Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
File: j5voJHXSWAjiFOmlyieRNHwR2rY.mft (raw, json)
Hash identifier: dQZiLL/hxfUvSUaSJAcQhjOLvya5tuu8SlFXh0k9sT4=
Subject key identifier: 75:D2:A8:2B:DD:76:69:08:57:53:54:19:A7:0C:47:AF:51:26:37:EF
Authority key identifier: 8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
Certificate issuer: /CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Certificate serial: 01967D20C962C2D07B601C15A098186082DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 16:00:22 +0000
Manifest this update: Mon 28 Apr 2025 16:00:22 +0000
Manifest next update: Tue 29 Apr 2025 16:00:22 +0000
Files and hashes: 1: j5voJHXSWAjiFOmlyieRNHwR2rY.crl (hash: miy+RnlvdSTdOWIYXAynZE+Z/tZmJTTgKyi4kDuKpaU=)
2: ys17eRZKf5P4ptEUO7CgY8DVnRY.roa (hash: CelwNs3p1o5270NUJj8ZM/1/+n0plK08szDLjDEXAmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:c9:62:c2:d0:7b:60:1c:15:a0:98:18:60:82:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Validity
Not Before: Apr 28 16:00:22 2025 GMT
Not After : Apr 29 16:00:22 2025 GMT
Subject: CN=75d2a82bdd76690857535419a70c47af512637ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:dd:88:e7:4c:ac:d4:58:6c:88:14:94:19:
88:3f:a1:2c:d2:2b:88:e9:77:0c:ca:85:2d:3d:e0:
be:54:de:bd:93:4f:04:5a:91:7b:6b:3b:0e:e4:a4:
76:27:86:f2:ad:f5:e6:07:9b:90:fa:fb:77:1f:f3:
fe:fb:e2:0c:1c:66:eb:e8:45:b4:4d:9f:a0:70:ae:
c3:90:3d:96:4c:7f:22:db:f1:ef:bd:50:ac:c3:a7:
de:b4:d5:a2:84:a8:0f:23:6c:4a:47:a5:ca:2d:38:
a9:2c:93:f1:5f:d9:e4:bb:4f:18:db:10:fa:25:90:
d3:14:a0:ac:85:da:1b:52:27:82:09:09:17:91:1c:
fb:29:f4:2f:a2:92:ac:26:c3:5a:f3:b5:d3:d4:4b:
ce:05:a4:b9:29:75:e2:b2:aa:db:35:be:7f:a7:e0:
4d:5a:0b:23:51:c7:e0:7f:45:1b:d6:1b:61:03:84:
d0:c6:44:df:c8:a0:b6:02:69:7a:02:9d:50:f9:78:
a9:c6:2c:40:96:9c:e2:42:b8:6b:e5:92:ee:44:b1:
a9:26:3d:c1:60:78:14:75:52:62:0a:c5:fc:34:8b:
26:18:0c:bf:65:0e:0a:a7:a0:10:2d:a9:00:a2:16:
e4:21:88:c6:77:f6:b8:57:ad:86:ec:b2:7c:31:85:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D2:A8:2B:DD:76:69:08:57:53:54:19:A7:0C:47:AF:51:26:37:EF
X509v3 Authority Key Identifier:
keyid:8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e6:ac:33:dc:f4:e7:e6:cb:99:63:3e:1a:ec:bf:44:ce:95:
6d:e7:6c:3a:bb:16:67:d8:fe:d3:17:1e:1a:f5:71:c6:21:44:
91:ff:8f:fb:da:8f:63:8a:dc:a4:eb:87:6d:fd:9b:42:8b:e1:
f9:a7:a2:52:07:d8:92:c6:90:28:ad:fb:a4:7a:ad:93:b1:00:
48:d1:ee:e7:80:a9:97:fd:16:ce:86:60:44:07:2c:e3:15:1c:
4a:34:0b:5f:b0:26:20:0a:15:bd:e5:56:a4:20:02:36:55:07:
7e:6d:21:65:cc:5e:be:0a:c1:5d:dc:ee:bf:23:6f:11:51:91:
f7:35:29:ee:50:6b:22:e6:82:8c:8d:88:e3:c7:df:a1:bb:00:
98:06:a9:e1:8c:3a:db:f4:a8:1e:72:c1:6f:6b:29:1a:0a:8b:
1d:e0:7a:f4:fe:c6:f4:c9:78:11:57:7d:81:fd:55:04:8d:fb:
33:3c:9f:42:b0:04:f5:ca:15:4f:53:85:46:bd:93:61:e1:ed:
52:84:d5:9a:ba:d5:b2:ed:7b:88:22:e5:ba:50:f0:24:41:cb:
44:c4:1d:96:a7:30:aa:42:a1:c8:e7:4d:72:54:40:b3:a7:92:
56:46:b0:8b:ca:4c:ff:f4:76:04:94:23:25:ac:4a:51:34:29:
2d:d7:55:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:34:19 2025 by rpki-client