Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File: j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier: hMQShKI8mWi998LbXk7dM4Q2t6ztBs9MXcH+OskGLxU=
Subject key identifier: 8A:BF:95:19:55:C2:C7:4B:49:A8:F0:99:B8:20:27:53:20:C0:39:08
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial: 0196846CAB57D8677067397D2013B58DA768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 02:00:36 +0000
Manifest this update: Wed 30 Apr 2025 02:00:36 +0000
Manifest next update: Thu 01 May 2025 02:00:36 +0000
Files and hashes: 1: Y7eKY9L9f9B1QlpP7Px14Uk4KN0.roa (hash: Ti8fjG26nfzvszXNq8D1c3nuNhyRNxvinzWzoAh4fqQ=)
2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: XSyV58NseKgo7X96P9jSejZSFJqJhM2o6sSAFN3cJg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:ab:57:d8:67:70:67:39:7d:20:13:b5:8d:a7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Validity
Not Before: Apr 30 02:00:36 2025 GMT
Not After : May 1 02:00:36 2025 GMT
Subject: CN=8abf951955c2c74b49a8f099b820275320c03908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:19:6b:58:9d:22:e0:40:a3:82:3c:35:ed:
de:a9:d7:0e:20:8e:cd:55:8d:5d:4d:8e:da:b9:bb:
98:f3:06:27:dd:4d:bc:d3:b0:7a:62:37:7f:80:5b:
aa:7e:f6:63:94:c6:16:47:4c:d5:6c:16:53:e8:c5:
e7:8f:f0:85:e6:dd:16:fe:b8:31:59:63:f0:e1:fd:
a8:63:0c:82:21:bf:bb:a2:1b:5e:9e:6a:fb:3e:53:
6e:d8:de:fb:77:0c:86:2c:a3:44:71:8d:8c:bc:70:
b0:ff:ba:af:75:50:72:c8:4f:ef:c6:87:95:f1:e7:
c7:87:0b:ba:7d:e3:95:9d:d0:27:ea:10:5b:d5:37:
84:19:f8:39:4e:5e:87:d4:87:83:70:53:04:ce:f6:
d4:37:a2:c9:cf:92:aa:73:62:64:4c:8a:19:4a:3a:
e1:b7:2d:30:0e:8f:bd:18:7b:ed:17:1b:7d:1a:ae:
b4:73:d0:ba:11:85:a6:f2:37:1b:70:45:8a:d5:03:
b7:6a:da:46:de:5a:44:ca:03:91:5d:94:69:65:a5:
f4:14:57:5b:3c:13:bc:42:62:d0:01:82:a7:3b:ad:
62:6f:36:8b:4d:48:4d:7c:e2:21:7a:55:78:7c:b6:
38:67:3c:39:28:03:f2:d2:3c:26:a7:b0:ba:e9:da:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BF:95:19:55:C2:C7:4B:49:A8:F0:99:B8:20:27:53:20:C0:39:08
X509v3 Authority Key Identifier:
keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:38:59:c7:f9:5e:75:7b:e3:34:24:39:ba:64:98:03:50:4c:
9f:82:95:86:77:e4:dc:09:ff:5f:6c:ef:0b:e2:db:3a:f8:6a:
b2:e9:0f:98:73:a0:a1:39:58:bb:9a:b1:c8:1c:9b:55:71:ff:
74:6f:3e:c4:41:89:5d:cc:e4:87:c0:f8:4d:00:48:4f:f6:d7:
a2:1e:83:6d:e9:b8:fa:6e:ec:2f:76:b0:57:8a:e2:0b:60:f7:
dc:bf:8d:7b:37:f0:e6:88:3a:86:59:fb:e0:c5:87:76:0e:5c:
6b:9a:74:ab:9b:a9:01:43:f0:06:6a:71:b0:5c:cf:f0:91:ae:
ba:e7:c1:57:13:8d:b0:8c:f6:89:17:c6:cd:e4:ba:79:9a:b5:
7d:23:3c:12:08:27:77:d6:7f:a2:8b:8b:d4:e6:25:5b:48:c4:
ff:02:31:99:f0:7c:99:58:c0:91:d2:43:87:5c:4a:e5:e4:5e:
a2:f6:f7:37:99:8d:49:b0:c1:e5:30:78:11:09:82:51:eb:e7:
f2:d2:e0:68:5d:ab:9b:b4:b2:6c:cf:b6:69:b5:16:22:b5:08:
cd:97:55:cd:f5:68:03:ba:17:56:93:92:58:14:e9:be:c1:e1:
05:b8:8d:8f:8d:69:75:87:7f:e7:db:a2:65:7a:03:45:e3:bb:
84:ae:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:37:31 2025 by rpki-client