Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: yvMMkJnATxzrEROXZ9TDc+DIjSkXigZ5phCcssAyQ/w=
Subject key identifier: 9A:74:DA:C5:C5:E6:1A:C2:A1:28:0E:E0:2C:49:69:D7:D7:50:62:28
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 01967FB4887F8A6FD4C369DDF0E2358B9ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 04:00:59 +0000
Manifest this update: Tue 29 Apr 2025 04:00:59 +0000
Manifest next update: Wed 30 Apr 2025 04:00:59 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: YoFHYCVvs+4UTTWnnBinF830Z4OEdu5sDYeZm6ftwVE=)
2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:88:7f:8a:6f:d4:c3:69:dd:f0:e2:35:8b:9a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Apr 29 04:00:59 2025 GMT
Not After : Apr 30 04:00:59 2025 GMT
Subject: CN=9a74dac5c5e61ac2a1280ee02c4969d7d7506228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:3b:44:58:9b:77:e8:45:7b:88:6a:8f:83:
5e:86:d5:04:18:b7:7e:f6:de:8a:8b:e2:87:b8:45:
15:79:9b:1a:73:c3:70:67:09:39:af:eb:19:3f:d9:
92:d6:9b:23:18:ce:b3:a0:7e:5e:03:07:92:70:db:
97:3e:04:e5:51:83:19:55:52:07:c6:34:22:cd:88:
83:8b:b0:0c:19:58:88:2e:6b:62:3d:70:54:05:68:
e5:a5:29:f9:95:12:3c:24:9f:2e:36:8e:e3:24:28:
c6:94:70:a0:f2:b5:94:e7:6d:7a:c1:3e:f0:7f:c2:
0e:44:f8:2e:a2:3c:8d:c6:ca:36:62:74:08:8f:2a:
4a:c5:11:aa:2d:66:2f:19:5f:44:8e:cd:12:08:03:
45:6f:a9:50:6e:98:47:67:05:ef:e1:fc:5d:d9:a0:
b6:95:38:73:b9:c4:1e:77:2e:ac:0a:c7:f1:bb:80:
f1:f6:7f:98:fe:cb:09:95:b8:d7:18:37:9a:48:0a:
91:d5:c1:01:1d:71:3b:1d:4a:2e:6c:ee:12:13:b7:
df:ac:19:7d:a2:c3:10:1f:1a:be:fe:d8:cc:fb:d7:
04:44:2d:ca:2d:29:bf:ab:b3:72:41:6b:48:63:4f:
17:4a:b7:cc:66:f2:32:ee:f1:b4:29:6d:38:f4:0b:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:DA:C5:C5:E6:1A:C2:A1:28:0E:E0:2C:49:69:D7:D7:50:62:28
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8a:d2:5c:32:a9:83:31:b3:ef:f4:d8:02:6f:e8:f4:30:10:
83:2a:e4:5e:3e:08:73:30:b3:1f:67:6a:88:96:f4:1f:ad:48:
bf:27:4b:f4:e1:25:e4:f7:fd:d2:8c:6a:52:7e:24:46:60:1a:
75:dc:10:a4:64:bf:69:fa:63:91:34:fb:d5:40:62:b7:82:81:
41:ad:45:89:83:72:7e:d3:38:92:6f:1d:99:f3:d5:5c:f1:3a:
6d:82:e6:5c:b0:62:c4:93:11:a5:2f:ad:57:01:68:2b:23:23:
1a:95:c6:a8:4e:b0:50:ba:f9:59:c3:44:36:a5:75:f6:17:63:
26:0e:10:93:71:ca:67:ea:17:45:b6:1e:87:3f:ce:c9:f2:b2:
22:5c:8f:94:70:27:17:7d:7d:7d:fe:ff:c9:47:ca:4d:ac:ce:
c9:9e:4d:6a:c7:dd:8d:81:c9:57:7e:33:d7:69:a7:5b:34:7c:
95:53:26:bd:44:f5:f1:3b:11:cd:34:83:2c:7b:44:9c:24:01:
c9:87:94:ab:88:a5:5c:d5:35:41:73:9d:1a:07:af:af:c9:f8:
e8:9f:8f:41:39:61:04:e2:03:d1:0a:b2:a0:99:05:ae:4a:39:
ee:8a:6c:13:a9:3e:06:6d:f9:f7:05:7c:40:c5:27:60:6a:f2:
70:95:b6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:12:20 2025 by rpki-client