Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: YduDVRI81TVUjcqbR7hehcvZnsknd3oxQ10DKfafrbI=
Subject key identifier: CB:5A:F8:30:8B:83:40:D9:E1:37:50:E2:AB:C3:A8:79:C7:F1:DB:5D
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 019685B6553279FD76D9D04E8AD56042C1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 0BF8
Signing time: Wed 30 Apr 2025 08:00:41 +0000
Manifest this update: Wed 30 Apr 2025 08:00:41 +0000
Manifest next update: Thu 01 May 2025 08:00:41 +0000
Files and hashes: 1: TZNlzSisEozO9bUPt3Ymc1srv8E.roa (hash: wa8v9NsgWL1gYj2sgVAPeIrXdGt5FFoRvprZhnIr4yo=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: Xbp6LzElctmxC3NTj77AMf+lq2it8zakRb6RRGIbR1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:55:32:79:fd:76:d9:d0:4e:8a:d5:60:42:c1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Apr 30 08:00:41 2025 GMT
Not After : May 1 08:00:41 2025 GMT
Subject: CN=cb5af8308b8340d9e13750e2abc3a879c7f1db5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:26:4f:0f:20:10:9b:9a:3d:e6:f8:44:16:41:
b0:1e:46:ad:bd:0a:65:3f:55:3c:af:54:9c:ac:d1:
47:80:a3:04:2b:65:0e:b8:53:8a:55:1c:6c:fe:84:
8b:7e:1d:7c:92:73:13:3c:27:35:73:64:8a:0a:fa:
3d:67:b5:c1:06:11:5b:61:22:61:c0:e5:1b:91:23:
c9:79:d1:f9:db:c3:10:4d:c9:27:92:ea:87:4f:1e:
5f:5c:ec:99:68:bd:4c:1e:81:0e:03:66:43:67:9b:
48:af:1b:fe:f3:f6:ca:a1:ce:84:8d:93:66:a5:38:
b2:6a:70:bd:b2:65:d2:7d:6d:0b:f3:02:f4:3c:7d:
f0:da:7f:2a:98:15:2f:22:a2:33:55:e1:36:f7:8b:
c5:9e:95:4c:c7:0b:86:25:6a:80:3c:62:79:af:3c:
25:da:09:8b:0b:5d:64:18:41:36:a9:06:07:93:2e:
99:2a:20:e7:28:40:b2:1a:d3:d7:74:12:89:b1:28:
d1:27:a4:e5:05:fc:50:4d:90:d5:32:15:1d:8a:05:
59:63:38:10:64:6d:fc:bc:c8:71:55:46:5b:03:57:
c7:a8:07:14:58:4a:ac:e5:58:ec:73:79:2b:df:c2:
06:76:a0:79:42:67:47:0a:5a:8b:d3:70:0f:7c:40:
7d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:F8:30:8B:83:40:D9:E1:37:50:E2:AB:C3:A8:79:C7:F1:DB:5D
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:11:53:95:ec:1b:a0:cb:28:7f:5f:42:49:2d:2c:a1:a8:8a:
8b:3b:49:b4:49:83:6e:3d:bb:68:49:78:76:19:fc:bf:7e:ee:
e6:ea:4f:e8:d5:24:6e:bc:f8:65:b4:51:f9:09:89:39:ec:d4:
0e:6b:7f:be:f8:76:7d:42:49:6e:d7:da:30:87:9c:80:e1:80:
f4:80:1b:00:85:6d:74:ff:da:35:c9:6f:d9:bd:d0:20:5c:47:
77:65:2c:0a:91:b6:a2:45:db:e9:b4:0b:f8:c8:ce:2b:78:cb:
17:33:37:5a:57:28:b0:9f:8c:cb:93:5a:a6:31:45:d2:c1:c1:
ce:bf:46:ef:98:0f:bd:95:52:2f:bd:70:e9:b1:84:69:ed:bf:
0f:99:cb:2f:f6:c1:d6:62:8e:cd:10:02:91:a5:c6:f6:2d:c1:
e0:47:9a:da:6b:2e:c3:1f:9e:df:a1:ba:1c:35:13:2b:c2:36:
68:aa:70:7c:c5:71:fc:4c:96:c3:97:fa:fe:93:fa:ff:c0:35:
37:c5:82:c6:cd:2c:5e:51:89:e9:f2:47:4d:07:ea:cd:71:fa:
53:dd:6b:95:bb:9d:e5:6a:5f:6c:de:5e:84:ca:51:69:f8:9c:
6f:8d:64:b3:e8:97:86:14:67:29:ec:f2:49:e4:a8:19:c5:ea:
e1:66:42:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:34:15 2025 by rpki-client