Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File: rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier: KvMkhLZFI6InxZVTHBl7Iq1nerFtgMldVhq+7J5o95A=
Subject key identifier: 6A:D8:88:BD:7E:20:9F:79:ED:C2:FD:9D:BB:19:60:94:9D:E7:08:58
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial: 019655DD09617936AC3C3F77479B106573CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number: 111C
Signing time: Mon 21 Apr 2025 01:01:11 +0000
Manifest this update: Mon 21 Apr 2025 01:01:11 +0000
Manifest next update: Tue 22 Apr 2025 01:01:11 +0000
Files and hashes: 1: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: iX+H+IcR/DhlMSxwM6Sfs6P4Xv+E37HeIBdNgQuBWPU=)
2: w5lUFfISkdR1rbXpw9EFPEpBgSE.roa (hash: aLxhVjIpLB1JtYTTNVzOUaAGXHTvMRlaiMUbkJdp7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:09:61:79:36:ac:3c:3f:77:47:9b:10:65:73:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Validity
Not Before: Apr 21 01:01:11 2025 GMT
Not After : Apr 22 01:01:11 2025 GMT
Subject: CN=6ad888bd7e209f79edc2fd9dbb1960949de70858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:0e:a9:f5:37:7c:55:51:b6:0c:b6:21:5a:
dd:6b:e6:3d:0b:fa:6f:43:d5:c6:88:c2:01:6f:48:
54:5c:71:eb:35:4b:28:37:f8:7f:b5:f0:5f:aa:9f:
f4:02:dd:76:f8:0b:c5:7b:fd:2d:d0:c7:84:06:2d:
6b:44:68:25:28:51:62:59:21:66:c8:8b:8f:0e:c6:
06:07:56:ad:b8:53:03:47:ed:b5:97:7a:5b:db:f3:
15:05:3c:46:b3:21:89:7e:74:6d:99:0d:46:6f:c1:
d0:96:9e:5f:27:3e:d8:66:f6:80:ea:a7:20:d9:45:
5d:96:0b:51:4e:3f:76:1a:40:12:f6:26:81:85:48:
5b:92:ac:55:36:a0:1f:15:0d:5a:dd:a1:d0:e5:12:
46:f7:46:30:90:fb:8d:c7:78:f6:42:44:9d:fd:f6:
03:f6:b2:80:09:a2:04:5c:78:82:2f:79:89:5e:6d:
b2:19:6d:83:61:c0:8f:33:0b:26:97:4a:6d:a4:5c:
d0:ca:4a:a2:2e:2e:03:a8:e4:45:28:0d:e3:71:5f:
eb:5d:5f:ed:53:86:ec:64:bb:0e:0f:c0:e5:12:92:
c0:c3:31:d5:b9:aa:c0:63:ea:32:c2:7d:73:e9:3a:
ee:45:b0:96:95:22:b1:6f:22:b7:1d:ff:f0:4e:ef:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D8:88:BD:7E:20:9F:79:ED:C2:FD:9D:BB:19:60:94:9D:E7:08:58
X509v3 Authority Key Identifier:
keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d5:fc:8d:94:dc:8c:d0:51:58:d8:27:58:29:7b:2e:89:c6:
22:02:e4:36:58:13:91:d1:d3:aa:c8:fd:db:10:97:68:ec:30:
ab:fe:cb:e7:f6:1a:88:9a:70:4c:42:e8:c8:c8:cd:10:62:2d:
37:e5:dc:b1:d7:5a:1e:cc:1b:16:35:70:10:8d:27:ac:f4:3b:
14:1b:28:27:3b:71:a6:4c:42:19:57:b3:0e:11:28:5e:fc:7d:
7d:a0:e4:90:a8:e3:25:cd:ea:21:8b:a3:db:c3:90:7d:00:85:
6b:b0:05:6a:7f:5a:43:82:8a:4e:e0:2e:b6:34:f6:f5:67:84:
5b:4c:d7:22:2e:55:19:d8:e1:db:0c:64:74:3e:2c:15:26:86:
e7:84:23:bb:ba:1f:86:7a:aa:04:28:9f:2e:a8:b3:69:78:ba:
04:aa:21:32:e3:24:95:46:d0:cd:78:8a:65:42:fc:73:69:e0:
15:8f:a4:21:3f:63:cf:1a:8d:0b:f5:d6:62:96:d2:ff:57:98:
64:3d:98:a3:62:fd:94:b1:6a:bc:51:8f:16:8b:9b:a6:97:1d:
b1:52:8c:98:b7:a2:bf:4e:11:bb:b0:41:69:74:78:6d:29:fd:
d1:47:42:f8:65:98:8c:97:63:0c:8a:ea:9d:91:22:1f:82:dc:
36:25:fe:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:36 2025 by rpki-client