Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File: jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier: 8ETkEPfEW6u0W8MSgWuffJvGiRc+5dYmNf31ZUoTAc0=
Subject key identifier: 20:3B:90:13:66:E9:9D:E9:4F:1D:1B:DB:F2:D6:0B:DD:7F:60:7F:96
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer: /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial: 01967679E374E52BBBD379498F0323C13808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number: 0295
Signing time: Sun 27 Apr 2025 09:00:21 +0000
Manifest this update: Sun 27 Apr 2025 09:00:21 +0000
Manifest next update: Mon 28 Apr 2025 09:00:21 +0000
Files and hashes: 1: e-faYsu_q8JpVrdQYQcLj8wnjok.roa (hash: VJHGGavedyryjyDeAPzaChR45OEsZ2gDknElm4l7rQg=)
2: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: ZRKnG8/vTOftTHGO5eaeFaP3Wd90ugpQY1NBBHENIi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:e3:74:e5:2b:bb:d3:79:49:8f:03:23:c1:38:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Validity
Not Before: Apr 27 09:00:21 2025 GMT
Not After : Apr 28 09:00:21 2025 GMT
Subject: CN=203b901366e99de94f1d1bdbf2d60bdd7f607f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:00:de:68:9f:99:0b:e5:21:f9:4c:4e:71:d6:
4f:e4:09:b7:2b:01:ae:96:2f:d9:8e:9e:d4:99:ff:
60:24:45:aa:e7:53:2d:63:2d:da:42:50:42:e8:81:
60:71:69:a8:9a:2b:6f:c3:49:4d:02:5e:91:6f:ed:
ef:aa:d8:97:93:5f:5d:a8:b4:e5:c2:79:70:f3:f7:
7c:7f:56:d3:c6:68:4d:ee:dd:2f:c9:cf:74:fb:96:
12:e7:20:98:8a:dc:b7:26:f9:42:2e:c4:3c:a2:1d:
a1:6e:9f:fc:24:0e:75:d6:54:ad:36:04:ad:b8:a7:
04:ad:e5:69:43:15:17:a4:2a:45:e3:58:06:66:a5:
c1:d5:af:af:ff:51:c6:00:cf:7c:07:a6:c1:89:e6:
fd:a9:83:76:5d:fc:68:c7:29:76:ca:c4:4c:59:25:
1e:5b:16:56:6e:80:6c:7e:dd:bb:37:0d:d9:5d:5c:
de:10:52:4c:ee:e0:44:3d:39:73:53:8d:ac:6b:51:
5b:03:0d:cf:7f:9e:f5:0c:51:d5:bd:9a:b1:d9:ae:
a2:be:de:0e:f1:4e:6c:53:54:74:ff:c0:e3:ea:84:
a8:eb:70:44:47:11:b4:81:71:89:03:ca:bf:45:83:
fa:08:90:ce:4c:d1:6e:d0:ae:cf:a3:b3:fe:f4:9a:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3B:90:13:66:E9:9D:E9:4F:1D:1B:DB:F2:D6:0B:DD:7F:60:7F:96
X509v3 Authority Key Identifier:
keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:17:58:7a:2e:99:7d:37:8d:7a:3e:27:72:2f:aa:b5:6d:0b:
82:10:15:e8:74:67:32:76:60:51:8e:a0:da:7c:52:bc:5a:8e:
cd:64:9c:c7:7f:c6:73:05:cd:96:0f:4e:10:ce:0a:10:0f:ae:
ac:2c:a1:45:da:f3:5b:28:6e:40:96:02:87:50:fe:20:a2:71:
d4:34:c0:13:4a:8f:76:0b:95:ca:76:c5:bc:a1:0f:66:e9:1b:
20:36:44:3b:e2:12:15:69:df:0f:f2:45:17:f9:aa:c8:77:46:
71:eb:e2:47:a2:a2:cb:40:ed:02:db:f9:dc:13:65:1b:b2:58:
64:da:ec:dc:cc:a8:1a:41:da:83:0c:89:43:64:34:31:08:cc:
5b:ad:1b:45:e2:98:ee:06:f2:0d:e1:8b:78:8f:68:98:6d:44:
56:86:ab:b0:23:00:80:cc:62:e6:62:a0:44:51:23:dd:d5:75:
fe:b7:89:07:95:d5:34:85:7b:e1:5f:99:60:3d:2f:0f:d1:cd:
a9:e4:91:7b:42:7e:a4:91:b3:92:cb:9c:28:c7:99:bd:64:1b:
4e:1e:e0:b8:ca:7a:11:4b:22:a4:3a:13:3c:0a:8b:b5:72:89:
d8:38:1e:c5:09:3c:19:c3:0a:12:af:e9:99:23:c7:c7:aa:e6:
7f:b0:ed:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:23:58 2025 by rpki-client