Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier: 7YQXmDF1fkISirRGsvbvcjjyn6+CglBsKRAunUewX9w=
Subject key identifier: BB:3F:89:99:E6:22:6A:FD:61:4C:AB:A3:05:29:CD:4E:9F:87:C5:CB
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial: 01967FB47687A68C481F24157DF48CB5C414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number: 0C22
Signing time: Tue 29 Apr 2025 04:00:55 +0000
Manifest this update: Tue 29 Apr 2025 04:00:55 +0000
Manifest next update: Wed 30 Apr 2025 04:00:55 +0000
Files and hashes: 1: Qc5cmd1l4zemEHfozY81Dk5Vg5A.roa (hash: 1e50whpvJStdUj8bNZvYvbgVa0jYFa3BmNTPWax7Fi4=)
2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: CZCBfniUAWBVoRccdC6g5LGVa430pYxAkyeJyduBbOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:76:87:a6:8c:48:1f:24:15:7d:f4:8c:b5:c4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Validity
Not Before: Apr 29 04:00:55 2025 GMT
Not After : Apr 30 04:00:55 2025 GMT
Subject: CN=bb3f8999e6226afd614caba30529cd4e9f87c5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:33:c1:41:18:fb:f9:67:d9:6b:c4:c9:0a:
de:b3:29:6d:00:00:b2:be:df:90:55:a7:b0:c5:70:
06:35:67:59:f8:fc:16:f6:ff:eb:76:f1:7d:7a:0f:
25:4d:1d:0f:cf:48:14:4a:c0:e7:0f:d9:da:01:a2:
88:db:5e:be:b0:32:17:56:b3:07:07:37:45:b3:81:
7b:2c:db:70:bb:f7:df:5a:7c:5a:4f:e3:44:7f:99:
a3:a0:66:5f:58:20:62:a8:4c:f2:5b:3c:6d:c9:5f:
61:d8:6f:0f:79:9e:2d:78:53:68:2f:94:ae:15:05:
c0:9c:ba:98:fb:6e:cf:46:0f:48:ff:7d:0b:70:f8:
92:8e:54:5e:22:5c:1c:da:ee:9b:5d:13:fb:3f:d5:
71:ef:5c:ae:55:ed:51:b9:d1:fc:84:c3:b2:e2:4c:
72:14:77:a1:e7:86:1e:0d:1b:de:4c:27:10:f3:c8:
28:ba:e6:62:cc:62:e1:fe:58:a9:87:7c:87:0c:08:
13:d5:9f:8a:9e:3b:54:d2:cb:2e:fc:f1:65:cf:4d:
a7:0f:a6:28:ab:15:03:7e:52:2a:0b:53:f3:94:32:
89:06:58:bd:db:94:b5:43:af:98:ed:dc:31:77:5b:
9a:d5:7c:c4:59:65:e5:d4:51:fd:c6:a1:66:30:49:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3F:89:99:E6:22:6A:FD:61:4C:AB:A3:05:29:CD:4E:9F:87:C5:CB
X509v3 Authority Key Identifier:
keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a9:47:b1:d7:7c:36:c7:33:cc:f2:8d:93:26:16:11:e2:be:
ea:d8:e7:3f:6c:7a:90:7c:54:57:23:81:b3:17:aa:fe:c1:1e:
bf:0a:c7:3d:5e:38:c9:c7:5b:e1:6e:26:7a:3b:7e:50:71:2f:
ff:f0:11:8e:b7:0a:67:3f:29:d3:38:f7:43:6e:18:9b:b5:44:
38:ed:04:3e:fb:f1:19:b7:9e:52:12:a6:6a:b5:07:d6:71:61:
fd:90:24:44:8e:f0:0d:9f:b3:4f:c2:6a:ce:30:51:6a:d2:88:
6e:b8:f2:04:d8:0b:84:5f:ef:06:5e:2e:9d:08:20:a5:f1:ca:
1d:d5:15:1e:08:43:8c:57:d7:3b:12:fb:fd:1f:89:4e:c3:73:
2d:6a:14:02:f1:e9:96:9d:b9:11:3e:76:9f:03:2e:b1:3d:6b:
aa:5c:66:46:de:e4:93:8d:62:39:56:7e:65:16:6b:bc:63:89:
15:a1:4b:c2:ff:41:e9:6b:34:36:88:d4:68:13:b0:c6:eb:08:
cd:ff:34:0a:fe:9d:11:e0:96:1e:2e:85:4c:d8:73:14:7f:14:
3d:2b:5c:d5:5e:d6:d4:cc:30:91:b9:0c:0d:3f:b6:3c:b7:69:
d0:95:0a:f2:c3:22:17:32:12:97:e6:b2:f0:c5:13:0d:9d:70:
93:c6:a9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:15:54 2025 by rpki-client