Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier: BBdc387brO1TbbIyLitW3kxuGvDuFum2hGkr26vbYCc=
Subject key identifier: D2:45:06:63:89:48:B2:D5:EA:3B:E4:8C:F8:7F:BE:B4:D0:5F:38:E4
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 01967D8ED4AF9E75AB4E8A9CCF9F362C6395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number: 1233
Signing time: Mon 28 Apr 2025 18:00:34 +0000
Manifest this update: Mon 28 Apr 2025 18:00:34 +0000
Manifest next update: Tue 29 Apr 2025 18:00:34 +0000
Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: WEu8WigS3dl2LHhFXtZRdols0laMJQd5zdDvLU+cRdw=)
2: 7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa (hash: 9coWzyh+KYo6PjWXvZi4r37a7LcyA66ZeCRl9p/oIqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:d4:af:9e:75:ab:4e:8a:9c:cf:9f:36:2c:63:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: Apr 28 18:00:34 2025 GMT
Not After : Apr 29 18:00:34 2025 GMT
Subject: CN=d24506638948b2d5ea3be48cf87fbeb4d05f38e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:82:fc:45:c3:cb:12:df:f9:48:35:d5:de:87:
6d:e8:67:0d:0c:cf:f8:1a:c1:38:a3:42:c1:8e:03:
c4:e7:8e:00:91:99:40:09:1e:c7:05:5e:ba:3f:b7:
4b:dd:66:b5:f6:07:d4:3f:ce:11:40:d1:33:1e:e2:
0d:a6:fd:05:2d:17:57:94:70:d8:11:39:7d:93:ce:
65:4d:40:4f:b8:2f:8f:ed:ae:68:42:77:01:4b:6e:
a4:89:20:29:a4:9c:ea:79:68:60:fd:96:76:5f:82:
62:dd:7a:db:6b:55:c9:94:6a:08:77:0f:b5:d1:af:
f4:81:a6:9b:be:b2:b8:5e:ad:5e:fc:07:36:15:71:
77:ff:b2:8e:4a:62:21:73:88:a1:6d:43:00:25:f9:
da:92:df:3c:0f:5b:29:08:04:f1:2f:c2:56:f9:68:
00:15:b2:a5:fa:e3:d6:99:ad:8a:b9:dd:fc:52:dc:
ce:2e:7e:a7:8e:47:42:d3:50:14:71:b4:67:ab:0d:
bc:df:ea:7e:69:9e:74:58:05:08:3b:cd:7b:21:94:
f6:9d:3b:c5:f3:3f:e3:fe:96:12:af:9d:10:ea:c6:
fc:21:bd:cc:81:1d:53:9e:4e:7d:48:58:0d:5f:c0:
9a:8e:89:01:46:55:c4:82:52:1c:4f:1d:af:ba:3a:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:06:63:89:48:B2:D5:EA:3B:E4:8C:F8:7F:BE:B4:D0:5F:38:E4
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8c:b6:68:2a:9a:87:7a:a0:f3:a8:76:e2:dc:1c:9f:b5:71:
e5:9e:77:e1:63:ef:b6:2d:7c:54:35:e1:f5:95:9d:94:75:a1:
77:d3:a7:81:7b:a7:c4:e8:f2:56:bc:a4:23:3b:82:dd:ae:b1:
44:9b:22:e9:87:35:86:1a:b0:15:5f:17:21:f0:76:67:eb:97:
fc:de:22:82:d8:16:12:3d:3f:fd:0e:0f:01:24:f7:2a:3a:61:
05:fb:73:84:4a:64:21:f4:38:13:74:0f:d7:30:15:45:39:40:
d1:0c:44:8c:65:1d:74:9a:24:b1:4c:1a:b0:7e:99:d6:89:15:
bc:f2:98:e9:c6:9a:42:45:b0:96:55:f1:fe:af:3c:db:ea:4c:
49:e6:a4:86:da:f7:64:c3:7c:62:1d:8a:87:14:09:9b:b0:b9:
65:23:36:72:c6:bb:e8:38:ac:1b:1a:1f:c0:05:9e:63:74:8d:
3d:5e:69:8f:93:04:cf:71:89:9b:ba:30:0d:42:62:43:65:81:
6d:1f:60:f6:cb:99:d6:9d:7f:e7:20:08:26:c5:ca:f1:a9:56:
9a:76:68:4f:13:be:55:75:bb:2a:29:9c:3c:38:de:57:ea:ac:
39:50:bc:2b:8d:ae:4e:7a:e3:01:ad:70:92:f6:26:46:9f:da:
87:0a:ba:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:07:55 2025 by rpki-client