Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: 6MK/9O0GUMGnVuuYj6SLMxBFqGQMEeejzOEuGnJEeQQ=
Subject key identifier: F6:25:3E:EB:79:D6:59:B1:3D:37:C5:DB:AC:D4:C3:02:56:83:29:A4
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 01965500CE3FBDA518492C394AE04EE9E82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 0D97
Signing time: Sun 20 Apr 2025 21:00:38 +0000
Manifest this update: Sun 20 Apr 2025 21:00:38 +0000
Manifest next update: Mon 21 Apr 2025 21:00:38 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: Dp7k4oxhrFojqaXCZG/oBSztJ3Ib47lRkoVVLDWP9D8=)
2: fIHxOTR4AusDjkUMl4F2Dw2GHL4.roa (hash: Sb4ZUnFbCp/emt+K6hXULcd6ikLK+m62aHUuIK4higk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:ce:3f:bd:a5:18:49:2c:39:4a:e0:4e:e9:e8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Apr 20 21:00:38 2025 GMT
Not After : Apr 21 21:00:38 2025 GMT
Subject: CN=f6253eeb79d659b13d37c5dbacd4c302568329a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4a:7f:91:dd:7f:cc:2f:7f:12:f2:07:a8:e2:
6c:c4:90:5e:49:4c:19:ff:dd:be:dd:fb:b0:bd:22:
0b:54:c9:39:3d:86:aa:d4:82:9f:97:42:e4:b9:d7:
38:7b:d5:d2:4a:c7:e5:55:53:61:d6:c7:df:3c:70:
4d:59:68:f6:b1:03:ad:41:aa:6f:d1:a1:08:b2:61:
70:fb:40:f3:54:6c:5d:be:61:7a:7e:9d:88:ae:b6:
6d:f3:7c:fc:28:3d:c5:2e:20:01:9d:fb:b6:f6:2f:
c6:d3:38:c6:ee:5a:2f:e2:17:a9:63:5d:27:fb:83:
cf:62:38:06:06:b1:d0:73:b3:c5:91:69:91:09:ab:
fe:ff:35:24:d4:33:56:cb:50:3a:40:1c:93:c7:08:
f2:71:44:a9:46:07:ec:f8:fd:ac:b2:61:7b:eb:3c:
56:a8:7f:1c:a3:19:53:69:57:6e:dd:d3:49:ba:0c:
f3:e1:82:a3:b1:64:fb:15:2f:81:88:8a:33:c3:c4:
f9:28:b5:49:fe:17:aa:99:cf:17:00:8f:b5:e6:16:
9f:0e:f9:bf:2a:c9:0a:47:6e:b7:5d:9a:e1:98:bd:
fb:80:40:97:2b:49:bb:cf:88:63:78:53:ab:88:94:
d4:61:c6:15:e4:22:78:88:15:52:8e:ce:b1:e3:98:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:25:3E:EB:79:D6:59:B1:3D:37:C5:DB:AC:D4:C3:02:56:83:29:A4
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:09:14:8b:f6:78:19:32:d5:2f:d1:7a:f3:5e:7b:13:18:03:
0c:79:aa:b8:a2:4a:10:ba:09:f2:36:24:ff:de:05:e9:35:ba:
f9:9f:51:74:8b:fc:37:6a:85:df:ab:ba:82:76:cc:ca:37:c2:
7c:1d:29:76:ab:1d:fa:62:18:ff:2e:c9:7d:03:f7:a6:de:39:
60:ef:0c:17:16:50:25:d2:83:d2:31:fa:43:cc:c6:79:05:6f:
72:af:5d:b0:bd:00:ad:6c:92:68:ea:8d:81:7f:fe:1d:51:98:
15:63:b7:39:1f:7d:74:f6:f8:b4:8f:71:b0:91:79:de:35:8d:
27:a5:0c:49:ac:44:07:a6:3f:3a:93:0e:08:5e:c6:27:77:38:
76:15:da:16:97:de:3b:30:28:2a:5e:d2:9b:7d:ab:bc:e0:0f:
a4:e7:15:ec:1a:54:e1:fb:72:81:92:bc:7e:7e:3c:89:70:2e:
8a:9d:f5:cb:e2:30:56:07:fd:2a:ea:8f:78:9e:37:e3:36:17:
d3:3b:d8:64:a8:a0:0f:7d:bf:bb:5c:1d:30:ec:1e:ee:38:df:
f9:18:c2:ae:ed:aa:62:6c:cf:68:62:eb:54:96:fc:7b:26:de:
bf:ae:05:d4:96:90:0d:12:1b:da:9b:43:b8:9d:dc:8c:c0:e4:
6c:08:b8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:31 2025 by rpki-client