Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier: SM9OvGxg2toNvHQ+1xX4qnjwSoZE1s7/AaCrw1nN4P0=
Subject key identifier: A4:44:4A:ED:80:43:E3:F5:27:09:6E:23:A4:D3:B1:5F:33:9E:19:A5
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 019674C26DB26B31748696E752469799B150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 01:00:21 +0000
Manifest this update: Sun 27 Apr 2025 01:00:21 +0000
Manifest next update: Mon 28 Apr 2025 01:00:21 +0000
Files and hashes: 1: gUp9W6gdzA4HeeDeBLYOgieiGro.roa (hash: lrN/LUw9qbgMyjQd+6zHffB/Q9YQH49/9bc6+74QbTo=)
2: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: 2IEKOoDWgpBIEJ5bpsagkygz3dbpMig3aWNDA/zs3qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:6d:b2:6b:31:74:86:96:e7:52:46:97:99:b1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: Apr 27 01:00:21 2025 GMT
Not After : Apr 28 01:00:21 2025 GMT
Subject: CN=a4444aed8043e3f527096e23a4d3b15f339e19a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:37:b5:12:e9:8a:9a:87:f5:72:bf:d7:01:1b:
d4:4b:94:b2:51:42:2e:dd:8f:da:db:9f:15:56:c6:
bb:d2:37:2c:48:33:33:95:df:d1:1a:ce:2d:4d:a3:
65:93:72:5f:c5:8b:38:d1:46:81:64:8a:1d:b5:27:
a4:7e:f7:c4:0c:74:e2:86:00:ed:72:89:a5:e0:25:
fa:12:b2:fd:ca:f7:59:67:4c:33:31:67:cc:5f:22:
ab:75:cf:54:d8:07:7f:bc:3c:bd:e8:b0:20:3c:f0:
1c:95:9f:55:cb:09:9e:0f:bf:e4:06:1d:8a:c7:e9:
5c:3e:53:63:b7:90:f0:92:a5:b7:f7:6f:25:67:f6:
c8:e4:2b:47:3f:ad:82:1b:7d:c9:86:8c:12:58:bc:
37:17:f1:78:da:c0:03:55:f6:b2:c2:cb:14:c7:4f:
90:06:e1:56:bc:98:eb:fe:9b:1d:32:bb:51:ac:69:
78:62:af:8b:86:12:43:f2:aa:09:fd:18:11:2c:14:
81:41:5a:ba:59:c0:85:5b:d7:2d:82:e0:a5:49:c1:
a7:99:6b:c7:f1:ca:c1:f4:b2:92:33:c4:b4:71:c9:
e1:76:c8:03:17:f1:ac:28:63:2c:98:f4:73:d5:42:
71:af:80:c0:1d:90:9d:c5:af:c4:d9:f2:11:9d:06:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:44:4A:ED:80:43:E3:F5:27:09:6E:23:A4:D3:B1:5F:33:9E:19:A5
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8d:e0:1f:9a:ff:e8:63:ee:a5:da:d2:40:9c:a6:6b:0f:9c:
bc:d4:97:6b:27:cb:74:54:41:1d:eb:8f:7f:6c:0f:87:07:69:
91:5f:3b:20:01:e2:ef:a6:71:f6:a9:e5:06:b5:60:f2:3e:eb:
12:f7:c1:2d:3c:6b:e3:f8:b9:a2:cc:68:fc:ea:6f:21:9b:cc:
32:91:32:4b:fe:08:fb:e7:46:ea:41:98:20:10:cc:8f:7d:c7:
15:2b:b0:d6:56:c0:32:22:a9:13:9d:05:48:a5:fc:59:24:a6:
3a:e3:76:b5:ef:b8:67:92:92:7c:bb:1e:cf:a2:72:a0:50:f1:
11:35:a1:06:11:5c:f9:ec:12:1e:60:9b:17:88:7e:aa:1d:01:
10:88:78:cf:04:2b:c1:c7:69:8d:56:36:c1:d3:cf:b8:db:e3:
d2:da:e2:37:d4:11:20:e5:12:53:0a:50:85:85:c6:3d:86:17:
e4:41:59:b6:4e:6e:77:ea:7a:6b:f2:73:5f:aa:67:35:a4:35:
4d:c1:3c:9b:0a:fb:f2:f7:9c:e0:14:90:b5:c9:f4:ec:55:b0:
04:63:13:35:d6:7a:00:45:8c:66:66:6b:01:0f:e8:ff:9f:4c:
c8:41:5c:57:f3:90:75:35:c3:22:ea:e0:f9:1a:55:20:1c:aa:
98:5b:d9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:10 2025 by rpki-client