Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
File: Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json)
Hash identifier: PHhuZ6oAqPG2KpmaVpXAtFLqDrQ1R8wxIEVc77eKwyM=
Subject key identifier: 23:E0:9C:DE:5D:A3:CF:F1:A3:E3:BA:97:6B:C0:EF:43:75:88:29:3F
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 01967ED8BDF240B2CCE5A15353B8AE18B3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
Manifest number: 0C09
Signing time: Tue 29 Apr 2025 00:00:55 +0000
Manifest this update: Tue 29 Apr 2025 00:00:55 +0000
Manifest next update: Wed 30 Apr 2025 00:00:55 +0000
Files and hashes: 1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: Zrrq2ohn5Rc21gGC5HYIujB8XMSns90K9VcAIQcTKuA=)
2: vRZENosVd-UpUXAI72NxZZVntJk.roa (hash: 3gCkbj38/RbRsH9RtMq+iOGtDMN5uG57O65jx7at2bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:bd:f2:40:b2:cc:e5:a1:53:53:b8:ae:18:b3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: Apr 29 00:00:55 2025 GMT
Not After : Apr 30 00:00:55 2025 GMT
Subject: CN=23e09cde5da3cff1a3e3ba976bc0ef437588293f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:5b:cf:44:0d:66:5d:02:5c:17:22:62:24:
00:ad:ed:ec:c5:3a:22:ba:87:f4:d1:d1:70:3a:84:
2c:30:34:7e:67:96:ae:fa:80:27:77:1a:37:7e:ed:
45:0a:8d:b3:e6:20:91:b6:fc:1b:fe:d4:3d:eb:13:
14:f2:01:3b:43:99:4d:5c:5d:59:89:cb:1b:9f:1a:
eb:b4:ce:4b:69:bf:d2:a5:56:32:08:43:7a:cf:75:
ae:fd:b1:4e:11:a0:21:6f:cc:a9:bc:40:59:10:cb:
3d:07:9d:e4:7b:cf:af:02:14:8f:84:6e:3b:d7:50:
7b:4c:78:a1:c7:68:f6:fa:7f:52:7d:a1:dd:b9:6a:
59:75:f8:16:22:94:c2:60:a2:5f:75:50:0b:35:09:
e6:9b:93:48:48:4d:f0:32:70:0c:20:9f:2b:0a:0e:
62:de:d8:84:72:ed:e6:90:77:9e:56:82:ec:3e:8a:
37:8d:54:7e:c8:33:06:cf:b2:90:04:ba:51:cc:47:
75:1d:95:09:f1:aa:ee:2f:dc:2d:b0:3a:08:a8:10:
d3:ed:e7:82:6e:d8:c1:3b:f4:c4:0b:4a:17:c6:9c:
53:ac:ee:50:5a:52:ac:7e:6e:28:73:18:05:a8:1c:
75:63:26:c5:d6:18:a7:82:0d:82:1b:d0:83:e0:d4:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E0:9C:DE:5D:A3:CF:F1:A3:E3:BA:97:6B:C0:EF:43:75:88:29:3F
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7d:7d:70:25:15:7d:6f:c1:0e:94:04:ee:12:ff:18:6d:16:
38:15:2a:36:63:07:a4:1f:af:05:72:fa:00:f4:ed:f8:03:d6:
a9:35:c9:4f:1f:bf:1d:d1:a8:07:6c:dd:f7:72:ea:fa:a9:fb:
94:bf:3f:80:a3:be:3a:fa:f6:aa:ed:99:cb:2f:00:ba:1a:7f:
5d:73:32:df:1a:1e:51:ac:d6:02:9e:f6:d2:b2:6b:cc:e9:19:
ef:07:7c:32:0f:63:4c:e2:e5:c7:89:8b:9d:a3:1c:0d:4b:c3:
f6:a7:eb:b7:54:37:66:b5:a5:7b:5f:b0:d5:c4:a1:35:87:e8:
62:3c:32:0b:14:7c:8b:49:73:4f:6b:1e:5f:d4:85:99:20:42:
eb:25:68:5f:ef:0c:a4:fe:96:09:7b:5b:38:f7:ca:7c:ad:b9:
6b:23:1a:2a:5e:1f:68:13:7f:b3:de:da:e6:f5:e4:8c:14:e9:
50:f9:76:02:fe:d8:42:7c:d4:ae:5e:85:af:57:39:6d:b6:cc:
12:6e:b2:92:40:ec:99:2e:f2:49:95:f4:89:ce:ee:9e:78:c1:
eb:a3:88:5f:f1:f2:98:1e:59:e4:08:0d:ed:4b:7a:9c:d0:d7:
d9:6d:d9:05:4f:56:13:a9:ab:eb:42:72:da:20:99:04:7b:e3:
b7:8b:16:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:14:34 2025 by rpki-client