Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File: jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier: ewOMcpxd9AUAH2U0nzjZzGIgTFHZhgy3SHhz2ek+KUE=
Subject key identifier: 2C:B8:75:53:8C:1D:78:B0:6E:14:13:C6:66:05:CD:C3:0E:89:F6:C9
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial: 019658A650D98F90480B2C10977FF561CEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number: F4
Signing time: Mon 21 Apr 2025 14:00:16 +0000
Manifest this update: Mon 21 Apr 2025 14:00:16 +0000
Manifest next update: Tue 22 Apr 2025 14:00:16 +0000
Files and hashes: 1: DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa (hash: 4MMSMGpFYTj64gvYvAI9aZYJdovl51CVqQfi4na/C5A=)
2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: wN1EWPr1pQSPdzKf4H0LUnuvpT0Ka9qY471BDBNZKSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:50:d9:8f:90:48:0b:2c:10:97:7f:f5:61:ce:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Validity
Not Before: Apr 21 14:00:16 2025 GMT
Not After : Apr 22 14:00:16 2025 GMT
Subject: CN=2cb875538c1d78b06e1413c66605cdc30e89f6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:72:3a:0c:94:7e:d1:e0:6a:32:7e:0c:a7:
75:d5:65:e4:5e:a8:c8:6a:8f:42:66:e9:0b:46:ad:
7b:00:f7:4a:aa:70:dc:16:e4:47:fc:d9:08:60:d2:
a5:52:36:c3:bd:00:42:f4:26:3b:fa:31:cc:42:92:
3a:0d:82:90:07:89:31:a4:fa:65:4b:1b:46:8f:58:
9c:16:1f:ff:57:a8:4b:12:00:c6:e1:fe:b0:0f:a3:
a5:05:44:33:b4:c2:41:c1:87:0b:13:22:2f:d9:6c:
e4:cc:66:dc:6d:05:ef:8a:84:9a:c4:6d:70:e7:79:
60:58:b3:70:11:2c:dc:92:31:01:13:71:cc:85:12:
a3:70:ac:02:db:e5:2f:a8:4c:cc:92:20:98:1a:a4:
2e:70:9b:f1:2b:a0:71:bd:9a:0f:43:70:1c:65:0f:
2b:eb:b6:3f:ac:1c:e9:cc:de:ae:15:19:1c:6c:09:
54:70:d2:b1:69:df:d2:33:b3:df:92:d8:eb:4a:36:
c1:29:af:cf:c7:a4:ed:83:97:d0:65:9c:e9:66:4a:
1d:c5:ae:a2:06:f9:4b:6c:57:25:b9:1f:5e:8d:4f:
c0:1c:a0:ae:6e:d5:27:57:2e:5e:c9:fd:c8:8e:bb:
4f:e5:95:eb:f7:1e:14:8a:fa:e2:35:90:d4:3a:e9:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B8:75:53:8C:1D:78:B0:6E:14:13:C6:66:05:CD:C3:0E:89:F6:C9
X509v3 Authority Key Identifier:
keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e0:2b:3a:85:52:fa:96:ea:12:17:de:cc:07:b4:68:91:5c:
ed:c4:f8:57:19:84:1d:15:a1:07:9d:59:a7:30:6b:9a:3a:5d:
cd:bd:c1:9a:6c:d8:28:f0:bb:d9:46:14:46:63:84:ac:5c:9e:
f4:12:fd:a5:15:52:90:75:f7:71:58:1d:62:10:ff:16:30:4f:
62:22:43:c9:ce:15:fa:08:28:d9:e9:7c:9b:85:10:ab:4a:f9:
b1:33:6f:ec:f2:b6:61:88:d1:4b:e2:fb:d6:01:66:a0:44:b5:
30:c8:7d:9a:ea:22:08:e5:81:7b:5b:40:2a:d8:80:00:ad:d4:
1f:eb:81:35:12:2a:9e:15:cd:e0:8c:d7:fe:c4:25:de:5a:3e:
ff:f1:55:d0:70:0a:89:9a:ff:c5:8c:ad:23:aa:55:cc:dc:0a:
87:fd:62:af:4c:92:37:c3:08:66:cf:05:98:13:68:37:1b:d4:
10:09:9d:ed:66:33:40:a7:ff:46:a1:a4:2c:c0:2e:52:09:00:
ba:6f:74:75:ad:56:bc:ee:c7:ea:4b:d0:88:8a:e4:7b:da:2f:
c2:df:94:e1:47:a6:c0:48:89:a2:44:01:f4:85:47:04:f1:20:
ad:86:80:ec:76:27:eb:89:6c:89:11:4b:04:97:55:4b:b7:96:
ea:fd:6d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:37 2025 by rpki-client