Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File: j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier: Ulq/gMASIBoRf+SgdUD+aYbD7rSi/uo1OpzyxQ9wVHA=
Subject key identifier: D6:F3:DB:6F:BB:C9:6D:03:F9:28:F4:5A:7A:B5:00:1A:98:8A:D7:50
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 01967A1FFF086FDD7871FCB07A167B45D62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number: 11EC
Signing time: Mon 28 Apr 2025 02:00:39 +0000
Manifest this update: Mon 28 Apr 2025 02:00:39 +0000
Manifest next update: Tue 29 Apr 2025 02:00:39 +0000
Files and hashes: 1: Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa (hash: N4jarbfAl3jZNu3gv2b+Z58QVCigDfUQbqsuaDI8gko=)
2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: xtIquaxqbRNoM9TQfmpdlk5DGuJQE1FMpAkTeR/i0uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:ff:08:6f:dd:78:71:fc:b0:7a:16:7b:45:d6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Apr 28 02:00:39 2025 GMT
Not After : Apr 29 02:00:39 2025 GMT
Subject: CN=d6f3db6fbbc96d03f928f45a7ab5001a988ad750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:eb:a7:c8:59:da:88:ed:df:ce:ab:ea:ed:
43:1e:5f:c6:ac:11:d3:43:32:18:7f:39:b5:3e:c9:
b2:5f:d9:b3:25:2e:70:0c:9d:0f:25:e8:00:93:bd:
93:0c:9e:ee:9d:ff:7d:d7:1c:ea:87:70:11:8a:d3:
24:d1:1e:a7:80:58:d6:11:98:e3:61:6c:56:75:cf:
4f:00:cf:c7:1d:07:1d:fb:e7:a1:6a:e6:fd:e4:ec:
aa:dc:0f:5b:ec:70:44:cf:5d:9f:85:22:80:76:7f:
e3:f6:78:db:72:d7:0a:c3:06:b7:39:4e:f2:fb:b3:
66:19:f2:b0:eb:c3:2d:9a:ba:d0:ab:8b:1d:c8:54:
7f:95:54:1b:04:09:66:5e:ba:e4:76:50:bf:ca:35:
c8:06:99:ac:4f:f9:c4:d4:f0:1b:15:d3:96:40:e7:
0f:cb:c9:af:6c:a9:50:76:30:ee:2b:c5:e8:06:f5:
dc:92:fe:75:01:7e:2a:55:cc:bc:2f:04:54:08:01:
18:dc:aa:4e:fa:49:a3:b8:91:b6:1f:56:67:ab:92:
d0:3f:71:12:1c:2c:f6:df:52:e2:ab:dd:d1:c3:33:
8c:f7:8c:4f:3c:73:1d:44:ef:8b:57:db:7d:2f:2e:
94:07:7a:a9:89:ea:58:88:36:4e:db:28:71:23:50:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F3:DB:6F:BB:C9:6D:03:F9:28:F4:5A:7A:B5:00:1A:98:8A:D7:50
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:87:96:08:2c:d6:c4:d6:12:91:04:7f:52:ac:03:73:e5:d0:
c6:fb:4c:b1:65:9c:08:8c:af:86:05:3a:5e:e5:0d:f5:b0:50:
a5:a4:5e:bb:04:dc:d0:9b:a2:0e:50:93:d7:ae:12:e1:3a:03:
63:2e:85:36:45:a3:aa:dd:b8:82:a9:57:e1:11:6d:95:50:ca:
74:4d:62:0d:44:55:7a:b6:0a:ae:6d:f5:9f:f0:8e:39:c6:19:
82:7d:64:35:f4:3c:e4:e6:89:7a:3c:69:4f:a7:72:1e:04:38:
6e:ce:36:25:57:d8:c1:cf:d3:cc:6a:66:1d:52:6a:56:f2:4e:
e5:c9:79:b4:1a:d0:a1:76:52:99:0b:7d:91:79:ff:3f:fa:68:
40:ac:4a:8b:f1:38:a9:9d:d7:c6:b4:db:81:bb:3b:7b:d0:42:
fe:15:d8:b7:9c:80:49:05:f6:b1:bf:36:16:ff:a7:69:e8:e5:
f9:ef:2f:e8:84:ea:92:98:ce:ca:80:2a:03:4d:4b:d5:9f:c5:
21:a0:5f:9b:14:22:06:75:ac:70:5f:80:79:ba:e5:da:e7:78:
65:db:6b:5a:67:e5:9d:8d:9d:72:f8:43:74:9f:17:2f:74:ba:
28:c2:ff:4d:20:b1:48:5b:06:7f:dd:51:a7:7a:a9:1e:66:ae:
d5:bf:aa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:45:07 2025 by rpki-client