Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier: XCZM7KOdJsLcjC3HQoknomONkC2e384xJ4LRNBYOi3A=
Subject key identifier: 3D:3C:A6:32:21:74:5D:89:E0:A8:63:58:E4:60:6B:B6:5A:26:AF:FE
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 01960AC35780A234B30973CAB41486E39BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number: 1358
Signing time: Sun 06 Apr 2025 11:01:36 +0000
Manifest this update: Sun 06 Apr 2025 11:01:36 +0000
Manifest next update: Mon 07 Apr 2025 11:01:36 +0000
Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: 65RqD+2MgG3cXY17Ew24erAv9Zrh/Q1WlbtCVu8c0GY=)
2: D7sSJq2EzuylXPTSVOWPxBm3Ho8.roa (hash: gmpCwmfjITdv8gtFNL4Zn9iouUW+u1PcPnCsYBgoNzM=)
3: efe5amh4jlMydhivq3OF5qbDCpI.roa (hash: 6iw2gnDcZP6ZZJX73WBgPOkeEQEpMVtjxP8058iyjOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:c3:57:80:a2:34:b3:09:73:ca:b4:14:86:e3:9b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: Apr 6 11:01:36 2025 GMT
Not After : Apr 7 11:01:36 2025 GMT
Subject: CN=3d3ca63221745d89e0a86358e4606bb65a26affe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:52:e0:51:ab:96:5e:90:7c:21:99:80:d0:a6:
34:1c:6e:68:b2:ee:b6:54:34:3b:d2:ce:50:86:66:
09:20:16:af:b2:5f:6c:8a:5a:c0:9d:4d:44:52:4e:
86:ec:33:c6:8a:12:a5:91:8c:9e:31:be:94:29:c8:
ce:92:b5:38:d4:97:17:62:e9:0b:d4:33:38:01:f0:
66:86:c0:19:62:62:05:50:45:3c:2d:4b:f7:57:66:
de:33:2e:02:01:ee:8c:49:7e:d9:fe:7f:04:ee:2a:
50:4c:a1:a0:8c:6b:71:7b:28:08:75:a6:89:dd:de:
86:60:69:f2:0d:77:79:c6:7f:e4:91:2c:d9:a7:cc:
fe:7a:98:8d:3e:1d:e6:d5:e7:4a:97:8a:8c:8d:db:
e1:8d:2b:be:e9:bd:fb:5e:de:b5:b2:c4:53:78:70:
16:2d:43:c0:1c:4c:ec:95:d2:30:f3:fb:82:9d:62:
e2:18:b4:75:34:85:85:a5:f3:ed:49:fa:e0:67:65:
65:dd:7e:ac:18:39:a7:4b:8a:f9:1f:99:60:8e:6e:
72:a8:10:76:e3:09:1f:0c:d1:6d:6b:76:cb:16:53:
13:50:b5:8f:5f:91:5a:a6:da:16:3c:06:0e:5d:73:
b5:5e:e6:8e:5f:56:4f:7c:d3:48:d9:52:68:c7:45:
f9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3C:A6:32:21:74:5D:89:E0:A8:63:58:E4:60:6B:B6:5A:26:AF:FE
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b4:1e:51:d0:67:3a:2a:2b:db:17:ff:cf:2e:9c:12:e2:d1:
04:aa:39:46:85:9d:a8:03:c9:48:16:87:9b:a6:95:0c:32:7d:
eb:b5:a3:b9:9f:2d:60:ef:48:69:74:cb:f1:9d:59:04:ad:57:
7e:09:18:d2:06:06:df:42:60:76:22:14:2d:ba:4f:06:89:cd:
47:da:7c:0e:1c:61:e7:51:cf:85:5b:74:b1:9a:5c:36:a1:01:
c7:93:57:6b:f8:63:f1:55:53:b4:83:fd:cb:c6:23:f7:ab:ae:
bd:bc:85:19:9a:c2:8d:b0:61:d4:19:df:81:be:47:44:77:7c:
7d:0a:dc:ea:43:25:a4:1b:be:bc:18:c0:c0:a2:b8:e0:3a:7c:
48:dd:e2:57:af:ea:9f:2b:17:2b:1c:3c:25:f6:e8:cd:c3:bc:
8e:e8:61:0a:11:51:90:8b:22:bc:47:12:c6:0d:d0:e9:e5:f2:
c7:99:e2:7e:8a:f4:13:64:39:17:ac:c9:18:da:37:93:17:84:
81:24:6c:a8:34:b7:4b:21:43:6f:5b:e1:9e:f4:1f:3d:cd:89:
04:13:9e:d1:c4:f2:c3:ea:42:ac:de:0f:ef:fd:e7:d5:e4:ec:
9c:37:b4:dc:d5:29:81:c2:fd:98:ed:12:76:a3:30:ea:64:0b:
16:b4:67:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:41 2025 by rpki-client