Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: OuvxR6pOXIdmobAGk5muiRxNvCLXFSGHD0Fsw0vY7Sg=
Subject key identifier: 1B:B4:08:7E:5E:9F:A0:BD:EA:1C:18:D2:33:26:03:D0:6B:96:69:7E
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019657942A4E4D5A0B0134A5AAE1185F1935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 120E
Signing time: Mon 21 Apr 2025 09:00:50 +0000
Manifest this update: Mon 21 Apr 2025 09:00:50 +0000
Manifest next update: Tue 22 Apr 2025 09:00:50 +0000
Files and hashes: 1: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (hash: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=)
2: hdN3TWiGF-v4lVfB-_MZbJp6BC0.roa (hash: FBzq8JkLasFx9OYifFuQNiKO30TthScuWNWKtgQWVSE=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: 0Y2U4ccL5omW0Xayvw1hvwGboSH8/4kE7QERtjNeLvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:2a:4e:4d:5a:0b:01:34:a5:aa:e1:18:5f:19:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Apr 21 09:00:50 2025 GMT
Not After : Apr 22 09:00:50 2025 GMT
Subject: CN=1bb4087e5e9fa0bdea1c18d2332603d06b96697e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:da:62:15:54:15:61:60:1a:6c:a7:98:85:
1c:64:22:16:18:d6:d5:5e:94:3b:cc:90:7c:b0:2f:
4f:e6:3f:d6:31:d5:2d:be:09:c8:3a:2e:86:94:5a:
32:d3:30:27:f6:65:3a:67:a2:c0:5d:7a:3a:41:ca:
9f:a2:1f:73:1d:2c:17:72:04:70:4c:e5:f0:e1:8f:
4d:b0:40:61:24:80:c9:71:aa:e1:c2:8f:02:0b:cc:
19:73:5e:04:0d:c2:b0:64:00:dd:8d:a8:2b:3e:8d:
a9:d6:ed:d6:15:0c:b0:b8:cc:98:bc:e0:1a:9f:60:
3d:22:79:77:07:e0:15:b0:91:be:b5:4d:bb:fd:4b:
e2:17:9f:e0:53:ac:4f:5c:5f:91:0b:54:8f:62:4f:
48:64:b3:9c:8b:16:7e:e4:ea:81:54:9a:77:b0:61:
fd:74:4a:0b:61:bf:e3:f5:4a:a2:51:53:9e:60:23:
c4:e3:5a:7a:de:da:1e:24:40:b0:0c:f1:59:c9:22:
19:28:2d:0f:78:05:f6:87:39:a2:b8:98:f7:6c:29:
23:d1:b8:ca:ca:b3:df:a2:20:28:ae:99:e3:14:60:
b0:3d:26:76:34:50:dd:16:b0:ee:9f:51:8f:c9:b1:
0c:ca:66:91:90:7a:db:6c:1d:99:1b:cd:45:04:ce:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B4:08:7E:5E:9F:A0:BD:EA:1C:18:D2:33:26:03:D0:6B:96:69:7E
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:16:69:ef:71:74:ad:43:e7:45:e4:de:d1:d6:ab:56:07:15:
d4:7e:a0:01:22:ea:99:5f:a3:49:c3:cc:d8:80:20:da:2b:78:
12:b1:fd:84:a8:05:f2:8f:e6:12:cd:f2:77:a6:89:0b:23:5e:
e2:43:49:ff:59:6a:77:8f:f9:f9:58:7d:5d:7a:4d:a8:f8:30:
f7:d8:3a:1a:7f:53:69:14:67:64:f5:92:81:4a:2b:6f:f7:5c:
f8:53:1b:78:92:7b:2b:b5:4f:f9:8a:42:36:c4:71:e7:b4:b5:
7d:7d:1b:21:26:13:18:3d:7a:02:71:5f:4e:d1:b0:c4:18:a4:
e6:0c:4c:c2:ca:dc:e3:92:20:42:30:71:f8:88:db:15:fd:6b:
f1:d6:d1:d9:de:1d:47:a4:08:53:7b:11:78:08:93:ff:f7:1a:
b1:94:54:06:1b:b8:d2:41:8b:74:b1:c3:a9:1b:1e:7b:b1:3f:
96:e9:01:4a:4a:48:61:bc:45:ec:20:53:0b:90:5b:61:6c:6c:
a0:cb:ce:a2:12:97:42:54:ae:d7:82:0d:55:51:e8:36:bb:98:
5e:98:32:92:49:a3:39:0e:39:61:7e:95:f9:97:9b:89:3c:5f:
42:1d:90:cf:ad:26:5f:c3:92:9d:c5:21:67:1d:48:ce:f4:d6:
b7:f5:95:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:26 2025 by rpki-client