Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: rG8x+kDR33CEgCBryL/baweTVnICN9ZHzZ2dJoIgHNk=
Subject key identifier: C0:80:E0:60:9E:98:37:8E:CD:AE:29:11:AD:AE:4F:F7:DF:15:B5:20
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 019676431426EA7202F20A5EAFF83DA0D4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 0BF6
Signing time: Sun 27 Apr 2025 08:00:29 +0000
Manifest this update: Sun 27 Apr 2025 08:00:29 +0000
Manifest next update: Mon 28 Apr 2025 08:00:29 +0000
Files and hashes: 1: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: LLCGOnGzwqdgBXN7KHkNCJuIaxhPRYr85f8y9k+AW9s=)
2: yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa (hash: zRJvfuooLD1ukObnKFMb0zFwDQ9keCDuprZkYYzC4qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:14:26:ea:72:02:f2:0a:5e:af:f8:3d:a0:d4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Apr 27 08:00:29 2025 GMT
Not After : Apr 28 08:00:29 2025 GMT
Subject: CN=c080e0609e98378ecdae2911adae4ff7df15b520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:9f:ae:25:f4:c2:5c:d5:25:6f:c3:74:4d:
e7:ee:7e:91:4b:80:bd:c3:36:ea:00:18:e1:8b:b5:
3a:29:f8:d4:c5:45:80:26:cd:03:06:34:4e:71:f5:
7e:4f:70:76:f2:25:3d:c0:7d:60:a6:2c:58:7f:21:
90:cd:0f:1c:f6:c4:fd:31:8a:e5:16:4a:78:41:46:
19:ad:46:f5:fe:86:28:3a:31:61:0b:36:ce:2b:d4:
21:08:91:84:53:37:6e:91:b6:4d:1e:2b:66:16:26:
da:da:7f:41:a1:77:db:f5:af:3b:ed:58:ff:2d:cb:
eb:6a:df:b6:41:71:9e:64:1e:8f:98:44:c1:bc:d2:
11:19:f7:9e:ee:53:11:20:e1:8d:34:30:06:e6:2b:
bf:6b:37:db:22:f5:c1:b4:47:38:5b:e4:ed:aa:3d:
6a:f5:ad:57:49:c6:af:bc:a5:e4:81:b1:a5:6a:02:
2b:8d:c7:86:80:aa:cf:c2:59:95:9d:79:a0:3f:f5:
5f:70:fd:1e:0e:6e:02:d7:ff:35:88:86:59:39:06:
3c:d1:ca:88:2d:e5:44:42:03:f5:2f:10:cc:c2:84:
40:cc:73:41:76:27:2a:fd:8f:0c:5e:5b:43:f4:1b:
b9:2e:bd:82:ce:61:82:90:a2:95:51:a2:70:1a:7f:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:80:E0:60:9E:98:37:8E:CD:AE:29:11:AD:AE:4F:F7:DF:15:B5:20
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:37:02:7e:22:6b:58:ea:55:95:d0:de:b3:65:0e:b6:5f:ff:
83:ed:9e:08:91:01:7b:dd:bb:2e:6d:00:3d:9d:4b:29:c4:27:
8d:21:62:96:02:f3:3b:ea:a7:51:6c:8d:3b:1b:8f:0e:9f:b1:
09:38:d4:fd:10:1e:25:2e:fb:64:a1:d8:69:16:99:37:f8:1b:
ea:e1:ff:d6:43:16:6e:17:13:0c:63:fa:b9:2d:ac:b1:12:50:
d7:9f:ba:cd:42:74:80:df:70:7c:99:15:6e:76:94:08:c7:0c:
c9:f3:b5:3e:2e:49:41:9c:2f:5f:3b:3d:67:d6:ab:59:be:92:
a0:54:94:d0:bb:9c:5d:31:35:9d:ff:ff:9f:dc:29:a2:57:b7:
93:8a:2f:28:61:bd:b9:bb:9a:ba:5f:9e:f3:7f:cb:ca:0c:b1:
4d:23:d5:2f:8c:11:a6:b1:ac:0f:d9:c9:e6:2f:86:61:9b:2d:
04:42:8d:62:42:0e:33:94:7a:4e:d3:46:44:0d:70:c8:b2:e3:
8f:2f:1c:16:0d:a1:d9:d6:36:c3:1b:22:50:a0:4e:1c:1a:f5:
12:40:ed:cc:76:43:91:15:a7:35:dc:e6:1a:82:fe:cf:d3:3e:
c1:11:6a:40:8b:95:2e:e1:1f:77:df:5b:4d:8b:90:e9:f7:44:
98:4b:2a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:29 2025 by rpki-client