Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
File: jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft (raw, json)
Hash identifier: PbHeFuzBbkeAhY9jDDo8NZD+O08BRHTRAyehcdbsJ7c=
Subject key identifier: B7:B6:13:FC:2D:61:49:76:51:A7:83:93:84:54:41:38:23:DD:96:9B
Authority key identifier: 8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
Certificate issuer: /CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Certificate serial: 01967C452FDF0D199B15D01DC5CA8C7211CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
Manifest number: 067B
Signing time: Mon 28 Apr 2025 12:00:30 +0000
Manifest this update: Mon 28 Apr 2025 12:00:30 +0000
Manifest next update: Tue 29 Apr 2025 12:00:30 +0000
Files and hashes: 1: jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl (hash: cNVL7D08QnIhgW7Cz7lcLB3I0d2R0wn3ogO67vUY30I=)
2: sMrQzs33rrsyMFOFMFTjCINTzTQ.roa (hash: M0Ho0S0WzI5DOHL0C5sQ6HcQ5teNM3kvhCzMJa29/0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:2f:df:0d:19:9b:15:d0:1d:c5:ca:8c:72:11:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Validity
Not Before: Apr 28 12:00:30 2025 GMT
Not After : Apr 29 12:00:30 2025 GMT
Subject: CN=b7b613fc2d61497651a783938454413823dd969b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:29:57:fc:1e:d3:cf:0c:47:9c:86:9a:79:
74:12:86:e4:9a:31:15:69:d1:cb:04:3f:a8:82:78:
80:83:dc:94:8d:94:3d:8a:bb:b1:87:8d:62:64:3b:
47:3a:00:f4:67:88:7a:bb:85:ab:e4:e2:a2:d6:d2:
42:64:a5:0d:ae:c5:18:91:53:19:17:8a:f9:ef:a0:
b7:23:17:a4:7a:ae:c1:1b:e5:70:56:a0:0a:47:43:
78:13:e4:25:c5:f8:12:65:f5:86:39:36:b7:ed:60:
14:aa:04:4c:aa:a4:6c:57:a0:66:04:1b:77:07:a6:
8b:78:c8:f7:1e:22:ec:52:33:8d:da:fb:61:a1:b0:
e6:83:0a:60:28:90:91:14:22:d9:2f:b7:98:c1:6f:
e7:4a:9e:0c:77:95:8a:9b:01:e6:e5:47:08:21:21:
3a:58:b5:a8:a6:46:40:30:27:54:3f:57:ee:a8:38:
a3:c3:3f:f2:d8:bc:a6:21:c3:66:48:61:61:d3:26:
02:b0:71:5d:59:36:3d:95:c4:3b:dc:97:f5:cb:b1:
d8:00:b9:17:8a:76:70:8b:49:7f:f5:55:f5:aa:61:
94:2b:35:6e:8c:39:89:f6:be:56:8f:3c:2c:62:d2:
a0:31:01:e5:30:67:9e:57:c1:c8:79:ab:7c:dc:7b:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B6:13:FC:2D:61:49:76:51:A7:83:93:84:54:41:38:23:DD:96:9B
X509v3 Authority Key Identifier:
keyid:8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:04:8e:88:e1:db:1c:46:54:ec:c8:7a:90:c6:ad:01:e0:f7:
15:2f:eb:33:fb:6a:f6:63:94:d9:67:0f:40:fd:dc:ef:fa:18:
89:1c:a0:59:3f:1a:c1:bd:09:64:67:39:63:0b:1b:3a:50:0b:
9f:4a:64:e2:e3:59:78:af:68:59:ee:4f:5a:5b:33:88:58:f9:
9f:a8:6c:9e:65:3b:c6:b2:04:8b:df:b2:59:28:ca:12:db:87:
de:8e:5a:ee:d6:51:6c:2a:74:be:15:5c:6f:52:05:11:16:5c:
b6:76:e8:e2:c4:da:d9:e8:4d:55:8c:e1:15:72:fe:69:82:6e:
7b:c7:8d:9a:90:82:c8:c4:7b:88:25:d4:69:74:12:cc:aa:a0:
bf:45:ec:a9:61:bc:20:6c:d8:4f:3f:8b:48:f5:47:35:5c:84:
8d:ac:c4:4a:c5:87:c5:da:e6:e3:e9:4b:1b:26:84:67:31:63:
d6:fa:71:68:35:14:dd:2c:d0:43:71:f6:82:d2:a3:d8:f0:13:
6d:83:a1:44:f9:8c:14:90:78:69:2d:90:ac:63:0c:be:19:3c:
1c:0a:5f:24:7c:3d:a3:25:4f:b2:92:45:97:35:6f:88:7e:ae:
5b:ec:ad:1c:b4:96:33:76:b0:8f:53:73:13:24:57:94:a0:56:
0e:91:99:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:29:06 2025 by rpki-client