Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: IakS3icmLIFj4B4V+kLZXCZlEXiwagixfevUIiqbOBE=
Subject key identifier: 5C:74:C8:33:05:D0:58:A8:FA:AF:34:BC:3E:AF:E9:35:94:32:35:F4
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 019686FF9C7730845CD4113DE321E9C6C23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 13FA
Signing time: Wed 30 Apr 2025 14:00:20 +0000
Manifest this update: Wed 30 Apr 2025 14:00:20 +0000
Manifest next update: Thu 01 May 2025 14:00:20 +0000
Files and hashes: 1: R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa (hash: weYAVSG/ZQ3RqDZF3sJtlOJw4FVloRVdNFig6sXWzgw=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: ZEizqlJGLHSFxWzMm0ZI35nCtYxBXDbVOO4ZVnLhwOs=)
3: pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa (hash: IWh8KTHgqy6EH2ywVMGWNHIBEN+BDziBPQVDednZZvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:9c:77:30:84:5c:d4:11:3d:e3:21:e9:c6:c2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Apr 30 14:00:20 2025 GMT
Not After : May 1 14:00:20 2025 GMT
Subject: CN=5c74c83305d058a8faaf34bc3eafe935943235f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:5d:d2:a1:b4:eb:f7:2f:fa:3d:d5:19:1b:
1d:b5:9b:aa:cc:88:ee:ba:fe:47:37:76:bd:b0:67:
54:39:86:bb:56:e0:48:48:0b:2f:84:14:64:fd:38:
da:31:c1:f3:27:2d:0d:92:94:ce:7e:85:08:e2:af:
66:8a:6b:5c:9d:93:b3:88:62:b2:40:47:50:db:d9:
75:b7:a6:9f:50:3a:44:bf:6f:7a:60:61:32:a4:cb:
e6:32:3e:8e:a4:55:ed:22:a0:3d:0b:ad:c1:3c:9a:
06:bb:e4:54:4f:15:91:7f:2c:90:f9:9e:a4:b1:e2:
3c:19:22:0a:80:0e:6b:10:4a:d7:07:23:4e:af:47:
f3:70:9f:07:18:63:7c:1d:ba:bd:72:bd:40:69:f7:
8a:94:af:3c:5d:c3:6c:09:a2:77:ac:ea:c8:75:0e:
97:cd:3f:4b:51:a4:47:c1:17:bd:9c:fa:cb:ee:a8:
d3:cd:3b:db:e6:35:b3:13:44:d0:08:82:96:c2:84:
3d:37:ff:2a:53:e6:ee:11:95:74:e1:ef:7f:e3:ac:
80:a0:0b:ba:51:31:18:93:10:37:21:69:65:bb:75:
90:a0:96:13:45:d3:8b:7f:96:0d:3f:9d:18:fb:08:
d9:f7:15:21:51:32:c7:fd:9d:5d:34:9c:65:4b:c9:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:74:C8:33:05:D0:58:A8:FA:AF:34:BC:3E:AF:E9:35:94:32:35:F4
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:39:40:ca:72:22:b0:5f:c7:84:19:7e:f8:81:32:8a:8a:af:
1d:1b:9b:b8:6f:e7:c2:1b:66:41:60:36:8a:31:42:04:3c:9e:
9e:4e:c6:e3:ec:94:fb:ff:41:6b:c6:7d:ce:a7:c4:77:38:16:
6a:81:10:f1:84:ca:77:4c:4d:c4:db:1a:6a:18:6e:56:ad:f0:
98:82:b9:aa:b8:67:c5:11:a8:5b:ae:ec:f4:a8:ba:35:2a:56:
bc:b5:60:89:be:b1:0f:3d:79:2d:c4:65:17:d3:1f:b0:98:8b:
ca:51:f9:5c:d9:cb:d4:1b:9d:06:b6:c4:e6:c8:70:55:39:de:
3a:ce:f3:28:4d:4b:f8:14:01:0a:68:97:f9:61:75:b1:a7:13:
05:2c:0b:fd:8b:e9:35:c1:37:f7:23:fd:ba:b7:18:35:51:d9:
a7:67:18:92:9c:0f:6b:69:20:ef:e9:02:4e:c0:1a:d7:e9:53:
de:d5:8a:78:0a:c6:4e:e8:76:48:51:f2:16:ae:33:83:5b:ce:
72:9e:b7:8e:80:a1:1f:ea:db:30:b5:75:48:91:21:9a:4b:41:
84:30:be:c5:62:14:50:c8:83:62:64:94:12:df:a2:53:56:b1:
ed:31:c7:41:e7:41:b1:84:2b:82:88:22:6d:97:1d:86:fb:9f:
9e:db:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:34 2025 by rpki-client