Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
File: jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft (raw, json)
Hash identifier: kfBNaFIn/vy1X0+zxwTZWnYCe0CgFpGrutesWsNiywI=
Subject key identifier: E7:B7:07:5F:4D:EB:8B:76:4F:B1:EF:9F:48:7B:21:84:03:6D:82:7F
Authority key identifier: 8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
Certificate issuer: /CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Certificate serial: 01964BFE21C27366032EEF1A145E55EBA0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
Manifest number: 0662
Signing time: Sat 19 Apr 2025 03:01:08 +0000
Manifest this update: Sat 19 Apr 2025 03:01:08 +0000
Manifest next update: Sun 20 Apr 2025 03:01:08 +0000
Files and hashes: 1: jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl (hash: s4TY8q6uyQhv5186LjUcz3g0S237r3CgMv8qzRqhB6I=)
2: sMrQzs33rrsyMFOFMFTjCINTzTQ.roa (hash: M0Ho0S0WzI5DOHL0C5sQ6HcQ5teNM3kvhCzMJa29/0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:21:c2:73:66:03:2e:ef:1a:14:5e:55:eb:a0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Validity
Not Before: Apr 19 03:01:08 2025 GMT
Not After : Apr 20 03:01:08 2025 GMT
Subject: CN=e7b7075f4deb8b764fb1ef9f487b2184036d827f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:1a:ac:d3:dc:29:fa:ce:8f:d0:94:81:84:
40:02:97:31:ab:84:fc:80:80:4c:3b:c8:4b:a8:56:
58:1d:43:12:27:b6:1f:a4:28:a5:f2:11:84:b6:f5:
b2:73:38:9f:c3:50:55:8a:00:b6:ff:3a:91:dc:70:
f1:5f:da:36:d7:45:8e:64:7e:95:75:30:14:66:7e:
de:34:af:fc:32:ae:29:ea:97:7c:72:1b:fb:aa:03:
eb:e2:f4:c6:29:88:36:c9:92:e7:f9:b9:38:7e:23:
7f:a1:b0:13:b5:2a:48:44:e0:57:64:30:96:4e:24:
14:76:78:7b:77:d0:a8:61:87:f3:53:43:bd:f4:0a:
ef:5e:43:37:f2:44:d9:4a:bc:4c:d1:91:b3:de:58:
e8:61:be:e6:d6:2d:78:e2:be:87:62:cb:36:1f:c9:
6c:10:c4:41:6a:e7:26:d3:19:c5:e6:5c:df:a4:44:
a3:1d:87:a1:d8:10:f6:30:aa:b4:52:02:09:23:37:
42:d6:58:f4:e3:95:04:dd:68:96:cd:21:d6:1c:c4:
af:f3:33:52:09:97:f8:2c:94:12:a3:4c:91:5a:f0:
f0:9c:9c:7e:5f:49:b6:46:45:e1:b6:6e:20:a8:c8:
c3:cf:ec:1b:76:63:12:9c:6c:d4:9b:9d:43:5f:80:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B7:07:5F:4D:EB:8B:76:4F:B1:EF:9F:48:7B:21:84:03:6D:82:7F
X509v3 Authority Key Identifier:
keyid:8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2e:b6:87:d9:4c:ac:8a:d9:78:c1:32:8d:fa:a6:00:d0:8e:
5e:8e:dc:5b:ed:75:50:1f:a9:8e:42:60:a2:6b:4c:b3:32:8d:
c9:c1:5a:1c:35:c8:68:92:74:78:03:e4:10:58:fb:6b:a2:50:
70:b4:03:92:ec:88:dc:28:42:2f:c0:2b:f8:5c:bc:98:26:38:
59:bb:bc:0b:9a:42:64:af:70:8f:fb:10:39:6b:35:70:ed:ec:
97:f5:93:50:71:d7:cd:98:6e:27:9a:fe:9b:11:f1:f8:0e:47:
49:93:04:f8:95:8e:c0:c7:6d:f2:2a:03:fe:40:c5:2b:b9:0d:
9e:57:b0:88:fc:ff:7c:2b:b3:8f:40:1c:04:68:4d:0d:f5:81:
e1:cf:8d:1e:cc:96:1a:0a:a3:3a:c1:e3:94:99:29:14:0b:43:
ad:45:3f:dc:c7:04:ec:02:ef:b4:30:46:10:90:52:72:cb:3e:
90:02:4e:12:be:c0:2f:b4:9a:f2:ce:b8:d8:ef:7e:da:2e:35:
09:c9:37:67:68:1a:90:7a:c3:c7:24:0a:c6:1b:39:84:2f:b3:
4f:f7:31:86:75:ee:3f:ba:9e:83:f8:8f:62:78:d6:52:40:80:
99:27:7c:58:8b:4b:37:75:67:9d:d4:90:77:50:38:75:cd:39:
e0:36:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:11:25 2025 by rpki-client