Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
File: m2JkjpE6NkDwMbY6a9krDijhOfs.mft (raw, json)
Hash identifier: jf+4VwEV4s6/F3stWFqyVcAq37cW2ynhsNjajiX6cg8=
Subject key identifier: A2:BC:A1:30:8C:55:2C:C8:E6:2B:9D:19:87:06:A1:DB:D6:2F:B5:05
Authority key identifier: 9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB
Certificate issuer: /CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
Certificate serial: 0196771F0CFA927C1136AC49A2BE8862AD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
Manifest number: A8
Signing time: Sun 27 Apr 2025 12:00:45 +0000
Manifest this update: Sun 27 Apr 2025 12:00:45 +0000
Manifest next update: Mon 28 Apr 2025 12:00:45 +0000
Files and hashes: 1: GFs318vhhs43UeJYStMCcJcloVE.roa (hash: W8/O6hKTgxLPwLzEgTm/PKRsS6eSZm8+16PIQciHYr8=)
2: m2JkjpE6NkDwMbY6a9krDijhOfs.crl (hash: akcRM2Eo5TxybykYA6REYLf8xsazdvYbbJf0jV4RiDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1f:0c:fa:92:7c:11:36:ac:49:a2:be:88:62:ad:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
Validity
Not Before: Apr 27 12:00:45 2025 GMT
Not After : Apr 28 12:00:45 2025 GMT
Subject: CN=a2bca1308c552cc8e62b9d198706a1dbd62fb505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ed:04:c9:80:a7:a4:02:7c:9a:30:bc:94:f6:
24:f6:db:d9:c1:93:68:a2:87:12:a7:bc:47:25:aa:
60:c9:88:ed:61:d9:15:80:cd:48:ab:b1:20:70:46:
58:7b:2c:a1:c2:f3:50:83:05:a5:fd:cb:8a:3a:23:
a5:e4:f5:0f:19:a8:85:1b:19:7c:e6:03:4e:ed:d0:
1d:ea:86:56:bb:63:1a:e7:63:46:77:af:28:fa:83:
4e:94:a1:6b:c1:04:21:27:fd:00:4b:21:bb:ff:20:
d1:0a:78:f6:86:97:0a:80:b3:33:0f:e5:8e:9d:80:
aa:0c:35:44:d2:2d:71:01:dd:3d:5e:fe:6e:ea:0f:
9f:ef:e9:14:76:36:1e:86:db:bf:2c:df:fd:bf:97:
d8:93:1d:b8:32:20:5e:cf:b8:af:13:41:4b:6c:6e:
a9:f4:be:a7:64:f0:bd:80:2c:5f:d6:26:83:f7:25:
e6:12:19:df:a5:42:02:9c:c8:29:01:76:5f:6a:2e:
81:dd:74:41:91:07:aa:7c:b5:3e:15:0c:f5:97:c1:
a1:d1:72:f0:b8:95:52:26:07:60:b1:ad:96:4c:de:
bc:70:79:09:a5:7a:5c:d4:26:1d:a9:b9:13:c0:45:
c3:6b:ca:2b:c2:ec:90:c3:76:89:bd:15:92:42:ff:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BC:A1:30:8C:55:2C:C8:E6:2B:9D:19:87:06:A1:DB:D6:2F:B5:05
X509v3 Authority Key Identifier:
keyid:9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:81:f6:8b:8f:a1:1b:14:6d:ab:b6:e3:8c:3d:4f:1a:0f:b4:
45:eb:1f:a7:50:c6:51:17:58:c6:d2:a4:eb:2b:ce:ee:8d:7e:
dd:ea:5f:d2:80:62:6a:29:98:d3:bd:c7:14:6d:36:11:c8:ec:
ee:15:12:f3:d2:84:27:aa:1f:d2:d9:23:cb:ab:ba:d9:26:7d:
79:cf:c8:74:eb:c5:a8:78:a4:81:74:0f:d2:bc:95:7c:87:a3:
c1:0c:f6:59:98:20:9f:ba:5f:30:74:e6:43:65:0d:7f:e2:db:
20:41:42:7f:11:32:1c:cc:8c:d5:ac:61:a2:13:72:f3:27:dc:
67:7a:a6:eb:9e:69:47:0f:ea:75:25:9e:5e:c9:14:14:5a:29:
82:10:49:ca:6d:03:37:31:ab:86:c8:dd:96:9e:a6:86:ed:70:
16:f0:ce:f6:e0:c1:83:b6:fe:90:c2:d8:9d:ed:7b:97:8a:0b:
ea:3c:00:cb:98:2e:39:21:a4:b0:32:92:fa:c2:c9:16:db:c0:
ad:fc:13:9c:f7:70:99:8a:ab:41:61:06:df:87:05:82:05:5b:
54:d6:97:35:2d:40:ee:ee:8a:1c:28:3c:08:33:a0:c6:ce:41:
fd:a3:38:5e:3e:f0:74:c7:68:43:9d:93:a0:f6:27:62:04:d7:
4d:19:e3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:56:20 2025 by rpki-client