Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
File: jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json)
Hash identifier: ghxqxrrpGUfKOmBlBoOKhWVvDMCDVJmCOW9a1R57mp0=
Subject key identifier: 8A:E7:A0:8B:7B:25:28:33:8E:83:D8:AF:5D:AC:2B:54:F0:37:D9:EC
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial: 019655DD33ECE138B3FDBFE8AA077D8A3619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
Manifest number: 10A1
Signing time: Mon 21 Apr 2025 01:01:21 +0000
Manifest this update: Mon 21 Apr 2025 01:01:21 +0000
Manifest next update: Tue 22 Apr 2025 01:01:21 +0000
Files and hashes: 1: Gh9PpfuY5LxhoKf93mfL5cK3chM.roa (hash: h2BIVV97ReDZkfRDJTGtHCoQkarTn+cxIbkViPsb5Nw=)
2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: I7j47kT/uLL5NEZrA3Kls/1BU4whddwDSKBXnlNzOqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:33:ec:e1:38:b3:fd:bf:e8:aa:07:7d:8a:36:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Validity
Not Before: Apr 21 01:01:21 2025 GMT
Not After : Apr 22 01:01:21 2025 GMT
Subject: CN=8ae7a08b7b2528338e83d8af5dac2b54f037d9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:35:0d:55:bd:77:65:78:97:f9:f9:0a:5e:e6:
ba:a5:2c:10:46:48:91:d5:c9:24:b9:11:64:57:a5:
32:98:1b:ae:84:af:31:11:a5:4e:f9:fd:e6:f7:52:
d2:48:ec:bc:5a:09:e5:56:9a:af:6a:f6:14:5b:6e:
a8:e5:f8:19:34:a7:c6:2f:26:9d:c2:61:8f:24:d6:
6d:95:d7:4b:79:59:2b:ce:77:b9:48:97:65:03:bb:
b2:85:dc:e4:3b:3d:d3:97:d2:07:0f:f8:57:68:43:
b1:a9:aa:75:38:c1:dd:54:ec:a4:f2:ee:4d:07:bc:
e8:63:ec:4d:c2:a8:ee:1d:16:9b:1d:91:0e:83:6d:
1a:a4:50:35:3b:4b:c6:33:c4:68:0f:e0:48:4a:0a:
3a:3f:54:51:96:95:b8:f4:b5:9d:f0:75:da:23:eb:
d6:d9:e9:3a:7c:3f:66:41:19:aa:e1:83:43:6e:cb:
30:a4:1e:eb:45:fa:02:42:3c:20:73:30:9b:7b:7a:
c9:2d:17:eb:06:25:37:45:87:1d:74:65:a2:20:8f:
2a:01:34:e9:5a:42:35:47:06:57:8e:37:57:95:85:
57:16:51:28:b7:7d:ce:fc:f9:1c:b6:d5:85:9c:11:
a2:14:98:37:aa:2f:36:54:d3:41:7f:ef:b3:4d:6b:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E7:A0:8B:7B:25:28:33:8E:83:D8:AF:5D:AC:2B:54:F0:37:D9:EC
X509v3 Authority Key Identifier:
keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b1:bb:fa:9e:8c:0a:f2:e8:d2:6f:a4:37:a4:ec:00:9e:68:
e5:99:c5:2c:9e:e8:d2:54:83:0c:01:83:83:ce:d7:e6:e0:48:
fb:4d:14:f1:11:d7:09:94:7b:02:bb:e7:d6:95:8a:bf:9c:f8:
11:35:72:12:06:fe:67:7b:e2:76:3e:29:4d:36:76:9e:ba:22:
9c:98:38:90:30:ec:9f:b2:e4:15:6e:80:12:9f:55:c8:d9:2c:
23:57:f5:a4:73:c0:3a:9f:08:6f:55:84:03:cb:43:6e:51:6c:
a5:6f:1b:fd:90:b8:95:f2:80:66:cd:93:9e:44:7f:3e:77:f4:
23:e3:26:24:e3:73:92:c9:b1:2e:3f:4d:d1:70:e2:82:be:6b:
6d:71:c0:13:67:3a:1a:9f:18:b1:05:93:52:40:76:5b:38:b4:
08:d4:2f:24:71:da:ae:50:2a:18:d2:08:b2:2d:7a:93:24:a6:
f6:16:2e:50:0f:37:37:69:19:81:6d:65:e3:26:83:0c:70:58:
a7:8b:16:8e:cb:ac:cd:ac:6f:fc:b1:53:6d:9d:0b:e6:e6:5d:
f4:c7:f1:3a:5a:83:6d:b7:49:e4:f4:5e:d6:48:ea:96:89:ea:
35:5e:e6:ac:55:52:00:7a:89:9b:37:ad:48:c5:ac:9c:11:0a:
3b:7c:a1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:11 2025 by rpki-client