Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier: HA1twzxuKkc/t7Tutv3eaAjeuxXSqqjnIx4YJpZg5HI=
Subject key identifier: E8:47:D2:A8:C3:4F:CB:7F:C1:9F:FA:78:49:F2:B8:F3:F9:F0:B9:41
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 01965EA8D1F75C408629956C854AA479E7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number: 078C
Signing time: Tue 22 Apr 2025 18:00:44 +0000
Manifest this update: Tue 22 Apr 2025 18:00:44 +0000
Manifest next update: Wed 23 Apr 2025 18:00:44 +0000
Files and hashes: 1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: bVP3oiOpSKvARlAt1JG6CV0BLNiE8EQu4xXHJU6LHyc=)
2: 5J9wJGQ0taRuLtnFbImmMo45f_4.roa (hash: q/JovfJlsI12rHgirdt0sAWA1cHPW79Cc1hgkirK79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:d1:f7:5c:40:86:29:95:6c:85:4a:a4:79:e7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: Apr 22 18:00:44 2025 GMT
Not After : Apr 23 18:00:44 2025 GMT
Subject: CN=e847d2a8c34fcb7fc19ffa7849f2b8f3f9f0b941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:1d:09:c0:51:68:83:7c:04:0f:ef:02:4b:
64:2d:07:c9:00:b4:56:51:7f:10:ec:98:9d:b3:c4:
fe:d8:ac:34:56:c1:79:a7:5f:75:1a:cb:c0:e2:35:
ee:a4:f7:c6:df:79:6a:82:31:15:28:bf:78:6a:b3:
51:66:35:8a:e2:9c:d7:fd:45:0f:4c:7e:a2:23:90:
93:dd:8a:07:81:4b:77:bf:3a:c5:1c:9a:6e:a8:bb:
63:1c:8d:1a:5f:6e:d4:34:10:a4:5b:ec:0c:ae:85:
d4:98:94:7f:64:d6:72:75:59:14:c8:cd:92:1b:8e:
25:ed:73:47:09:96:7b:73:6f:69:59:85:19:76:45:
88:db:14:61:3c:60:24:44:2d:44:76:9f:ca:dc:04:
94:1c:37:b9:fa:41:1f:55:64:82:ca:9e:1c:5f:6e:
7e:26:51:5d:a4:e0:a8:67:77:39:b0:54:d3:57:13:
c9:7f:04:7d:d5:0a:ea:25:68:2c:42:f4:65:66:96:
52:41:79:09:d5:b6:d2:c5:e9:a5:a6:83:43:d4:6d:
e6:bd:21:99:10:e5:bd:da:f5:c5:21:32:a4:13:7e:
00:f9:29:16:b8:cb:19:7f:87:6f:15:4b:57:3e:64:
66:23:c5:3d:05:c5:44:e1:34:68:38:08:8e:10:40:
a7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:47:D2:A8:C3:4F:CB:7F:C1:9F:FA:78:49:F2:B8:F3:F9:F0:B9:41
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3d:c4:78:d9:94:a8:42:07:60:69:d1:dc:ee:73:81:da:41:
78:08:36:64:4e:71:1e:56:17:d5:12:00:40:20:ff:fe:df:19:
9b:84:ad:05:3a:02:c2:b3:86:4e:94:01:7f:13:d2:a2:c7:9b:
82:59:ee:94:1a:eb:21:e2:96:28:bf:40:6f:7a:85:41:23:fa:
c2:96:fd:33:85:1c:2b:c6:93:cf:67:24:e8:9d:38:e1:10:66:
f5:df:9e:b8:4b:8a:36:a9:8c:c9:b3:42:2e:37:c7:9c:ba:5d:
36:4c:9f:6c:b0:07:c9:b5:8d:9f:8b:51:39:16:d8:9e:f8:25:
25:fb:02:0c:e4:54:66:62:ef:ef:44:ea:de:b1:1b:8e:c6:d2:
bf:22:57:1e:bd:52:91:b9:cd:9f:a4:39:59:1d:88:40:66:d7:
63:d7:8a:bd:2f:e2:d6:eb:54:07:2d:cc:d5:c7:17:c1:0b:64:
71:01:de:75:71:24:bd:0a:44:8e:c9:4d:78:8c:83:1a:b8:d4:
68:87:41:16:a0:ea:b9:8e:77:f6:2d:30:87:33:bc:6b:68:df:
26:c3:41:98:87:f0:e2:5d:0a:b6:5c:aa:b6:df:81:70:79:11:
c6:bf:17:be:b3:3f:14:5b:40:0d:2e:18:1a:df:a5:ad:b4:29:
fd:36:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:53:48 2025 by rpki-client