Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: 3y3Qd0UeosV3WFDBUjPqLT6I265+hJfSN6p7fvgthLk=
Subject key identifier: 6B:13:11:9B:0E:75:E2:A5:EF:CB:6F:91:37:ED:AD:A3:28:13:9A:5E
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 0196564A45F89DE1C67C47025FDF39506EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 0833
Signing time: Mon 21 Apr 2025 03:00:30 +0000
Manifest this update: Mon 21 Apr 2025 03:00:30 +0000
Manifest next update: Tue 22 Apr 2025 03:00:30 +0000
Files and hashes: 1: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: Geb6PnX0dX9q7VDBlLSvIrEUbYPChzEgyiQPYxOzW9Q=)
2: sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa (hash: R0iOrEjpTafz2w87NNGxT/0GFxwmG8GgeDCdte91gUA=)
3: uIQg-k4QoyqXWfTy_MZ6BVQABQM.roa (hash: Cx2jyvv/VKruIg91hf3AtutnP6nMOk9qU6tmjgX9EqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:45:f8:9d:e1:c6:7c:47:02:5f:df:39:50:6e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Apr 21 03:00:30 2025 GMT
Not After : Apr 22 03:00:30 2025 GMT
Subject: CN=6b13119b0e75e2a5efcb6f9137edada328139a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:af:62:6c:1e:4b:74:66:04:1a:47:c2:d1:
25:86:49:56:33:df:0e:99:af:57:ac:c1:1e:ec:c8:
40:52:c9:bf:5c:31:b0:90:50:a8:4b:df:d3:71:07:
5f:5b:94:97:ff:1e:16:b4:0d:47:97:7c:26:1b:82:
61:a8:0b:5e:2c:2e:06:54:c6:2a:b8:72:ca:8f:8f:
d5:e6:e4:77:b4:66:cf:11:56:92:08:e2:c7:2f:7f:
8b:b2:6d:14:f1:49:2a:42:85:17:01:bf:a1:2e:80:
20:13:9c:ef:25:e5:cc:e1:6a:56:65:06:27:07:95:
4e:2a:d1:f1:06:24:7d:78:44:46:6b:5e:57:c7:1f:
6e:91:fc:e1:5c:d2:0a:99:8c:0d:a2:57:12:e3:f9:
57:e2:a5:5a:de:9b:63:8b:c8:98:f0:8f:f3:7a:e8:
88:46:ce:b8:38:02:b4:1a:cb:e8:e0:c2:d7:58:93:
4a:cd:70:2f:64:4a:b9:e5:d0:6a:92:44:6b:a7:6a:
5e:ab:ff:3c:7f:79:d9:13:d3:b7:b6:1e:1c:a6:4c:
46:24:4d:68:3d:7b:d9:48:e1:00:03:d7:a2:36:01:
6c:9a:6d:cf:78:f8:43:13:c9:b3:9f:45:0d:8f:95:
10:1d:b6:40:97:c5:18:3f:0e:58:b3:63:22:e6:d5:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:11:9B:0E:75:E2:A5:EF:CB:6F:91:37:ED:AD:A3:28:13:9A:5E
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5f:21:f8:e5:f6:a6:e6:b5:9c:94:f7:1e:86:95:e6:d7:e9:
33:7d:35:b9:f1:30:cb:78:eb:99:bf:2f:6f:b8:a5:74:33:1e:
ad:89:71:78:dc:ce:f0:e6:7f:37:eb:0f:b9:de:68:f4:2a:65:
24:4a:cf:5e:82:8f:70:49:e2:2f:c6:eb:38:5e:e4:8f:84:c5:
13:fb:1e:e8:59:a2:e7:e6:60:89:0a:bc:fc:3e:04:7a:e5:5f:
b1:7f:95:68:ab:0f:6e:47:c9:07:ad:eb:52:1b:4d:57:d2:a5:
57:df:24:9e:ac:db:82:41:14:2c:16:f1:8a:7e:8b:ba:d2:67:
88:a6:4d:d1:fa:0b:b5:da:16:2a:c5:c0:da:4d:3a:12:7b:0b:
bb:f5:8d:50:49:e5:4a:84:7c:2f:96:a6:f7:19:70:ac:80:df:
39:63:65:29:6e:93:3f:dd:8a:81:35:86:2f:b2:96:9b:7d:e8:
21:c6:ea:25:12:e9:6a:ce:f2:cf:66:c3:eb:e6:64:12:8d:06:
68:62:cb:02:7a:36:58:3a:d3:80:af:ed:b1:fe:7f:47:82:8e:
e4:e5:59:2a:12:af:b8:00:6a:4f:01:e5:a9:80:73:08:72:be:
58:4d:21:08:ff:cb:99:67:19:d7:ac:e8:bd:0a:4a:d7:a8:c5:
74:df:80:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:35 2025 by rpki-client