Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
File: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json)
Hash identifier: oYT96+9ak+/gXnN1fsvfUrrAM/4FHNWcDnZJlob+wbI=
Subject key identifier: 56:8E:17:5D:CD:2D:99:90:6D:24:44:FD:64:98:8F:01:97:C1:1C:94
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Certificate issuer: /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial: 01967A1FED4D26657297B811959FD543417E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
Manifest number: 094C
Signing time: Mon 28 Apr 2025 02:00:34 +0000
Manifest this update: Mon 28 Apr 2025 02:00:34 +0000
Manifest next update: Tue 29 Apr 2025 02:00:34 +0000
Files and hashes: 1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=)
2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: vShl45UR0N627t+UePIaqoNYcUs/ovAoGJYT9n10eWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:ed:4d:26:65:72:97:b8:11:95:9f:d5:43:41:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
Validity
Not Before: Apr 28 02:00:34 2025 GMT
Not After : Apr 29 02:00:34 2025 GMT
Subject: CN=568e175dcd2d99906d2444fd64988f0197c11c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:60:f9:68:9f:40:bc:17:04:69:f7:ae:fa:f7:
29:a7:03:65:99:52:f0:b8:88:e0:b4:39:25:36:aa:
3a:5c:aa:19:7b:d2:5f:02:85:5e:7c:76:5c:e3:33:
b1:02:db:ff:8a:55:88:eb:17:38:44:5c:e0:9e:6c:
bb:77:46:bd:c4:31:61:99:b7:67:f0:5e:5c:c3:a2:
cb:df:3f:6a:a2:78:e9:99:70:37:e9:5f:e2:4b:e9:
2a:61:9c:ed:4e:2b:d8:ab:3b:b7:33:c0:49:d0:ba:
d9:6e:3f:7e:48:24:67:62:18:9d:8a:96:71:da:bc:
dc:49:d4:4e:de:f0:07:9b:47:e5:00:5a:41:38:a7:
4c:dc:4d:0e:15:17:7b:ad:1a:79:5e:d5:b3:e9:21:
25:51:07:ff:1d:5e:50:cc:3c:70:1b:10:09:ed:8b:
ac:24:d6:24:94:da:1d:12:74:2a:5c:49:3d:e5:9c:
23:26:01:ba:bf:2f:d9:23:b6:86:9f:ba:14:51:bb:
d5:ce:d8:75:ab:0c:d4:32:5e:29:af:79:19:1a:7c:
f9:d5:46:02:99:78:2a:14:2c:26:0b:9e:09:43:ce:
21:7d:7e:d9:01:a5:6c:15:91:e1:8b:17:f9:c9:4c:
38:1f:6f:2d:e7:0a:b2:59:2c:8f:d3:87:41:04:08:
2f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8E:17:5D:CD:2D:99:90:6D:24:44:FD:64:98:8F:01:97:C1:1C:94
X509v3 Authority Key Identifier:
keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ac:7a:bb:2e:c3:af:73:e3:99:0f:28:d8:1d:f5:d0:67:87:
c7:20:16:5d:ee:40:28:99:73:89:35:3e:39:3d:79:b2:8f:d3:
15:9d:76:4b:af:f6:bf:c4:64:09:a5:47:ee:d9:53:6f:9a:89:
92:03:43:2d:2b:82:73:0f:9b:f3:22:a3:83:a8:54:8d:99:1e:
cc:97:99:7b:ce:f3:81:87:14:a3:a2:27:15:b9:2c:7d:ed:c7:
31:ae:85:85:59:ea:f3:ce:a5:c2:d6:39:25:8c:02:c8:b6:b9:
a9:d6:c0:2b:84:4e:14:00:1c:7a:68:08:9b:00:7b:6b:7e:df:
ac:52:6a:e5:c1:ab:20:a3:54:95:19:c5:e4:c0:a7:47:15:47:
eb:59:f7:6e:15:a6:a8:d7:4b:59:ec:38:28:9d:ea:8c:cb:24:
e4:6a:28:65:1a:80:87:16:71:7f:65:e2:1a:56:3b:dc:f5:ab:
88:83:ac:89:23:20:93:85:86:24:8c:be:b8:50:61:e5:c7:89:
37:ca:00:76:80:3d:46:f8:99:a8:07:bd:be:0d:80:23:52:44:
5c:5c:72:8a:c9:cb:4c:d4:ff:c8:2a:cb:bf:f5:ab:37:1d:f8:
69:f8:45:7f:7c:78:65:28:83:02:84:c8:2d:8a:bd:29:67:7f:
78:9e:b7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:03:57 2025 by rpki-client