Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: cKmi399rWhlAe2LDBoIeg8WiExLHrpX96+xaCyENoqs=
Subject key identifier: 12:1F:15:77:D6:A0:17:FD:39:5B:42:99:87:E0:F5:99:92:F0:BE:4B
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 0196827DFD5EC2D854261F48B591D53AA760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 0886
Signing time: Tue 29 Apr 2025 17:00:16 +0000
Manifest this update: Tue 29 Apr 2025 17:00:16 +0000
Manifest next update: Wed 30 Apr 2025 17:00:16 +0000
Files and hashes: 1: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: vcU7LDqAGNUjStvBL91gkwzuBc1S2x+mmYf+E7Q/uvE=)
2: y1KtkhbJcf8xMKGegKszt0QDaOo.roa (hash: MP5sL9q4mE2nj3U5Tn7LLkafXsvaYmUnSKWAsDGsqZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7d:fd:5e:c2:d8:54:26:1f:48:b5:91:d5:3a:a7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: Apr 29 17:00:16 2025 GMT
Not After : Apr 30 17:00:16 2025 GMT
Subject: CN=121f1577d6a017fd395b429987e0f59992f0be4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:da:20:4c:93:a4:7d:12:e8:06:ef:86:30:
a3:08:f0:81:34:57:2c:13:b2:7a:a5:06:38:93:79:
cd:23:97:3b:7a:28:10:f7:42:fe:5d:05:a1:5d:36:
75:01:aa:1d:ae:c2:9d:33:f5:40:32:35:78:3e:89:
ac:f8:0f:4f:79:4f:11:6e:e5:bf:7c:06:c7:7c:d8:
4b:3f:a7:40:20:ea:08:bd:23:17:5a:21:95:6e:df:
66:fa:87:a9:d5:95:ba:34:6d:e2:36:b8:c1:46:fc:
a2:fd:93:f4:2d:1d:27:5c:22:be:63:09:1d:4c:2d:
b3:e4:6f:c2:72:4b:2f:0e:20:d7:e2:55:fa:3a:32:
11:4f:8d:f1:a2:4b:e1:34:12:4c:79:b6:d0:d7:dd:
22:ec:c4:ed:00:c2:f7:88:30:37:42:f1:26:43:1f:
85:96:86:67:86:57:bb:56:96:40:3c:17:ab:90:c7:
2c:bb:cc:b0:68:7d:e6:ae:c4:8f:47:62:2c:8f:2f:
95:d0:07:2a:6f:16:7f:f9:f5:db:56:63:f6:1a:47:
a8:7c:09:57:86:19:ce:12:9f:35:3e:64:fb:77:fa:
b7:f5:8f:90:74:07:d9:5b:22:19:f7:46:81:0d:7c:
71:9c:38:a9:b6:0a:0d:91:bc:fb:65:e9:f9:67:1b:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1F:15:77:D6:A0:17:FD:39:5B:42:99:87:E0:F5:99:92:F0:BE:4B
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d0:51:ae:b7:f5:f5:78:31:a4:cb:34:0e:5c:92:df:ca:2d:
38:92:82:3f:bb:1e:80:80:93:be:b7:14:62:61:94:99:f9:4c:
23:0f:7c:aa:94:f5:92:6b:9f:09:31:9c:41:40:aa:92:51:2a:
54:fa:b2:f4:e3:af:5b:b2:bb:8e:ce:bd:9e:6e:6d:da:36:31:
93:80:8b:78:2a:49:1c:6a:8d:2c:35:67:35:ea:b2:b3:b1:69:
f1:cd:9a:50:c1:ad:d3:7f:74:6e:99:d1:d3:90:3e:ef:23:5e:
ba:d6:d4:dc:4f:6b:9c:f2:fd:b3:4a:0f:df:80:ea:43:54:a3:
cb:de:28:d0:32:8f:2b:30:19:c1:04:c8:21:5e:b7:23:d5:81:
6a:7f:5b:3c:59:00:3c:56:6d:45:e2:4b:47:c2:45:d6:e6:e0:
96:b4:b0:91:a2:03:e7:c0:fb:bd:a2:b8:9f:e7:6d:11:0f:91:
80:3d:cb:df:9a:55:38:80:4f:d9:87:10:2f:b4:77:96:7a:34:
4e:8e:a1:6e:68:8c:35:91:12:10:b4:c4:b1:aa:0f:7d:b3:67:
6e:be:16:4d:d0:1e:e2:49:5a:ae:f8:e8:99:ae:5f:e6:23:4e:
9f:ff:3b:7e:eb:6d:b0:27:78:18:ad:1a:ef:2c:28:c9:d8:31:
18:13:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:11:34 2025 by rpki-client