Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: 4WT6BoVgWxy7NFo4RPX6RGzY7Y5EAVMuhfq1CvTs/iQ=
Subject key identifier: 0A:8C:84:63:9C:EC:9E:08:1C:EC:A1:6D:54:D2:2D:75:C3:46:E7:B2
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 019675D56FE4077A34AB367C3BB497D9380F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 0DA8
Signing time: Sun 27 Apr 2025 06:00:44 +0000
Manifest this update: Sun 27 Apr 2025 06:00:44 +0000
Manifest next update: Mon 28 Apr 2025 06:00:44 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: ZjkMsgdDWGs/U+/hJKxaXeJ1XdUlX6SwhCx7L5lAHRA=)
2: fIHxOTR4AusDjkUMl4F2Dw2GHL4.roa (hash: Sb4ZUnFbCp/emt+K6hXULcd6ikLK+m62aHUuIK4higk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:6f:e4:07:7a:34:ab:36:7c:3b:b4:97:d9:38:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Apr 27 06:00:44 2025 GMT
Not After : Apr 28 06:00:44 2025 GMT
Subject: CN=0a8c84639cec9e081ceca16d54d22d75c346e7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:89:40:38:d0:c9:52:57:7c:32:db:5d:61:
09:1c:10:49:d7:eb:01:00:c3:1d:1c:5a:51:15:b0:
3e:48:de:a3:60:4e:e2:06:66:06:d3:c1:fa:cf:0b:
c4:36:17:80:bf:75:60:36:e6:72:97:95:55:c2:bc:
41:80:f0:a2:ec:13:6d:69:27:3c:59:c9:7f:09:28:
b9:5d:59:77:26:ef:d9:45:f7:ff:29:0e:7c:f4:5b:
5b:25:71:90:cf:f5:f6:6c:af:cf:3c:c7:f0:7d:8d:
b9:b2:a3:d0:39:36:be:6e:64:8c:bd:d2:ce:83:3f:
58:25:d3:eb:ff:5b:26:d5:9c:5e:6d:33:1b:71:5a:
47:64:5a:02:26:1f:e4:08:0a:1e:c6:c9:0f:79:4f:
26:da:82:15:17:d6:59:19:8c:08:2f:1b:72:0f:d3:
34:56:f7:07:46:b8:4f:c8:88:bb:bc:83:11:37:de:
5c:b6:6f:77:01:d6:c6:0f:fc:33:67:6b:48:47:36:
b5:43:ae:10:a0:62:8a:f7:63:47:d7:5f:27:2f:ec:
b9:63:3e:5e:5f:05:7d:19:2c:cc:ab:a2:af:b6:4c:
05:4b:03:fa:28:27:4f:a5:72:5e:4b:b3:3e:f5:18:
8f:53:0f:1e:9b:1e:cf:6a:f4:06:1e:ec:51:d4:26:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:84:63:9C:EC:9E:08:1C:EC:A1:6D:54:D2:2D:75:C3:46:E7:B2
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:dd:2f:8b:24:b4:ae:e6:a6:c2:73:d8:35:13:b0:a4:4c:d7:
5a:67:a2:cb:64:5b:9f:7f:9a:4c:32:9b:e0:2f:11:30:93:51:
a7:8c:ee:82:a6:bd:56:7b:e4:b5:12:2e:4c:8e:be:8e:9a:56:
6a:cd:07:34:14:59:bd:3d:8b:34:78:8d:59:ba:98:93:4c:35:
3d:f9:2e:1d:a2:9f:ab:4b:8f:d1:71:03:05:0f:40:45:78:7a:
dd:b6:7c:41:d6:cd:d2:37:df:63:78:e7:d7:8b:b6:33:80:6b:
12:34:b3:20:b5:b8:87:e7:94:59:fb:d6:04:c5:ef:df:16:78:
3b:95:6e:0e:70:32:60:ee:4b:a4:36:40:8a:07:61:38:46:9b:
bd:67:fa:15:31:47:b5:87:e7:29:14:bd:4b:34:8e:16:93:f9:
9f:a7:e3:7f:f3:87:24:c6:6c:06:76:52:75:7f:2a:34:c8:21:
8b:87:bf:b8:2d:7a:87:d4:06:97:35:2f:c9:2f:49:87:f6:97:
e8:09:64:bd:7b:26:8a:42:68:bf:60:fd:b7:4d:b8:27:5d:bd:
46:26:a7:6b:d8:02:4e:02:26:b4:3d:52:b6:48:95:a1:9d:51:
84:d8:87:e5:db:d4:f9:17:e6:78:f1:e0:7c:fd:7b:d2:5a:ac:
44:60:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:25 2025 by rpki-client