Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
File: jOc1Ep93eiW_hHJyBr-XjZodsgA.mft (raw, json)
Hash identifier: RG7iCvlkgvVFdBi3zV/LjkGE9YuRD6axGfAom/Aqhfo=
Subject key identifier: A5:71:59:33:3B:D3:1D:16:CC:49:15:53:20:E1:A3:BC:75:DC:D6:8C
Authority key identifier: 8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
Certificate issuer: /CN=8ce735129f777a25bf84727206bf978d9a1db200
Certificate serial: 019695291685A33BE854E2FC6D52947D77C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
Manifest number: 0AF7
Signing time: Sat 03 May 2025 08:00:19 +0000
Manifest this update: Sat 03 May 2025 08:00:19 +0000
Manifest next update: Sun 04 May 2025 08:00:19 +0000
Files and hashes: 1: 7nFNN3l5GD-t-2xZtD0Zf8RWyQ4.roa (hash: vqDVEIya4bFoWJhti8KO9chSYpm+4SzzmfR2K9/w2/k=)
2: czoe1RLJsx9dA2fYE94xeHxNmO4.roa (hash: BpNazVz7pSpyIXBvYFGh8xCscfLMGwTUrkPmKZ9aKwA=)
3: jOc1Ep93eiW_hHJyBr-XjZodsgA.crl (hash: f9AjUeUX/8HhZEoWUmj8M6vt+sEKEPdkYrhOJk9SZdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:29:16:85:a3:3b:e8:54:e2:fc:6d:52:94:7d:77:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce735129f777a25bf84727206bf978d9a1db200
Validity
Not Before: May 3 08:00:19 2025 GMT
Not After : May 4 08:00:19 2025 GMT
Subject: CN=a57159333bd31d16cc49155320e1a3bc75dcd68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6a:68:a9:da:68:0d:3b:6d:f2:d8:81:e9:9e:
cf:48:fe:cb:44:82:3a:c9:1d:9e:5e:26:0a:85:74:
19:57:c2:3d:90:f6:f6:86:1c:1f:f5:b8:f7:55:2d:
22:68:4b:c3:e9:9e:00:cc:53:83:61:ef:07:40:82:
68:94:37:1d:5c:1c:19:ce:30:20:3a:94:04:c5:ad:
34:b0:f2:ef:24:9a:50:b0:53:0c:d2:55:8f:d0:8f:
1c:3b:e8:63:75:67:b5:b9:f9:56:a0:b6:89:fc:48:
ca:6a:3c:d2:8d:bd:c3:84:32:d4:04:d4:33:a2:04:
85:cf:51:81:9e:33:49:6b:8e:14:c5:c0:5f:ea:cd:
2e:e0:e2:aa:37:6a:15:e7:e4:ab:92:3f:60:79:4b:
e2:09:e5:b8:79:84:1e:ea:88:45:51:20:df:e4:27:
58:eb:aa:5c:c9:6c:bb:a5:a7:44:11:05:09:21:20:
90:fe:10:4c:33:c8:36:44:57:dd:6c:8a:1a:74:a3:
10:1b:d5:d3:28:88:c2:c3:1c:75:18:1c:1d:eb:c5:
8e:35:bd:57:c1:4d:5b:19:35:a4:3f:17:27:bb:84:
3e:ea:9c:b8:03:1f:4d:ce:9f:3a:2d:3a:a1:01:6a:
b7:03:c9:7d:35:89:cd:5b:a9:00:8d:2b:ef:d0:42:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:71:59:33:3B:D3:1D:16:CC:49:15:53:20:E1:A3:BC:75:DC:D6:8C
X509v3 Authority Key Identifier:
keyid:8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b8:54:61:17:42:77:49:13:c2:d5:42:ec:78:16:ab:65:b2:
18:69:8f:82:66:2d:a4:64:2d:1a:65:ad:16:f7:8e:7d:88:ee:
9a:63:2d:42:4c:0b:bd:18:40:b5:7e:fc:fe:27:ff:48:35:2c:
a4:4a:eb:ff:a3:96:d8:e7:0d:32:aa:26:1f:b3:c7:93:9d:ec:
5f:21:25:2f:31:5d:08:f4:e8:2c:36:50:25:54:25:06:1b:2c:
97:2b:9f:e5:6f:b9:9f:12:29:6d:dd:a7:74:20:cd:a6:f6:17:
56:e9:b2:3b:e4:ea:c5:ae:de:6f:d6:40:18:16:1e:cf:2e:46:
0c:44:b6:6c:8e:21:58:b3:15:52:45:51:e2:e2:1d:cd:33:3f:
b8:92:86:b0:3f:80:98:6e:ea:5e:b2:a7:5c:37:b7:65:65:4a:
d8:df:14:70:4f:2d:99:54:e7:c8:00:c9:52:f9:35:10:8a:c7:
fe:73:3d:77:fa:7d:98:bf:6a:9e:dd:cf:40:71:da:7c:4f:36:
e5:29:f9:73:12:78:db:54:1c:b9:7e:0e:f4:c3:09:bb:6f:45:
07:fd:64:87:0f:01:6e:60:1e:7e:82:12:ae:ca:35:d9:37:08:
97:8e:1a:6e:ff:f7:f1:3e:b4:d6:d1:21:4d:5a:49:46:b3:0c:
8c:50:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:17:02 2025 by rpki-client