Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: YEC9Taxg976mzPYbNLjfQ+1Wkwmee7puJTeQi6Bl7vg=
Subject key identifier: B9:C5:E6:A1:FA:E7:B2:E5:1C:9F:FB:30:69:87:21:47:7E:64:FB:8D
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 0196884960F0525B369F85FB364633CEDB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 20:00:32 +0000
Manifest this update: Wed 30 Apr 2025 20:00:32 +0000
Manifest next update: Thu 01 May 2025 20:00:32 +0000
Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: TIEqmK+S7NxHmSV7G36zZngTE8UdDDHzTXfNIo486eg=)
2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:60:f0:52:5b:36:9f:85:fb:36:46:33:ce:db:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Apr 30 20:00:32 2025 GMT
Not After : May 1 20:00:32 2025 GMT
Subject: CN=b9c5e6a1fae7b2e51c9ffb30698721477e64fb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:89:79:dd:0f:c3:9f:c1:d7:76:f1:59:ea:
50:bc:7c:d4:13:da:d9:64:de:54:3f:6b:6a:9a:6e:
19:ab:6e:e6:52:ff:0c:57:51:1a:cc:1d:41:96:d8:
a6:97:39:a2:37:df:75:30:29:fd:b1:76:fb:f5:7e:
f0:68:b7:cd:df:13:4c:f8:93:2d:b8:40:e0:fd:58:
55:8b:a4:8e:37:2e:d0:af:74:f9:24:5e:d6:f9:6c:
45:cc:46:84:36:bc:32:7d:bc:07:ce:57:06:99:1c:
b9:c6:58:b3:3c:18:e0:77:ad:9d:e2:cc:61:50:5b:
df:ab:1d:65:05:4f:a2:a0:19:bf:88:52:4d:48:34:
ea:41:25:0f:b1:2d:55:8f:0e:9a:da:71:a9:c5:b8:
60:d1:fd:22:14:8f:7d:fe:ee:60:60:0b:c4:93:1c:
68:95:e9:c0:af:b4:ca:7b:24:ca:63:8e:d3:7b:76:
ae:0a:bf:ec:76:0c:1b:37:47:99:c9:21:72:ea:a6:
e0:e0:01:5b:53:fd:30:1e:b3:23:26:a9:a0:48:64:
ed:57:35:88:e9:8b:29:df:d8:f5:66:1c:54:bb:33:
e3:14:dd:98:d5:92:14:2f:b2:62:fc:53:da:01:bd:
10:e3:21:20:76:4b:f9:37:89:31:2c:c2:ec:2a:63:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C5:E6:A1:FA:E7:B2:E5:1C:9F:FB:30:69:87:21:47:7E:64:FB:8D
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cf:af:45:e9:8b:cd:2a:ef:05:3e:ce:38:4a:d0:bd:bf:b1:
20:37:57:d5:78:cb:fb:07:0e:d9:b7:51:ef:6d:f6:ec:c4:99:
2b:db:b7:31:3a:a2:7e:14:e1:ae:00:87:27:06:53:09:1a:36:
65:90:d2:76:8b:d8:91:39:32:49:d9:2b:be:b9:c9:56:a1:67:
5b:86:95:d5:b7:d5:c3:57:5d:5b:9e:ac:93:09:2f:fd:cf:3f:
40:a1:80:a0:1e:f5:87:f4:f3:dc:12:19:11:8f:c4:dd:de:47:
a4:fb:f7:4f:c4:c7:92:37:5b:e6:a1:78:97:33:f3:cd:3e:d4:
96:b1:f9:d7:94:3b:80:11:42:3c:c2:81:67:48:9f:d2:d3:73:
65:8e:17:37:8c:20:a2:c6:df:32:c5:c8:a3:8f:6f:8b:19:fb:
50:80:c3:dd:04:af:64:87:3d:41:eb:b3:20:7b:1d:4f:d0:34:
c1:f6:de:02:10:2a:42:4f:91:d1:2b:5d:60:b7:6e:2a:df:fd:
9c:34:49:eb:ca:e6:02:bf:a7:b4:c8:7a:f1:28:84:3e:fa:c0:
dc:4f:b5:5c:2c:5b:e5:6d:30:7d:01:d1:e3:da:ee:94:5a:24:
15:a3:73:2a:47:65:0f:46:9d:78:28:e3:13:63:f7:57:b0:1a:
11:d6:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:04:32 2025 by rpki-client