:ac:2a:
92:68:95:23:88:ac:e7:bc:72:e4:11:c9:8c:c0:36:
02:34:42:6d:13:88:89:53:da:17:3c:7e:a4:23:ef:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B7:4E:E4:FC:A0:16:7B:03:B9:0E:41:46:EA:89:D2:A9:4B:FA:B5
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9d:67:ed:61:fd:4f:1a:60:38:fe:5f:dc:06:0b:8b:08:6e:
2e:1d:25:43:cd:6a:48:5c:9e:6a:be:21:6e:dd:33:74:1b:51:
8a:0d:72:34:77:29:ba:4c:c7:73:7a:2d:2d:60:e7:ae:33:4a:
1d:b0:8a:7a:02:e2:d7:e9:3a:dc:4e:23:26:25:07:5f:9c:be:
5c:64:4e:b4:41:69:88:04:79:d8:3e:29:24:f6:78:a1:b8:1b:
2e:9c:f1:74:00:ec:e1:11:c4:78:45:ec:48:4c:b6:bb:e7:fa:
42:0c:5c:8d:44:2d:32:14:af:52:fb:1e:c3:91:96:95:8a:41:
ae:df:80:66:1c:e8:27:59:7c:8d:dd:62:eb:fb:f5:3f:9e:40:
d2:0a:bb:30:0e:fe:c8:05:b3:1e:21:44:f5:f3:d0:ea:e6:0a:
3b:12:3c:75:14:26:12:71:31:55:27:5e:03:d1:60:00:01:89:
8f:02:bd:d0:6c:32:94:31:19:dd:36:b4:fd:f4:cb:42:b3:1e:
16:49:76:4e:21:44:ac:eb:e1:88:b0:b9:5a:83:3f:6d:9a:71:
3e:77:5d:28:11:73:d7:da:b6:25:bf:ac:94:38:9b:8c:b2:e6:
36:10:03:d4:45:7f:3f:47:b2:51:db:72:82:4b:5c:82:61:49:
89:c8:ca:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:37 2025 by rpki-client