Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
File: rJHyMKDi7to4EFIudKaYIAcT5iA.mft (raw, json)
Hash identifier: 0vCaVq7KaY+731SZntgBKvl6icFjTaEoqoj7mnZWf/w=
Subject key identifier: 80:94:25:B7:19:CF:78:B2:73:CA:90:82:D4:B3:5F:57:6F:92:BA:23
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial: 01965E038EDA40BBFEA07959EF86F24AC40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
Manifest number: 0E12
Signing time: Tue 22 Apr 2025 15:00:13 +0000
Manifest this update: Tue 22 Apr 2025 15:00:13 +0000
Manifest next update: Wed 23 Apr 2025 15:00:13 +0000
Files and hashes: 1: gP_zsXfkqrzssG9MD4Zd7ibjL_Y.roa (hash: I686Ip553hliGvYAsWQzyhxBsV7CF+b8RDLkN0tXgB4=)
2: rJHyMKDi7to4EFIudKaYIAcT5iA.crl (hash: 9E22ic9IF2wDP2Nh4vzQb0k8fteeKN7ZBVYmJz52I8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:03:8e:da:40:bb:fe:a0:79:59:ef:86:f2:4a:c4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
Validity
Not Before: Apr 22 15:00:13 2025 GMT
Not After : Apr 23 15:00:13 2025 GMT
Subject: CN=809425b719cf78b273ca9082d4b35f576f92ba23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:da:dc:d3:c5:c7:ac:2c:10:66:77:3a:54:
b6:72:70:0a:d0:ad:e0:88:a1:b0:62:0d:4a:2c:1b:
f1:e5:b6:69:5f:6f:a2:58:a1:f5:84:dc:f5:55:45:
e4:de:c1:68:f0:db:eb:54:11:6f:f4:36:b2:af:0c:
f4:fa:4e:1a:a2:fc:0b:d9:29:d3:54:64:5c:24:02:
92:de:ba:5f:64:50:d5:23:ab:6b:bf:91:c7:1f:36:
ef:27:e6:5d:61:6a:ae:90:bc:d2:65:ac:19:e7:40:
58:84:e9:4a:8f:71:b6:07:23:4d:e9:bd:55:36:0e:
bd:c8:68:50:0d:ef:f1:fc:c3:7e:7f:1d:31:d6:c4:
f7:82:da:9b:73:c7:c0:75:77:98:c2:c9:68:46:d3:
06:5a:d8:eb:53:cb:05:a3:7f:7f:c8:7f:1f:ca:48:
6d:bb:d0:ec:d2:df:ea:22:ea:a9:89:6f:cc:3d:d5:
28:fd:8c:19:2a:68:ac:f6:ca:b5:d7:ef:ed:ec:94:
75:5b:73:bf:80:1a:c1:52:b8:bf:d9:a8:0c:11:ba:
b2:0c:19:7e:36:37:fe:74:3c:71:9d:1f:23:d9:bd:
55:c2:7f:5f:d9:05:21:20:b1:fd:9a:01:50:c4:0f:
3a:89:dd:a6:94:85:55:ed:5d:1a:c1:60:00:79:e8:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:94:25:B7:19:CF:78:B2:73:CA:90:82:D4:B3:5F:57:6F:92:BA:23
X509v3 Authority Key Identifier:
keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:17:d4:e4:84:e7:67:62:c5:9e:f3:de:c4:f1:cd:46:1b:51:
70:7f:a5:b9:55:5a:7d:52:8c:7a:ee:82:1b:48:93:dc:6c:f9:
af:52:a9:e0:a6:5b:3f:68:e5:2c:7a:5b:8a:96:c3:d6:2c:6a:
da:20:ed:a3:06:a1:43:d8:be:3d:74:fb:8f:d7:5d:1b:6e:8f:
78:5e:03:a8:d5:a9:be:a4:d3:37:69:e8:60:33:9b:51:77:b3:
f3:a2:99:45:cf:58:d4:03:a8:c1:c0:a2:2c:de:27:22:a3:8f:
e6:31:aa:f8:92:db:10:ef:56:99:7e:e8:a3:24:5a:00:2e:a2:
42:02:97:52:cc:f5:ca:06:dc:67:f9:ba:ff:ca:ef:cd:a1:66:
01:29:c7:77:23:f4:c7:5c:01:75:80:74:0c:5b:4d:3e:30:6d:
5e:2c:96:04:d0:47:61:1e:87:e8:f6:fb:31:86:d4:3a:c8:87:
6e:a6:8b:0e:42:5a:4b:47:da:8b:52:68:cf:58:cc:41:65:dc:
d1:f0:b2:9f:1b:ed:43:9a:b2:2b:67:fa:18:22:9e:6b:da:fc:
9c:62:27:98:74:6d:60:05:e5:c4:0e:44:04:7f:d0:4d:0d:94:
8e:d7:a2:d7:f5:eb:48:87:fd:b7:34:9f:af:c6:d6:66:ae:16:
1b:52:31:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:54:19 2025 by rpki-client