Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
File: jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft (raw, json)
Hash identifier: IKVTC91dEHh3VpDDD/G4MCkllXUJRZ5mxbnIRPZA+3E=
Subject key identifier: 0A:E0:15:D8:D4:93:86:98:EE:25:F1:08:EF:E0:25:C8:61:D5:C2:93
Authority key identifier: 8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
Certificate issuer: /CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Certificate serial: 0196778CEB9DF405B9E4C2ADD05B4D75B56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
Manifest number: 045E
Signing time: Sun 27 Apr 2025 14:00:46 +0000
Manifest this update: Sun 27 Apr 2025 14:00:46 +0000
Manifest next update: Mon 28 Apr 2025 14:00:46 +0000
Files and hashes: 1: 960ydd6N5IVjJ8SKw0-cCFu0l5A.roa (hash: vdzIyqJL7Fj4rd7R5SOUV3BY5/WQ96AWM5L49KfXiUE=)
2: jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl (hash: EJ+Zv/E4xjhxfBmHkGWXiI92V0rtesDCtPFJ2vYl8mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:eb:9d:f4:05:b9:e4:c2:ad:d0:5b:4d:75:b5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Validity
Not Before: Apr 27 14:00:46 2025 GMT
Not After : Apr 28 14:00:46 2025 GMT
Subject: CN=0ae015d8d4938698ee25f108efe025c861d5c293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:46:7d:d7:8b:2f:fc:ab:92:9b:1e:70:0d:
d7:b7:b6:a8:aa:95:0e:56:82:d9:25:90:a0:b2:a3:
98:03:f0:57:fe:7d:a4:46:b7:2c:fa:50:a1:09:4a:
e2:10:54:1e:03:94:14:61:b8:17:3b:6a:56:44:9c:
e0:6d:b7:92:da:e3:94:a2:21:cc:10:48:b0:6d:13:
be:83:31:8b:5e:20:d8:e8:5f:b3:84:82:e4:bb:da:
f6:18:4b:8b:21:b5:50:80:c5:7e:cd:3f:15:57:de:
87:b1:9a:4b:49:dc:35:1d:67:e9:39:d9:04:57:a8:
f7:cc:64:2e:7e:2d:c1:37:0d:fa:5a:43:a8:e6:ae:
56:19:77:fe:eb:bf:23:47:34:ff:78:33:5d:c4:c7:
76:52:f7:91:cc:36:39:50:1f:d3:80:cc:da:e5:44:
2b:91:d3:83:a3:ee:26:73:bb:6d:c1:4e:33:ed:15:
2f:56:97:6f:25:94:f1:f4:0e:b3:ab:0a:e2:2d:3f:
79:7d:27:3f:52:10:6d:48:a6:ed:70:15:a1:92:36:
65:54:59:b5:60:aa:ce:40:57:82:18:56:e6:34:a3:
04:9a:ef:ab:1c:9d:67:fc:76:8d:a7:ec:8d:5b:1c:
35:7d:38:c5:7a:8c:ff:7c:10:19:e4:4f:c3:1e:a3:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E0:15:D8:D4:93:86:98:EE:25:F1:08:EF:E0:25:C8:61:D5:C2:93
X509v3 Authority Key Identifier:
keyid:8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2d:5a:a3:8c:62:b0:91:ff:7b:d9:2f:e3:69:85:43:2b:a8:
a7:28:7d:bf:41:f5:db:ed:47:81:f0:3c:23:8c:55:13:77:b9:
1b:df:09:84:44:53:d4:4b:a5:b4:9a:67:33:23:d7:a8:61:7c:
7b:77:6a:bb:27:c8:61:5a:21:aa:d4:c7:1a:52:bd:30:4d:06:
a9:92:d0:c0:d6:e9:a5:14:cb:93:89:8d:2f:ae:76:d2:0d:e0:
60:d5:be:97:39:7a:1a:51:b5:78:c6:1e:82:e0:7e:d0:a4:99:
fe:ac:4b:b5:46:67:dd:55:65:0e:73:35:6a:ad:2f:da:f5:04:
d4:ca:6b:e8:66:42:a6:da:94:19:6d:3c:26:9c:34:8e:f5:08:
7d:64:ac:b7:00:55:b9:53:5b:98:cc:19:33:d8:4f:fb:34:1b:
f0:a9:aa:17:5f:74:97:e3:59:63:47:c8:0e:a1:0f:d4:a0:e1:
e3:19:a4:69:e2:1b:f2:1d:3c:08:db:d6:36:db:7e:cf:d9:32:
89:6e:07:58:22:44:de:99:9c:27:57:6d:22:51:b5:1d:6a:b5:
e6:ac:a2:6c:25:9d:8d:ad:9f:ba:55:ca:c6:c3:2a:63:55:29:
10:52:c3:e1:0b:d7:e3:46:69:95:7e:3f:d8:00:cb:05:d5:ae:
a3:08:af:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:14:53 2025 by rpki-client