Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier: amUUFf90XV35UTB62dEigACITaFeGqRompEXR7XpNo8=
Subject key identifier: 39:87:7A:6C:68:0C:D5:47:59:01:97:D7:DF:50:40:65:C7:CC:72:F6
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 0196808FD9746CC9D358589A15B49A8D5321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number: 1395
Signing time: Tue 29 Apr 2025 08:00:33 +0000
Manifest this update: Tue 29 Apr 2025 08:00:33 +0000
Manifest next update: Wed 30 Apr 2025 08:00:33 +0000
Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: ROVqNZUAQhGYMP/55GW3XhcYvAHoXH9+HvjGv6xkYF0=)
2: D7sSJq2EzuylXPTSVOWPxBm3Ho8.roa (hash: gmpCwmfjITdv8gtFNL4Zn9iouUW+u1PcPnCsYBgoNzM=)
3: efe5amh4jlMydhivq3OF5qbDCpI.roa (hash: 6iw2gnDcZP6ZZJX73WBgPOkeEQEpMVtjxP8058iyjOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:d9:74:6c:c9:d3:58:58:9a:15:b4:9a:8d:53:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: Apr 29 08:00:33 2025 GMT
Not After : Apr 30 08:00:33 2025 GMT
Subject: CN=39877a6c680cd547590197d7df504065c7cc72f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:73:29:09:d8:be:d3:5b:0a:27:87:41:cb:49:
ee:59:98:ae:aa:b6:b6:af:a1:95:f5:63:47:49:5b:
d2:f7:5b:9c:84:66:73:27:db:63:0f:ee:7c:da:8a:
d0:4a:a0:65:2e:76:5b:39:50:4e:50:a0:31:9a:54:
0a:8e:f9:29:65:08:c1:9b:1d:46:cf:bf:84:8f:c4:
58:fe:04:52:0e:73:a0:bd:24:e9:d9:23:5c:33:b5:
d5:ad:f0:b7:fc:e4:83:71:e4:e3:5c:2d:65:7e:26:
59:b9:8b:b1:5b:54:6a:10:fe:ff:83:3f:24:3f:52:
24:c1:2d:b8:ec:e8:45:d7:a6:20:4f:b9:57:eb:75:
60:ce:96:19:9d:ae:f6:d2:a8:d5:48:e0:b8:0c:d8:
17:74:15:e8:d9:e5:a8:11:a7:8d:ce:46:dd:5e:62:
20:17:a2:8d:c5:cd:c0:ae:96:20:5a:40:2d:a8:b0:
5e:00:7c:04:ab:ed:6a:62:c9:e1:ee:d9:55:c5:29:
58:f3:00:27:bf:be:5a:03:fd:34:34:0c:a1:85:32:
3d:80:49:92:4e:65:a6:82:a7:34:c0:d5:50:34:9b:
c1:cf:ab:d3:26:f6:4d:76:79:26:ab:45:3e:05:67:
87:c9:f8:1f:1e:86:56:0c:18:40:63:a5:84:e8:da:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:87:7A:6C:68:0C:D5:47:59:01:97:D7:DF:50:40:65:C7:CC:72:F6
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:70:0f:39:ad:2e:98:99:02:0e:98:1b:c4:f1:99:d1:26:23:
df:2d:95:ae:e2:50:cc:63:4a:3e:c4:40:6e:20:14:9a:ca:cb:
c5:25:9d:1c:10:11:df:64:b8:29:e5:87:e4:bc:fe:4d:83:f0:
63:0c:69:b2:9f:95:4b:36:c7:5c:7a:08:ad:58:8c:ec:1a:44:
8c:55:ba:8f:54:97:5d:0b:6b:8f:52:57:14:78:56:c5:44:d2:
cd:50:2c:3b:1c:f8:26:5b:39:c2:c8:64:f3:77:8f:3a:69:b7:
27:0b:82:d0:9b:8f:f1:c3:98:b7:46:ae:c6:de:fb:09:74:4b:
05:2b:84:99:da:dc:8f:58:67:40:ca:d2:be:db:72:e7:63:ec:
4a:fc:8a:ad:b0:a4:bd:1d:80:c5:1d:d9:39:b1:4d:0a:be:fd:
ae:96:57:e3:16:f0:ff:ce:fd:33:4a:a4:81:3f:29:a5:09:85:
d8:0a:b2:51:d0:4c:a5:50:d2:28:e7:13:01:8a:d4:2f:99:70:
7c:15:56:09:ad:bf:e1:96:da:d8:fb:b3:b2:4a:43:a9:54:a4:
58:f8:6c:d1:03:1a:32:98:a8:5c:e6:ad:fd:67:4b:18:56:d1:
b3:44:64:0f:a6:91:41:b3:26:18:9d:a4:90:f0:85:b4:19:5b:
81:ce:07:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:28 2025 by rpki-client