Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: beo+/9scGgkQJHLdkNCl5d67Tzebf65Pkuod/aAUHZc=
Subject key identifier: 99:C7:5C:C5:81:AD:A8:FA:C8:B6:86:2A:19:26:9B:29:75:FD:82:6C
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 01964D46EC12592376E098C64BBE7E9C6CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 0FEE
Signing time: Sat 19 Apr 2025 09:00:15 +0000
Manifest this update: Sat 19 Apr 2025 09:00:15 +0000
Manifest next update: Sun 20 Apr 2025 09:00:15 +0000
Files and hashes: 1: ExwmpmCoQJo2OxTGvS9tBUVoCTI.roa (hash: 5uKveASNNkoz3m6Z/IoI5wPaRI1/s/iR92XdJr3b/vs=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: HYf8zHiC/l/gF3d48o4GFE1PP7lhY3Bb2JCefRPOnjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:ec:12:59:23:76:e0:98:c6:4b:be:7e:9c:6c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Apr 19 09:00:15 2025 GMT
Not After : Apr 20 09:00:15 2025 GMT
Subject: CN=99c75cc581ada8fac8b6862a19269b2975fd826c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:dd:90:53:9b:a5:7b:6c:67:cd:98:45:d6:
48:8d:86:c5:a3:91:dd:ad:4b:30:21:67:b5:3b:12:
58:c5:e1:61:88:ef:58:cc:0f:12:a7:11:8b:eb:5e:
82:84:c7:30:82:1b:d6:e3:f2:e5:bb:66:cb:99:64:
34:43:4e:b6:d3:b0:7f:6d:e5:64:bc:b1:08:55:95:
ca:04:6b:f6:ec:6c:00:a9:87:7b:8e:42:12:0f:32:
73:4b:db:62:76:68:6f:29:58:2f:4e:56:2d:ce:f7:
ab:bf:23:57:50:ca:3e:74:92:a5:fa:b5:a5:89:37:
45:89:ff:67:7b:4f:cf:be:df:00:ab:9d:ca:c5:8f:
11:2b:99:01:23:a7:72:19:6b:a9:82:1e:62:d9:be:
4e:29:d8:b4:8a:9b:06:7e:37:5b:fd:49:00:a1:f0:
59:18:af:b1:33:da:be:04:10:f6:1b:81:1b:42:bd:
3f:8a:7e:9d:62:96:e0:c0:28:f7:b3:47:df:2d:ff:
d1:d7:cc:bb:46:c2:f2:a4:9a:90:35:52:ca:fd:34:
a2:e3:f7:04:a7:67:8f:04:3b:c0:f5:a7:5e:2e:21:
94:42:8a:a4:9e:a7:d9:a8:58:fd:be:c0:03:c3:22:
c3:f9:9d:6f:77:e0:d2:f3:bc:97:6d:ef:f0:6e:04:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:5C:C5:81:AD:A8:FA:C8:B6:86:2A:19:26:9B:29:75:FD:82:6C
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7f:57:56:f8:d5:ab:f0:bc:c7:e1:28:0c:4d:5b:f6:59:5c:
d5:b6:35:10:a9:87:45:79:be:4b:f5:7c:35:05:37:6c:99:99:
bb:ab:7f:4d:6b:e4:fe:1e:ad:9e:31:30:a9:00:4e:24:07:03:
72:14:b7:03:ef:92:23:1e:54:7b:a7:c8:3b:b6:b0:2d:2e:5b:
0c:26:b9:c9:99:47:c9:71:e9:34:48:0c:f7:49:4f:f8:dc:50:
10:51:8b:d4:7d:8f:cc:c6:7e:e2:9a:ac:d4:21:cd:3b:e7:93:
95:ee:ad:bb:7f:3b:03:ea:1c:8e:be:8e:b1:b2:f1:64:bf:44:
65:e8:61:7d:90:49:7d:59:bb:d8:85:75:78:cd:9c:ec:6a:b7:
c4:62:63:e5:35:00:ab:d3:d6:91:6f:17:b4:49:05:d6:f4:33:
38:6b:20:f0:6d:bd:5b:f9:64:0b:46:6a:42:5d:39:0f:3e:96:
3a:3d:9c:47:ec:29:01:fd:80:ef:a8:93:df:ef:8f:e6:33:9a:
33:5e:91:24:a7:0e:d0:92:d0:03:4d:fd:16:de:66:1c:96:78:
a6:26:d2:b4:e6:38:50:a8:44:84:43:de:ca:64:7f:85:ba:ee:
26:60:d7:6f:9c:ba:17:7e:ac:dd:49:fb:a4:5b:5a:50:84:84:
63:94:db:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:42 2025 by rpki-client