Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
File: J8XzZBPnr0coE_46cU4uzaoh8ug.mft (raw, json)
Hash identifier: 8OxeDt/os4x0E8wKGwoArP5cEK5FKpNiTUy5Ay1KEsU=
Subject key identifier: 25:6F:FE:D3:0F:BF:90:8C:0C:A2:C2:5F:8D:A9:F3:BF:DE:F0:20:3B
Authority key identifier: 27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
Certificate issuer: /CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Certificate serial: 01958B4D5B4BA454FCA98F652CFBDAB73229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
Manifest number: 051C
Signing time: Wed 12 Mar 2025 17:00:57 +0000
Manifest this update: Wed 12 Mar 2025 17:00:57 +0000
Manifest next update: Thu 13 Mar 2025 17:00:57 +0000
Files and hashes: 1: EOZUjXctaYMkRcyyMQLguIWxilg.roa (hash: jYlCwqtOgmrWCQocWJbTWD5UljGXFXvAjEpukVvKrrM=)
2: J8XzZBPnr0coE_46cU4uzaoh8ug.crl (hash: LMOttYZbo6D1sqrOAu2U3rWco+FwatQz5+2WkF9st5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:5b:4b:a4:54:fc:a9:8f:65:2c:fb:da:b7:32:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Validity
Not Before: Mar 12 17:00:57 2025 GMT
Not After : Mar 13 17:00:57 2025 GMT
Subject: CN=256ffed30fbf908c0ca2c25f8da9f3bfdef0203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:7a:67:3b:0f:36:96:d8:ac:b5:a9:3d:00:
6c:0e:8e:6c:ff:94:1f:b0:96:b7:40:12:59:fc:83:
60:97:d7:d5:a3:ec:82:cc:ac:1b:0f:fe:4a:6d:09:
cd:7e:53:bc:86:8f:28:fd:b6:33:77:23:1a:c9:73:
98:ce:7e:1e:4d:8d:9f:70:56:38:65:85:b7:f5:5f:
67:96:49:10:90:3e:f4:b4:8f:b2:df:62:ad:70:18:
6e:49:b8:25:f6:ed:3c:ab:f2:9a:15:4a:df:8f:df:
4b:1a:7f:64:80:78:5f:f2:c0:d8:72:65:8c:c9:b9:
79:a3:b3:04:88:43:f3:8f:e0:41:99:19:db:73:07:
af:03:4d:56:16:9c:ab:4d:65:2a:f1:fc:60:86:45:
ba:cc:e0:bd:b8:63:7a:eb:7e:c3:cd:08:7e:82:9e:
5f:b8:80:a1:12:35:e2:ff:d5:f8:43:6e:1c:77:a8:
20:b9:e3:7e:00:89:5f:1e:cd:fa:f0:fa:37:81:4d:
d0:73:65:16:9c:97:f9:be:af:0d:5a:a1:1c:8c:1d:
06:f1:94:59:c1:0e:97:e2:35:e2:5c:de:74:a8:f8:
86:7d:ea:ad:f4:1c:9e:eb:c9:9a:16:b8:76:68:04:
30:75:89:1a:c4:2f:e3:62:56:e6:43:5d:c5:01:59:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:FE:D3:0F:BF:90:8C:0C:A2:C2:5F:8D:A9:F3:BF:DE:F0:20:3B
X509v3 Authority Key Identifier:
keyid:27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6f:92:d6:83:81:b9:16:55:bc:a7:e0:63:88:e8:f5:73:6b:
8d:ac:45:f0:6a:f7:8f:7b:b0:02:d9:a0:36:c8:50:71:63:3a:
1a:6f:03:1c:7e:d2:a5:a7:01:90:16:4e:a5:59:64:bb:80:0d:
68:69:54:75:78:c3:86:fd:3c:ff:f9:c9:df:c7:d1:68:bc:86:
88:9d:02:64:df:d2:49:13:ac:12:4a:5f:01:45:2d:31:15:bc:
d7:5e:b6:6d:f8:2a:17:79:b9:b7:cc:a6:44:af:35:ed:c9:cd:
b4:b1:f1:fc:6e:31:f2:3b:17:18:57:8d:f3:c7:f3:70:71:5c:
b3:80:c0:18:f1:a8:5f:8d:95:a8:49:af:78:7e:de:64:4a:72:
90:40:86:52:03:a5:d6:5a:07:10:98:1a:44:1b:2a:e8:ba:00:
77:cf:68:15:c9:bf:c3:3c:af:f5:33:42:61:e2:c1:35:5f:54:
ea:fc:c6:47:00:82:6a:db:c3:84:3f:89:83:0a:ee:d7:78:1a:
22:ae:27:3d:3f:64:eb:e9:1f:0b:21:a5:e7:ea:83:79:6a:16:
5d:1a:61:b8:59:0e:ac:91:c3:ed:47:27:7d:5c:46:51:95:ae:
77:f0:22:e4:7b:cf:38:a2:63:06:3b:9f:3c:34:68:50:1f:15:
3b:dd:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:54 2025 by rpki-client