Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: tcinlLTuwIBqBry/oMO/bEH/8yHR5RwHH1phWf/iGk0=
Subject key identifier: 80:9E:90:81:ED:68:C8:45:CC:38:35:47:7A:CD:2D:18:E1:99:11:39
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 01967A570411ADDB0B5B3287C30C032320F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 1220
Signing time: Mon 28 Apr 2025 03:00:45 +0000
Manifest this update: Mon 28 Apr 2025 03:00:45 +0000
Manifest next update: Tue 29 Apr 2025 03:00:45 +0000
Files and hashes: 1: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (hash: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=)
2: hdN3TWiGF-v4lVfB-_MZbJp6BC0.roa (hash: FBzq8JkLasFx9OYifFuQNiKO30TthScuWNWKtgQWVSE=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: ZJ41soMMraxcrZVHxBO/2NGul0BYKIYNBShj2Bnnf/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:04:11:ad:db:0b:5b:32:87:c3:0c:03:23:20:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Apr 28 03:00:45 2025 GMT
Not After : Apr 29 03:00:45 2025 GMT
Subject: CN=809e9081ed68c845cc3835477acd2d18e1991139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:85:5c:91:d2:84:fb:10:a6:65:eb:93:ca:
23:fc:5f:0f:56:2c:be:ba:e4:af:4e:ed:70:40:97:
a9:e5:26:7d:15:07:3f:20:a3:a1:78:49:99:60:23:
40:51:15:db:90:85:60:b9:2a:55:47:29:a6:b7:38:
74:aa:5c:91:c0:d2:b9:6a:88:f6:b2:ed:5d:ae:ae:
6d:df:34:4d:e1:b5:3b:c2:dc:a9:24:f7:ee:8c:b4:
4d:4b:19:43:92:9b:2d:d0:5b:8d:0f:4f:c4:9f:78:
79:94:8c:b8:46:9b:7b:75:87:26:5b:a6:3f:49:d1:
57:12:f3:43:75:8a:80:14:f2:c9:68:f4:38:df:1b:
51:d6:94:ec:16:55:58:c6:d7:cf:85:14:56:13:52:
5f:fb:ad:dc:b1:f9:1f:f6:14:e6:17:b3:66:68:df:
25:54:8b:3c:ec:ee:c5:20:c6:a9:fe:3d:41:94:09:
0a:ab:ac:77:5f:67:05:2e:ac:f1:c8:cf:3e:42:f6:
7a:4f:97:e5:03:3e:80:3a:82:19:02:23:b0:b3:48:
93:d4:d4:3c:3e:09:77:07:c8:7b:e1:c3:17:7a:59:
dd:40:6a:27:76:56:d2:c1:d4:29:51:9d:91:6b:fb:
41:3c:4e:a7:a9:2d:13:bd:76:c6:f6:6b:89:80:11:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9E:90:81:ED:68:C8:45:CC:38:35:47:7A:CD:2D:18:E1:99:11:39
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:19:32:25:7a:bc:52:e2:c4:ef:e0:ee:5a:35:36:9d:32:fc:
c3:56:a9:d9:dc:4b:e9:74:65:b8:3b:95:06:b0:f9:2c:72:6b:
c0:44:e1:4b:c6:c6:71:f5:fb:d8:76:34:95:9a:24:d1:98:cb:
80:78:fb:ee:ae:04:9b:ab:0a:be:56:28:b4:97:2c:20:61:80:
36:0c:a0:8b:fb:5d:e0:61:a4:93:22:90:11:6a:07:8a:fa:43:
9a:85:1b:da:ad:84:c0:4d:96:4f:f5:7e:6c:2b:8a:a4:e7:72:
40:70:b1:9f:49:c6:db:a8:9b:44:29:cf:f9:c3:c3:12:7e:24:
81:1a:e8:f2:e3:59:68:c1:12:59:e4:51:b3:08:de:d5:bd:b6:
98:4c:64:00:48:ab:91:ff:46:d3:0a:85:b9:79:ff:2d:cb:36:
82:81:12:25:24:51:b7:bc:38:8c:b8:b4:0e:05:24:6a:00:f7:
67:a1:e1:42:77:b4:01:c7:91:94:cf:49:a6:f9:cf:33:f0:f6:
e6:ad:3f:5c:94:17:15:3e:cb:8a:a5:8f:04:16:b8:d1:b7:cd:
94:9d:b7:01:7d:6a:99:ea:87:09:87:32:eb:11:c8:7e:91:49:
d2:90:95:38:b5:f9:94:3a:8a:eb:61:c7:17:09:84:a9:ef:cb:
05:ba:4a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:12:27 2025 by rpki-client