Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
File: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft (raw, json)
Hash identifier: QV3xVEwbaB7KYGE9Eg/bKSpSqHOrAokD3uY/jAQsOkQ=
Subject key identifier: 4A:DD:7C:FF:C3:5A:54:C4:9D:F9:E9:73:9B:8A:24:E7:18:D6:EA:37
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 019659F0374BA7DABBE05DC5F50BFD28E8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
Manifest number: 1206
Signing time: Mon 21 Apr 2025 20:00:37 +0000
Manifest this update: Mon 21 Apr 2025 20:00:37 +0000
Manifest next update: Tue 22 Apr 2025 20:00:37 +0000
Files and hashes: 1: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl (hash: Degbp6+R+FUMpClJ29Sd9/AMlBf9mY9oMCrGmJhb0Nk=)
2: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (hash: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=)
3: P2hEWY-aar-dzWHdyJ4OOTkwmBc.roa (hash: +j7M+pZlJGOmKDr8VwAwOw7PlY+S6nVr/7YwvIROH/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:37:4b:a7:da:bb:e0:5d:c5:f5:0b:fd:28:e8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: Apr 21 20:00:37 2025 GMT
Not After : Apr 22 20:00:37 2025 GMT
Subject: CN=4add7cffc35a54c49df9e9739b8a24e718d6ea37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:8f:ae:43:ce:bb:58:46:b1:3b:f5:bb:14:
1d:fb:c6:9f:e6:8c:55:d7:f9:ba:ae:20:f6:27:a6:
98:48:28:22:18:ca:dd:53:75:50:37:1c:f7:cc:86:
82:d2:9c:40:ee:a3:08:0d:33:66:8e:8b:87:4b:da:
c4:a9:e5:ca:66:f5:2d:b9:18:ea:e5:6d:16:46:55:
e7:44:ed:7d:9e:73:96:31:08:9c:53:7d:fc:a5:36:
6a:eb:48:ba:60:75:6d:0f:5b:70:d3:86:0f:8b:c2:
5a:a9:57:c8:90:8b:c0:2d:1d:da:27:38:8d:a6:b6:
82:7d:c6:c9:20:cb:0d:d8:ca:92:3b:a6:21:ff:a7:
c9:5c:5a:1d:d8:7c:bb:da:46:85:ff:99:d8:bf:eb:
8d:22:8f:93:48:a8:9c:09:f1:7e:8e:1f:d1:c2:14:
39:f7:40:1b:d9:b4:57:8c:71:cf:5d:4c:96:f6:a8:
5e:36:2f:89:b7:0b:87:d0:bf:a9:f5:8a:c2:02:9d:
ca:cf:0e:71:32:96:ef:0c:94:a1:62:c5:91:8b:ad:
27:22:04:88:81:d4:27:24:4d:63:01:d9:b7:f4:04:
27:72:07:65:59:33:04:a8:8c:55:de:91:cd:b3:42:
94:d9:8a:d5:cf:14:b0:8c:30:fa:72:3d:45:4b:86:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DD:7C:FF:C3:5A:54:C4:9D:F9:E9:73:9B:8A:24:E7:18:D6:EA:37
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:eb:27:c7:af:c6:60:a9:53:24:a3:29:84:04:92:06:62:00:
5d:f1:6a:cf:4f:b2:fb:39:9e:7f:65:0c:3b:16:8b:72:5d:4a:
5f:dc:00:5e:39:fe:ba:9c:f2:f1:a7:6a:0d:0e:1b:96:95:21:
80:db:3b:2f:0e:25:50:cc:a3:e9:d1:a7:fc:9d:8d:9e:58:20:
fb:08:83:df:a9:da:97:2a:cc:55:20:6b:9d:1e:5b:b1:22:07:
92:80:21:0e:ac:24:3b:5d:e8:11:31:82:6f:08:32:b3:f9:2f:
9a:10:91:81:c3:9d:ec:c8:36:94:39:25:bc:6b:f3:3c:1f:96:
9f:35:27:0b:31:02:fb:0e:fe:24:08:18:39:34:34:ce:48:1f:
5f:15:3c:a6:75:3b:c1:95:28:f0:0d:01:7e:e5:f0:23:53:fe:
0a:74:fc:0c:56:e2:2e:97:83:27:ee:ff:4b:02:4f:ac:f9:58:
2b:5c:43:b9:da:c7:92:74:4a:1e:02:ca:32:df:2f:55:26:26:
11:8c:8e:d1:a3:09:e2:0a:69:3c:53:8e:95:e7:09:c5:89:78:
5f:7a:70:01:5a:45:7d:9c:78:4c:8e:1f:91:7a:9c:ba:a5:21:
90:c8:a9:50:09:6e:3e:06:e7:49:f9:ff:30:a6:37:8c:d6:73:
6d:e2:7a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:09:43 2025 by rpki-client