Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier: 7pRlDga9IpkrZmKscVoDlEcGXznrpbx18CkO1gy+saU=
Subject key identifier: AD:E8:80:70:16:EF:C3:77:E4:C1:65:13:75:2B:02:FD:33:AC:18:91
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial: 01965A271DE31EC66B730A6A9E7B02FA82B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number: 02FF
Signing time: Mon 21 Apr 2025 21:00:35 +0000
Manifest this update: Mon 21 Apr 2025 21:00:35 +0000
Manifest next update: Tue 22 Apr 2025 21:00:35 +0000
Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: FTZfNiGObyd/zALgYNmU3h39JnvOndkbuWjIJbzxBLE=)
2: Q9WbsU5WLEBh2f38P2PGkPWP_HU.roa (hash: WTO6N136wAT9bdE+8AHFBftVkmxQHl/oBzZ0du4NvZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:1d:e3:1e:c6:6b:73:0a:6a:9e:7b:02:fa:82:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Validity
Not Before: Apr 21 21:00:35 2025 GMT
Not After : Apr 22 21:00:35 2025 GMT
Subject: CN=ade8807016efc377e4c16513752b02fd33ac1891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:86:bd:24:30:76:fe:88:61:2e:f4:43:d0:
2c:85:8f:73:fb:f4:93:37:31:c3:83:bc:56:5d:6b:
03:7f:de:68:3d:54:55:35:c8:3a:a9:10:57:e5:9e:
fa:f5:62:8d:10:5a:9f:15:62:9e:20:6a:81:dc:3a:
ff:bc:42:3c:87:c0:fd:71:c5:dc:8c:b1:24:37:6f:
ba:5c:4d:59:24:0d:81:0c:15:70:e0:2a:d1:27:e5:
78:03:81:76:e4:80:35:4d:81:66:47:d8:ff:27:53:
55:f0:d9:45:29:02:96:a5:aa:a0:ee:05:f7:b6:ba:
fa:01:58:8d:d4:29:d8:c0:40:92:ac:f0:6f:5c:63:
ca:f8:53:bc:d3:9e:6f:16:cf:9b:79:4d:c2:65:f7:
6d:ec:7c:c9:4b:8f:32:bd:aa:79:f3:e7:1c:24:d2:
91:fd:57:22:8c:28:ea:92:41:dd:1d:5b:14:c1:63:
5d:bc:8e:6c:fb:09:0d:5d:2c:2b:3f:f7:7b:7e:9f:
db:31:9f:7e:a1:83:2f:fd:97:19:85:cb:d6:42:73:
40:2e:c3:cd:47:da:1a:67:49:7d:7e:d3:46:f5:72:
1c:2f:37:c9:1e:37:f7:75:4f:81:b6:b2:59:34:83:
5a:be:32:2d:0b:db:76:3b:fb:d1:86:de:c6:e7:14:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E8:80:70:16:EF:C3:77:E4:C1:65:13:75:2B:02:FD:33:AC:18:91
X509v3 Authority Key Identifier:
keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:66:7b:40:7d:8d:00:53:8f:05:92:75:f2:66:e2:55:2d:ff:
84:c0:b3:e9:22:26:c5:dd:75:90:af:e6:19:c7:2f:89:69:8e:
58:7e:e6:fc:89:93:19:72:b0:ec:2d:ac:35:72:1a:6a:96:85:
71:3e:db:ea:51:5e:4b:b8:2c:98:0e:41:23:de:e8:c6:21:68:
a4:3f:1d:2c:9c:ab:9a:63:7c:31:0e:04:cc:a5:94:e9:c1:e5:
d1:c9:14:b9:a2:72:a3:e4:3b:ba:0b:63:7b:9c:aa:03:4a:88:
95:e8:da:88:84:5f:aa:41:39:57:b9:99:11:85:c3:ef:ab:5e:
8b:7c:0f:5c:5b:73:2b:b6:95:d2:71:96:54:08:a4:f0:5d:b7:
e3:52:5d:b7:11:e8:ea:aa:da:c1:40:88:12:fa:32:d9:0c:cb:
95:45:60:02:1d:04:50:4f:17:da:fa:7d:1c:ad:cb:70:68:28:
c9:60:cf:88:fc:fa:b2:53:ac:dc:8c:8e:71:fa:2d:29:b0:1b:
c2:ce:67:f0:77:44:c3:61:f9:b4:2f:0e:33:4a:fa:9a:b6:4b:
7b:21:4b:3d:9f:fc:f5:74:28:f0:54:31:ca:11:30:0d:d6:1b:
bf:5b:4e:ab:2d:9a:1f:30:1f:b8:ac:ce:7a:f0:79:e9:5a:fe:
b2:85:aa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:39:46 2025 by rpki-client