Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
File: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json)
Hash identifier: we9sryeAaSnasMP1K2NADsAgh0xYjdXxoB/pu4x36/o=
Subject key identifier: 67:9F:3F:6C:22:8E:3D:7F:9B:FE:84:46:72:D7:4D:BE:34:86:F8:98
Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
Certificate issuer: /CN=8fe502397dd6439c068bd053f28187dd77574578
Certificate serial: 01968322F2F0B447CD0E489FFC7F53727A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
Manifest number: 0682
Signing time: Tue 29 Apr 2025 20:00:27 +0000
Manifest this update: Tue 29 Apr 2025 20:00:27 +0000
Manifest next update: Wed 30 Apr 2025 20:00:27 +0000
Files and hashes: 1: gMULOubFLE1zJi0rMg32uHnZqCc.roa (hash: /wj2BLXMxaW2bHG7pTwC6aLckJJ+DGWw6dwVOt+QePs=)
2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: /quCJOTaLdsPsid9RZNpKnvj3tsgZp1qGqiaIO4LFCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:f2:f0:b4:47:cd:0e:48:9f:fc:7f:53:72:7a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578
Validity
Not Before: Apr 29 20:00:27 2025 GMT
Not After : Apr 30 20:00:27 2025 GMT
Subject: CN=679f3f6c228e3d7f9bfe844672d74dbe3486f898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6a:70:73:e4:5f:ba:a4:27:e0:cf:88:b4:e4:
b7:6d:dc:89:66:e5:fc:87:ab:2f:63:07:07:22:4b:
f2:f7:33:46:03:6a:52:2d:1b:89:7d:59:72:be:df:
75:fa:32:62:f3:6d:de:18:5f:d3:05:7e:ca:f6:1e:
55:71:0b:b4:21:d7:86:e5:db:e4:0a:d0:e4:c0:85:
1b:3d:36:6a:c6:73:ff:d4:a8:aa:7b:5f:51:85:af:
7c:7c:aa:4e:6c:e6:f4:90:56:23:e3:e9:2d:d6:ac:
3b:a8:80:98:f8:f7:fe:d7:e1:c0:10:46:b2:31:08:
be:f7:22:10:3e:62:b9:fa:72:f4:1a:41:e2:7e:bb:
26:53:1e:59:5d:91:d5:c5:47:d0:4c:fb:e8:a6:8d:
b2:c0:95:89:01:23:e4:14:c1:c6:e4:93:fa:68:8c:
e9:6a:39:c0:6b:3b:d3:f9:43:8a:21:bb:fd:b1:27:
a7:b9:04:e5:ed:93:5c:ad:52:5f:33:3b:9d:1b:31:
e3:e8:af:4c:c8:20:65:22:d5:5d:29:8f:c4:8a:a9:
b0:5d:32:22:3c:2e:fa:f2:87:06:48:dc:a1:e7:cc:
61:be:10:b7:69:b8:ad:57:63:51:d9:90:4a:80:83:
9a:ab:d6:eb:f2:51:e4:41:e0:22:20:a7:25:be:98:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9F:3F:6C:22:8E:3D:7F:9B:FE:84:46:72:D7:4D:BE:34:86:F8:98
X509v3 Authority Key Identifier:
keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a3:d9:23:82:5a:75:32:00:a0:e0:c5:39:83:ea:9d:73:68:
36:0f:e2:7e:20:3b:7f:cf:1b:c8:b4:fd:e7:2d:7d:65:db:5e:
c9:f6:de:4e:73:e3:b7:cf:25:d2:e4:fd:74:c2:3e:1b:bb:26:
2c:5b:4a:66:bb:16:eb:e4:07:6d:d9:bb:5f:ec:2e:4d:ef:c2:
63:ea:5d:bb:9c:04:e7:19:f2:cd:a1:d6:81:c1:97:0c:5c:a4:
c8:d8:a4:66:0f:ae:fb:27:27:0f:f9:7b:0c:b5:e2:da:bc:95:
5d:e9:01:c6:49:bb:66:a5:8d:4c:d0:57:d4:cf:d7:11:2c:32:
c2:7c:f6:3e:59:c9:23:88:b2:5c:07:d3:db:5c:be:eb:e7:5a:
46:0d:b0:17:61:a1:3b:63:07:2e:19:3b:74:d5:b9:02:36:08:
48:29:3d:a1:42:86:14:ff:ce:9c:e0:8f:08:b9:2a:29:27:07:
d7:8c:1e:0c:61:7a:98:b1:9f:b6:01:02:32:be:3e:4a:19:c0:
34:23:c8:05:5c:11:14:ce:49:d4:3e:47:f7:d9:78:52:20:b1:
b3:fa:9b:4b:65:aa:27:0c:47:ba:3a:89:bb:64:52:89:fa:88:
f9:f6:1d:ae:78:9c:ad:f6:a0:ca:2d:1a:45:66:c3:13:57:9b:
e9:8c:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:47:35 2025 by rpki-client