Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
File: j-Arfu3_w4q16rRBYXLn2I6a0eI.mft (raw, json)
Hash identifier: 0EYysWbjhLjydATsVFvU/CYKdxWy/Cxc8npHrYpVCjw=
Subject key identifier: 7A:DA:28:6F:4D:8B:A4:82:12:89:DD:1C:A9:1E:CF:33:E3:FA:40:2C
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 01967B32915A29573D96B49ECAE8B86FC662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
Manifest number: 0EF5
Signing time: Mon 28 Apr 2025 07:00:33 +0000
Manifest this update: Mon 28 Apr 2025 07:00:33 +0000
Manifest next update: Tue 29 Apr 2025 07:00:33 +0000
Files and hashes: 1: Cpdr6ucH04Lz6z8VxOUAndHE6Zw.roa (hash: 657I1jLunRMhj2vBtHhC7I7kj5ImF6yxkiyRsM9bRks=)
2: U_9yJziqL68Vlpo8LcfiT2k_TkA.roa (hash: okS5k7eMs3rxRXNzXUCnctt1S8BvMx0r3g2EHrIQZYk=)
3: j-Arfu3_w4q16rRBYXLn2I6a0eI.crl (hash: vYxixImNFPl2f3S6k1gDTDv8sMntLqUhfgBrx0n2hcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:91:5a:29:57:3d:96:b4:9e:ca:e8:b8:6f:c6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Apr 28 07:00:33 2025 GMT
Not After : Apr 29 07:00:33 2025 GMT
Subject: CN=7ada286f4d8ba4821289dd1ca91ecf33e3fa402c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:86:7a:b0:23:4c:07:0c:95:23:d4:dc:60:
c0:1c:c8:e2:fd:bb:c6:8d:5c:fb:34:29:32:85:c3:
ca:e2:80:9f:b2:46:ef:d7:d4:9d:b1:7b:e1:85:09:
70:07:b1:d1:da:63:5d:53:e8:ce:81:dd:ca:6f:1c:
7a:99:c3:65:fe:17:8c:8c:bc:59:e1:f0:dd:fc:d3:
9b:e4:b4:21:56:df:48:bf:38:cc:74:60:e9:79:db:
d7:ec:98:23:27:ff:7b:a1:1d:fe:34:13:f5:41:2b:
c9:38:fa:ae:6e:9d:18:04:d4:cf:ea:89:af:c9:bf:
9c:0b:64:88:7a:20:6f:48:6c:62:a9:f6:d8:37:cc:
af:c7:97:76:03:18:22:33:91:10:42:9c:df:8c:ee:
be:65:a3:70:4b:3c:6d:28:65:fd:bf:37:d6:10:25:
6a:67:1d:51:76:01:27:cd:40:1a:17:99:d9:fa:68:
12:da:f8:a9:e5:c7:90:6d:f3:ff:89:ea:2c:f9:00:
cf:db:b1:89:cb:ca:de:87:70:25:19:5b:45:cf:a7:
e9:8a:49:2d:11:9a:82:df:5a:a0:18:ca:66:28:4f:
f2:11:4d:7e:1a:c1:43:f6:3f:86:85:54:22:09:6e:
c1:9c:9d:0d:23:c4:2b:29:3f:e4:9b:a4:14:80:de:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DA:28:6F:4D:8B:A4:82:12:89:DD:1C:A9:1E:CF:33:E3:FA:40:2C
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b4:52:35:4b:e9:aa:2c:81:6b:d1:e9:4c:63:ed:ed:a5:31:
09:e9:a9:a7:6b:96:98:95:40:ea:7a:cf:b8:f8:ee:a9:b2:d5:
e3:1b:94:d8:e1:de:31:3f:5b:74:0c:77:44:50:91:ca:79:75:
bc:f9:16:01:3d:e9:9a:e5:3b:ea:6e:99:69:e0:45:fc:bd:4d:
41:4c:c3:80:94:3b:77:7f:7a:71:dd:81:95:19:7b:b1:7e:07:
2d:b3:62:71:53:12:52:e8:e7:b1:8b:ce:b5:71:4c:f5:e9:91:
e7:77:37:e1:f8:b3:34:08:60:af:d8:b2:10:26:d6:53:5f:2e:
94:c5:75:bd:61:81:15:05:e7:10:95:8f:11:95:1c:a3:22:c3:
61:f1:ac:ca:60:b7:b8:e5:c2:57:62:86:84:b6:7d:fc:50:e7:
bf:2e:ff:49:a8:59:81:b6:16:31:db:b7:95:12:22:1c:7c:99:
ca:ef:72:b9:cf:20:6a:17:c4:40:42:60:cd:4f:b0:51:1b:ee:
78:ac:30:8c:27:47:41:eb:3b:a5:ef:42:c9:e7:81:6b:ea:c1:
54:7e:94:a6:9f:81:73:c6:8d:ed:5a:ca:a1:55:56:53:15:e5:
44:81:46:c1:1f:12:8d:ce:87:4f:8a:72:80:2f:96:69:be:9d:
c3:4a:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:31:23 2025 by rpki-client