Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: zLOFhMP74w5fwEmHkCVt93J5at9SRDnuo340r5BE9q0=
Subject key identifier: 64:49:70:62:F4:C6:D0:AA:C9:F1:AC:63:24:47:9B:EF:CE:E0:FC:98
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 01967BA06110EAFAABDAE3AE7963768CE44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 151C
Signing time: Mon 28 Apr 2025 09:00:30 +0000
Manifest this update: Mon 28 Apr 2025 09:00:30 +0000
Manifest next update: Tue 29 Apr 2025 09:00:30 +0000
Files and hashes: 1: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (hash: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=)
2: qrvgnkiRlc7rMBlueEGY6GFR5f4.roa (hash: GRgjXdvuR0BuPnuResU3wvkGs+6BXCcEgxlm6k2P5XA=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: JGpTei5yVsdZpigXwPHCxj8ZbRPrMg8Vg6+huuUgn+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:61:10:ea:fa:ab:da:e3:ae:79:63:76:8c:e4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Apr 28 09:00:30 2025 GMT
Not After : Apr 29 09:00:30 2025 GMT
Subject: CN=64497062f4c6d0aac9f1ac6324479befcee0fc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:cd:54:6f:06:14:da:a1:af:ee:83:ac:27:
81:ca:95:e7:ae:3a:96:90:79:bc:20:d4:32:41:c7:
02:d4:e2:a2:b2:b8:4c:83:6c:49:a3:3f:20:b7:be:
aa:86:af:2b:06:92:12:c6:25:54:4a:16:37:01:a5:
ef:5a:13:22:b3:97:d0:50:5e:ea:a7:98:95:97:08:
0a:2e:a6:cc:87:b9:64:7e:a8:25:4f:4b:d9:1f:7f:
34:84:27:9c:13:a6:2c:40:69:91:3c:39:c6:39:61:
86:3c:59:c2:5e:b1:80:82:15:bf:26:18:d9:2f:20:
c0:3c:08:2d:48:c3:79:0f:aa:36:41:29:6b:0d:72:
08:3a:ca:74:d7:18:75:71:d1:b2:00:7e:24:f7:52:
05:54:12:cc:9b:9b:6a:58:40:91:a8:ec:28:c5:1c:
1c:04:43:8d:4c:7f:32:d7:19:f9:91:5d:25:55:2c:
53:9a:a6:da:c9:bf:70:17:6c:5d:26:0e:41:a1:6b:
9b:34:8d:a6:7e:ef:90:24:2c:ee:62:67:5b:43:13:
76:ff:14:79:10:c6:17:a4:70:04:0a:f3:db:d8:cc:
d4:1a:c7:e0:53:a5:cc:7e:b0:5a:0e:df:7e:38:2f:
9d:da:94:e6:96:6f:2f:fb:b8:3d:d8:20:2b:31:04:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:49:70:62:F4:C6:D0:AA:C9:F1:AC:63:24:47:9B:EF:CE:E0:FC:98
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:35:dd:04:67:14:f3:8d:ba:52:0a:7d:5d:55:96:59:ee:fb:
2d:58:b5:48:f1:48:54:7d:71:e9:a8:1f:0c:76:22:29:14:e5:
28:5f:65:ae:fb:5d:b3:78:23:53:76:68:ec:db:9c:80:6b:3c:
fc:70:f7:b4:72:21:c5:61:53:12:e5:74:e3:ff:62:a0:7e:52:
82:8e:aa:32:50:63:df:88:ee:b2:ad:88:43:63:f3:d6:12:07:
6c:d2:bf:5d:74:64:44:cf:5c:9a:ba:86:28:d1:e7:d2:ba:29:
fd:45:75:a9:8d:c9:d7:e1:f9:e0:c3:a9:86:8c:46:9b:8f:fc:
55:bc:36:c5:62:ce:9b:dd:c3:df:e3:87:01:0e:09:0c:da:6e:
e6:a2:f0:6d:94:7e:c6:96:99:63:a6:9b:a9:b4:6b:ff:50:e6:
a0:16:bd:86:49:8a:d8:07:51:00:fb:90:8b:9b:ab:ce:c4:0e:
18:84:77:69:2c:95:23:98:96:27:b2:75:24:be:e4:8c:4a:87:
f1:c1:22:dd:72:bc:9e:0d:f2:d6:e7:d3:38:7a:71:f7:8e:3a:
70:a4:81:c5:64:a0:72:a2:22:1e:4a:7f:35:15:ca:af:be:18:
c0:5a:f8:1f:1d:44:2b:a4:e2:6a:d3:a0:fd:5b:ee:f9:ca:8a:
78:a4:2d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:23:48 2025 by rpki-client