Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
File: jOy2jIDW2NFkiSIw-dEfJVG-04o.mft (raw, json)
Hash identifier: niM70lg8EZbrn4djjgDVfBWoSAvQfN5zSC4fBBNXGx8=
Subject key identifier: F8:F9:D7:25:AA:74:9F:2B:C9:98:8F:C9:39:D8:C3:A6:F7:9B:39:62
Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
Certificate issuer: /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Certificate serial: 019650B6A074259452B8DB7C18ADE987C667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
Manifest number: 0228
Signing time: Sun 20 Apr 2025 01:01:07 +0000
Manifest this update: Sun 20 Apr 2025 01:01:07 +0000
Manifest next update: Mon 21 Apr 2025 01:01:07 +0000
Files and hashes: 1: A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa (hash: YVpgdnu79jTGnOSIhM9WXwxc/TAyiy91T+UdGFojKfA=)
2: jOy2jIDW2NFkiSIw-dEfJVG-04o.crl (hash: sQh0QxUDhHq2qkJqNXdPm9aib04qn/9GVRPfe6fw6bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:a0:74:25:94:52:b8:db:7c:18:ad:e9:87:c6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Validity
Not Before: Apr 20 01:01:07 2025 GMT
Not After : Apr 21 01:01:07 2025 GMT
Subject: CN=f8f9d725aa749f2bc9988fc939d8c3a6f79b3962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:30:1a:a7:9c:51:54:b2:42:ff:e9:45:90:
29:a2:fa:d8:6a:45:69:79:cb:b3:bd:5d:95:c4:a4:
f7:e8:84:52:a2:b0:40:57:9f:49:0b:d8:88:51:70:
8b:ac:28:c4:c4:c1:39:07:22:a4:08:7c:41:ce:f1:
67:eb:55:5b:63:a4:7c:e7:a4:99:99:78:f1:7a:fe:
0a:43:af:12:7c:2a:9f:e3:65:79:63:e7:49:6c:29:
61:58:d4:35:e1:97:f6:68:80:a7:60:c6:87:ed:e8:
f0:8b:f3:bb:85:62:7b:85:18:02:05:8a:ea:21:9f:
64:cb:d6:81:85:c9:de:82:76:44:13:0f:23:cb:19:
21:46:84:cd:f1:62:1f:b5:eb:2e:d6:00:2c:2e:f2:
5a:07:7f:c5:d2:68:91:db:88:11:1d:01:03:f8:cd:
d4:89:11:3c:f7:82:9c:b5:44:d6:b0:1b:3d:9a:5d:
d3:df:15:6e:b2:56:8c:0e:2a:4e:fe:f8:58:b7:8e:
e7:a1:a1:af:31:54:3a:7a:b1:76:2e:eb:a5:d0:37:
9c:6f:28:94:ee:e7:61:cc:ff:b4:e8:e5:a6:6e:64:
da:ea:99:06:65:db:20:f4:3b:b6:89:4e:cb:29:18:
bf:9d:96:a8:98:2a:cf:5b:e7:65:bc:53:3e:d0:cc:
95:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F9:D7:25:AA:74:9F:2B:C9:98:8F:C9:39:D8:C3:A6:F7:9B:39:62
X509v3 Authority Key Identifier:
keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ea:a3:e1:14:54:0a:54:c9:26:75:8e:2b:bf:fc:f2:ad:7b:
b5:0d:6e:b0:19:70:3b:81:11:a9:34:5b:4e:1f:82:92:ac:63:
8e:fb:12:2b:89:18:d1:fc:4a:76:70:67:a0:88:fe:8f:6b:55:
45:76:95:9b:7f:31:24:df:0f:d2:86:97:72:ed:2e:6e:f5:9f:
21:fc:a0:97:a6:67:28:80:63:4f:97:45:e0:5e:93:61:32:ca:
a4:6c:18:28:ed:91:3a:1c:50:eb:8f:5f:4c:b3:30:c9:9d:b5:
45:bf:4c:97:9f:24:fe:ea:12:69:c9:52:e6:fd:bd:d2:05:3f:
e0:00:9b:a9:24:65:ec:9e:03:65:d0:ff:b4:05:04:c5:71:3f:
87:34:72:65:eb:6b:97:4a:45:46:9e:b6:15:10:f8:ae:a4:c0:
60:08:c2:99:5c:5c:24:87:f4:4c:90:ef:2e:be:8d:5a:e9:3f:
0f:fc:3a:bf:77:4f:d4:f5:41:0e:b3:87:d2:9a:7c:0f:8e:0d:
fd:08:21:b6:f7:a3:4e:55:be:d1:1b:3e:d7:ae:87:1c:f0:4b:
0d:22:61:21:0e:0f:0e:57:38:b5:a4:d4:5a:f6:e3:21:ad:00:
e5:d7:ef:1d:50:61:fc:71:9f:5d:41:4b:2d:1b:01:de:b6:da:
19:61:9e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:07 2025 by rpki-client