Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier: wKmgCw8SH41cFtv931S2jMgoYyK8lAN2M+3xrBeQZgg=
Subject key identifier: 14:26:F6:45:B6:B5:BE:D3:6B:21:9D:36:57:27:51:2B:3C:2B:15:F4
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 019655008D997600C1F642E1C6E57F739479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number: 121E
Signing time: Sun 20 Apr 2025 21:00:21 +0000
Manifest this update: Sun 20 Apr 2025 21:00:21 +0000
Manifest next update: Mon 21 Apr 2025 21:00:21 +0000
Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: n1UPQP3lu0KzCka63Q/XjTzitVIB4USJtzRk43g+5Qw=)
2: 7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa (hash: 9coWzyh+KYo6PjWXvZi4r37a7LcyA66ZeCRl9p/oIqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:8d:99:76:00:c1:f6:42:e1:c6:e5:7f:73:94:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: Apr 20 21:00:21 2025 GMT
Not After : Apr 21 21:00:21 2025 GMT
Subject: CN=1426f645b6b5bed36b219d365727512b3c2b15f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:91:8a:2d:e1:70:84:d7:36:dc:29:62:f0:
11:82:a0:c1:1c:66:0b:9a:84:2b:59:b1:d7:20:6e:
08:90:a1:d5:46:ff:b2:c5:16:68:4f:08:c2:47:49:
d6:13:1a:b6:e7:d5:15:50:5d:77:92:2a:ab:bb:36:
7e:dc:b2:69:96:f9:22:aa:99:fd:25:8f:b5:ed:38:
dd:42:98:d6:a7:15:03:41:3f:e3:6c:ff:e3:9a:b0:
fe:e6:47:a6:8e:85:89:bb:20:d3:e9:52:30:32:c2:
22:f7:6d:5a:52:ca:eb:30:a2:b0:6e:a5:08:15:77:
14:ef:23:c4:ab:9f:0b:90:5c:1d:d0:8d:21:bf:ad:
d5:93:b7:0a:23:ae:03:a5:e5:b6:ce:24:13:65:8d:
83:5a:b7:fe:04:3a:a8:f6:48:3a:6b:00:3d:7c:5f:
b9:00:73:9d:5e:ac:55:93:e7:27:53:b6:54:07:23:
11:36:1f:cb:1e:bc:05:4d:31:e6:d7:46:e2:ad:fb:
00:15:0e:cf:e3:9f:50:a6:e1:7f:de:08:6f:4c:eb:
b1:32:be:a8:ba:3a:cb:ff:5b:18:c1:a9:8d:fa:00:
b4:55:08:fa:21:fa:91:bc:92:9f:2f:ba:b8:16:72:
c6:8e:1c:91:23:ec:ec:0f:eb:ad:c1:c8:96:2d:2a:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:26:F6:45:B6:B5:BE:D3:6B:21:9D:36:57:27:51:2B:3C:2B:15:F4
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cd:5b:11:ff:7f:2e:d7:f2:77:35:60:67:66:5c:4f:9f:93:
f4:af:e8:90:7f:f7:54:43:01:f1:1c:e0:73:fd:fa:54:cd:5e:
50:75:2a:c1:e0:59:39:03:a3:5c:4b:16:e6:78:89:58:42:ae:
aa:2d:48:c9:eb:01:60:a4:28:83:c7:be:c6:0e:9f:5d:4e:a0:
11:51:14:09:c5:93:95:fb:16:84:db:1f:e8:1b:fe:56:c2:cb:
dc:0b:ee:f5:ad:9b:71:1b:2d:23:04:f7:e2:21:dd:31:22:1e:
37:51:f0:54:a7:48:16:7b:5e:a5:cc:11:60:dc:dd:fa:97:a7:
d9:63:2c:8b:91:dc:8c:d1:2c:c3:00:62:0d:68:eb:b3:5c:bd:
b1:b8:08:0e:a4:6a:38:ae:e5:88:dc:e4:81:78:9b:c0:3a:1a:
1b:c6:80:52:52:2a:50:95:5c:b3:5c:b8:5b:ab:d6:84:44:5c:
a7:5a:59:e5:45:99:35:3c:ec:6d:e2:88:97:80:e1:f7:1d:3d:
a0:cc:c3:88:15:24:b5:93:49:a1:33:f4:fd:da:64:d5:c1:4c:
3c:0c:59:4b:3c:a4:1f:90:66:d3:0e:6c:97:d3:e7:da:2f:c7:
59:eb:3d:6a:c8:36:3a:57:3d:79:b6:83:da:6e:db:a1:4c:b1:
35:dc:eb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:45:12 2025 by rpki-client