Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
File: rJuTmjrJfa2gglFh86DoUDOoLSU.mft (raw, json)
Hash identifier: a6oZLi7RV37AacYiKX40KfzPasyNYxpIb4k7mGBWVtQ=
Subject key identifier: A1:4C:0A:64:FA:3E:05:64:47:62:D3:57:0E:D3:5D:EA:D6:9B:B6:C5
Authority key identifier: AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
Certificate issuer: /CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Certificate serial: 01967AC45E3CEE3C23D099EF0EA6EC80D4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
Manifest number: 0E8C
Signing time: Mon 28 Apr 2025 05:00:11 +0000
Manifest this update: Mon 28 Apr 2025 05:00:11 +0000
Manifest next update: Tue 29 Apr 2025 05:00:11 +0000
Files and hashes: 1: rJuTmjrJfa2gglFh86DoUDOoLSU.crl (hash: IpkKot6ngE4bvjGGHw9YCiswbf/0nMUR4MJxOnpMn5A=)
2: wbUwXsM6rSDrkQwsebUB7l1OtR0.roa (hash: l9d1EOf1QfY4TX8pjAVvmIhfn1wufKZnDqjhNvEB3f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:5e:3c:ee:3c:23:d0:99:ef:0e:a6:ec:80:d4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Validity
Not Before: Apr 28 05:00:11 2025 GMT
Not After : Apr 29 05:00:11 2025 GMT
Subject: CN=a14c0a64fa3e05644762d3570ed35dead69bb6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:d8:b9:41:d9:9d:af:2f:9f:ad:f4:1f:d1:
e4:54:20:81:78:f1:76:ea:50:0c:b3:2a:1a:b3:16:
4f:b6:d0:e3:ef:44:f6:e0:4f:11:13:fc:99:68:d8:
3e:70:c3:b0:59:f6:c8:39:f1:29:50:cf:b4:76:cb:
35:17:f7:6b:fe:76:13:f0:dd:73:d3:8e:e6:79:e9:
4b:d3:17:36:e0:d3:58:ca:fd:88:24:20:67:0f:ac:
bf:08:9b:a6:59:75:67:96:6c:33:e5:2f:e2:81:12:
c4:cf:73:32:21:08:31:15:c1:86:28:44:62:38:7f:
be:5a:44:42:a2:cc:fc:68:17:7d:c8:fb:2a:fd:98:
07:99:b7:f1:df:73:52:1a:a3:c3:1d:44:ec:a7:fb:
e6:24:89:5c:5b:5b:e4:53:14:de:be:80:cb:39:7e:
b9:09:33:b1:52:2f:6e:2c:c3:f6:93:43:24:0f:df:
78:e7:d1:be:b9:c9:b6:9c:e9:b2:24:ce:fb:08:eb:
ae:c0:97:6b:5b:4a:91:15:7d:c6:0f:cb:ac:9e:ed:
91:86:ee:61:99:60:8a:b6:fe:51:6d:b7:34:e2:a6:
15:09:71:e6:b8:a7:9b:69:61:c9:38:7d:26:9c:24:
c2:54:41:d3:12:8d:2e:66:59:fe:a2:fd:32:00:92:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4C:0A:64:FA:3E:05:64:47:62:D3:57:0E:D3:5D:EA:D6:9B:B6:C5
X509v3 Authority Key Identifier:
keyid:AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:82:85:0c:ea:67:3c:bd:e6:e1:5e:09:b7:cc:2d:fd:6e:92:
b0:f5:17:13:6d:e3:14:34:2a:8a:2a:92:07:46:c0:0f:ce:4e:
24:2c:44:d1:eb:23:01:70:b5:c1:35:8a:33:bb:00:c7:27:be:
be:00:76:ed:c1:f3:c1:b2:c9:cb:00:e1:73:ab:e5:38:00:5b:
16:cb:3c:1f:60:65:be:ca:16:7c:ca:50:06:a0:ec:60:c1:e4:
f0:ba:c2:f0:f5:85:26:88:b5:f9:4a:4d:70:74:c1:46:4e:2b:
a2:d3:7d:21:cd:83:93:8f:4b:af:6f:25:4a:b0:c5:cc:cd:21:
1f:0b:5c:4e:6c:6c:9a:e2:75:7f:15:bd:78:36:56:12:08:17:
a5:9e:5e:ff:d2:cc:02:c2:82:0e:d4:8c:e9:1a:12:e9:b6:59:
58:5f:a2:8e:7f:9b:c9:dc:2e:16:7f:e6:1e:f3:4e:d9:94:c8:
5a:e3:19:22:ee:c5:8f:9a:33:32:66:6c:41:16:4b:3a:11:11:
16:45:66:1e:6c:9e:ab:b0:80:82:10:65:40:b1:86:11:05:23:
6c:a5:cd:a0:89:90:65:a3:9e:89:e2:3d:36:47:02:50:7c:a2:
63:f7:08:7d:6a:b4:e8:3d:e1:ea:cb:45:5e:45:f8:95:34:83:
1d:7b:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:32:57 2025 by rpki-client