Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
File: jL10xtEdY8pd48xjfOln7pdgTGc.mft (raw, json)
Hash identifier: aA+wz9BXHnMZAgnIJhkx8LHczV0G/WuRzcnzqFGtjuU=
Subject key identifier: E0:80:51:C3:D9:72:AC:35:CF:42:9C:32:A2:D2:04:BB:9A:55:74:75
Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
Certificate issuer: /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Certificate serial: 01967BD752BBB10EECA7667FB6CFAF9F751F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
Manifest number: 0C71
Signing time: Mon 28 Apr 2025 10:00:30 +0000
Manifest this update: Mon 28 Apr 2025 10:00:30 +0000
Manifest next update: Tue 29 Apr 2025 10:00:30 +0000
Files and hashes: 1: F_jltXy2Uo4j3CnQ_o6LogVbZk4.roa (hash: t5awNCHpv5Z1K7KKzegDPRjyXJOt1/jwTbN2Cm1q5cw=)
2: jL10xtEdY8pd48xjfOln7pdgTGc.crl (hash: wFGAs7fWLGgU/t+NwSZQyvnyKPJ+KkzdbLgqDFHsycA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:52:bb:b1:0e:ec:a7:66:7f:b6:cf:af:9f:75:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Validity
Not Before: Apr 28 10:00:30 2025 GMT
Not After : Apr 29 10:00:30 2025 GMT
Subject: CN=e08051c3d972ac35cf429c32a2d204bb9a557475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:b6:c1:ad:0b:a9:a7:ba:82:39:43:44:ad:
78:da:4e:24:3e:e2:6a:e2:fb:d6:2a:63:8a:f4:57:
9d:e2:9f:72:e0:c1:f1:c7:1c:b7:04:12:29:95:a2:
f9:98:1b:45:88:93:26:15:78:ff:5e:e0:f5:2d:92:
68:d1:03:60:54:f1:97:68:a1:a8:4b:cf:cb:24:b0:
12:0e:be:24:48:f2:2d:fc:71:4a:ac:ec:7d:96:6a:
6d:60:dc:43:bd:d9:9b:76:4c:1c:2f:28:ff:67:4b:
f9:36:e5:3d:b7:ac:31:a5:b9:f5:43:82:44:1a:65:
a8:df:f5:30:cc:10:8f:0d:af:7d:a7:a3:55:dc:67:
c2:66:48:d7:a0:f9:34:eb:a1:5a:0c:ec:9e:6e:70:
4a:74:3b:d0:2e:ea:84:b5:2f:6b:8a:d9:36:d1:75:
a6:d5:52:ef:cb:6b:e8:da:9c:0d:22:d7:33:c1:84:
9c:ed:88:c6:97:20:e4:e2:4b:c9:8e:ca:52:7f:f6:
14:9e:e3:c8:21:8e:b2:4f:e7:ea:2d:67:d4:bc:d1:
be:51:9b:71:0b:b2:0a:c7:f9:fb:bd:d1:57:22:a8:
ea:93:99:0a:17:e1:e2:f5:d9:27:8e:3b:11:87:08:
e6:4f:fd:6c:d7:6a:bb:21:bc:8f:59:14:e2:45:52:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:80:51:C3:D9:72:AC:35:CF:42:9C:32:A2:D2:04:BB:9A:55:74:75
X509v3 Authority Key Identifier:
keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d5:14:2d:22:20:2c:89:88:d4:ef:6e:86:d5:5d:5f:b6:07:
50:62:6f:c2:e0:e7:cf:75:d0:c2:c5:84:e2:cc:84:64:60:77:
7e:22:91:9e:e7:cb:11:a1:83:14:c2:fe:09:2a:3b:eb:87:d1:
51:43:93:c3:00:e0:76:e6:96:e0:ab:48:36:b0:94:69:9b:ef:
d9:53:09:85:d3:40:72:9e:4d:62:b4:ac:7f:ff:95:d3:fe:c2:
7e:8e:1a:ca:87:9e:0c:56:33:3c:f5:cb:cb:49:d8:e7:f7:e9:
fe:69:d5:03:0d:04:6c:1d:78:94:ca:5e:f0:f8:fc:bf:d3:f7:
d0:49:46:9f:7e:c4:73:e7:1a:33:d4:f6:ba:42:2c:ab:4a:93:
67:00:76:23:d7:d3:db:0e:6a:97:4d:19:7a:af:ba:8b:2c:4c:
77:bd:e9:68:35:7b:9f:82:7d:9c:04:9c:68:b7:37:99:86:31:
c3:7d:3c:27:b0:5a:df:05:9d:30:be:28:2e:70:b9:4e:33:11:
3b:f6:c3:46:4e:11:3b:28:80:45:0b:70:5f:64:73:7b:9c:44:
3c:68:09:04:48:e3:57:9a:f6:dc:0c:5a:d4:db:22:03:ef:42:
25:6a:7a:3a:fa:21:e7:50:7a:5a:81:93:32:e6:f4:19:79:33:
4f:23:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:32 2025 by rpki-client