Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json)
Hash identifier: b9QpL/WZ2VHdu9b6f19wT8EbMajDitteo/K4GjPez5A=
Subject key identifier: EA:4C:16:5F:42:25:06:B3:5B:6A:1A:89:EB:7D:A7:88:03:4B:F0:72
Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37
Certificate serial: 01964CA2773DBC58ADCCCBE041A33412B7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
Manifest number: 01E2
Signing time: Sat 19 Apr 2025 06:00:37 +0000
Manifest this update: Sat 19 Apr 2025 06:00:37 +0000
Manifest next update: Sun 20 Apr 2025 06:00:37 +0000
Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: M9cexQ98USj3vyafLU9NJoQtelKohcltfv5OKtDIAgE=)
2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:77:3d:bc:58:ad:cc:cb:e0:41:a3:34:12:b7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37
Validity
Not Before: Apr 19 06:00:37 2025 GMT
Not After : Apr 20 06:00:37 2025 GMT
Subject: CN=ea4c165f422506b35b6a1a89eb7da788034bf072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:b8:8d:4b:50:05:53:be:60:03:cd:8e:b3:
5d:2e:10:06:63:5b:b3:f3:03:cc:4e:f6:72:93:ee:
2c:41:b8:54:f2:cf:ed:62:ee:ac:2c:c6:4b:8c:b4:
0c:89:2d:c6:95:4e:5f:e4:a1:2f:3a:5d:6f:d5:57:
6b:55:12:c1:59:96:82:83:ac:49:cf:14:fb:ce:55:
05:5e:eb:08:60:81:17:34:99:d7:d0:f9:58:0f:97:
29:1f:0d:95:b7:40:af:e0:61:59:47:28:5f:29:e1:
18:6f:85:8f:72:c6:48:9a:3a:aa:6d:40:7e:58:aa:
37:d1:d7:fd:fc:8c:0d:c9:bf:41:26:a4:d6:64:47:
ed:39:ba:d6:6a:aa:4f:12:14:64:0e:45:94:15:91:
76:4a:78:54:d0:65:d1:ac:5d:29:cf:21:8f:7f:20:
63:4a:6a:6e:ed:d9:60:5d:cc:f6:4a:bd:71:b3:94:
72:6d:58:f4:6a:09:99:5b:77:dd:f7:c7:f1:75:fc:
8d:f0:ef:1e:b2:70:e3:f1:1e:ed:8e:5e:76:fb:78:
2e:45:83:41:33:87:bd:8b:e9:a3:89:10:5d:80:a8:
63:2a:cc:24:77:74:c3:53:c2:a9:c9:7b:9f:61:c6:
d2:a0:4c:c2:25:54:b4:4e:07:69:7a:f1:00:d3:3b:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4C:16:5F:42:25:06:B3:5B:6A:1A:89:EB:7D:A7:88:03:4B:F0:72
X509v3 Authority Key Identifier:
keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:07:ca:e7:31:c2:35:89:e4:44:f3:52:0e:8f:88:23:78:20:
93:00:bb:04:35:60:08:4a:d8:c3:38:a6:7b:b3:d8:d7:d6:41:
04:6d:9f:17:55:a8:eb:df:e0:59:33:92:cb:d9:68:6c:77:01:
69:27:5f:8c:bb:47:6f:16:39:50:0d:12:00:89:e3:dc:72:06:
33:5b:cf:d8:8d:d6:34:03:5b:9c:7f:3f:3f:9d:86:21:e9:66:
ec:c2:ef:e0:cf:74:b7:de:c4:1d:ae:0e:c0:11:c2:e0:7a:de:
72:a4:6b:97:e3:29:68:e9:6a:46:80:0e:3a:46:d4:70:10:7c:
cd:57:0b:06:1f:e1:9a:4f:81:81:bc:55:35:dc:54:2f:51:c2:
12:5e:84:1f:fb:9a:8b:55:40:24:73:2d:f2:58:c1:94:61:d4:
e9:6e:de:74:43:a1:1f:32:19:6c:0c:0f:5d:21:08:62:80:2a:
50:e2:b5:76:a5:81:e8:2c:27:84:4e:c6:12:c1:25:9c:a5:99:
13:2c:e1:5e:84:02:ff:bb:70:93:36:03:ae:fa:7c:ad:d5:5d:
0b:8e:c8:54:60:6c:78:2c:3d:62:a3:12:51:de:67:68:8c:48:
fd:11:ad:6e:c2:a8:cc:d7:a3:56:eb:88:05:e6:79:74:58:0e:
31:da:fe:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:34 2025 by rpki-client