Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json)
Hash identifier: /YAoPJ8Pqr5IbqVuo3kzQuf5jYjf6D8t57NBfnM6VCE=
Subject key identifier: 46:08:DA:03:99:04:5B:9F:61:91:70:79:D4:DC:11:26:80:5A:14:EF
Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Certificate serial: 01964C34B5555DE4D79390FFBCDBA54BA9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 04:00:44 +0000
Manifest this update: Sat 19 Apr 2025 04:00:44 +0000
Manifest next update: Sun 20 Apr 2025 04:00:44 +0000
Files and hashes: 1: FA2rdoTSXTpaNGTDT0aW6V9L25M.roa (hash: kkZFYMyw4KlTxS4PayeQH7gSgukCRNxFXWHYmYwHPJM=)
2: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: LEj9Eojzc+8wKsFqIv6ChkMM/yJ4j/ay0d1CP6HGe04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:b5:55:5d:e4:d7:93:90:ff:bc:db:a5:4b:a9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Validity
Not Before: Apr 19 04:00:44 2025 GMT
Not After : Apr 20 04:00:44 2025 GMT
Subject: CN=4608da0399045b9f61917079d4dc1126805a14ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:ea:75:c9:4a:17:04:81:07:9a:84:2c:98:
11:0a:06:5e:64:b0:2d:fd:9b:b1:3a:44:37:8b:de:
6b:e7:40:1d:a8:b4:f1:d8:80:c7:31:2c:37:cf:c8:
51:d8:17:49:9a:1c:b4:fc:bb:42:67:8b:4a:5a:d2:
af:5b:c4:97:10:99:7d:08:a0:35:c0:32:f4:fd:1e:
bc:c4:68:ea:72:1c:d8:61:52:d7:ca:a4:16:19:b4:
54:fc:27:79:4f:f0:de:42:9b:c9:18:6b:61:cf:01:
ce:ba:3c:9b:04:5c:b3:5e:5d:8e:a1:f2:c0:99:64:
14:f3:bb:ad:7b:d2:d5:8a:db:0a:b5:21:93:0d:35:
6e:8c:fb:38:91:20:53:71:9b:45:3d:16:20:5a:d3:
89:f0:0a:a1:14:b3:46:29:e0:b9:89:85:e3:cf:64:
61:74:04:51:82:bf:2a:8b:2d:29:a5:7b:54:0a:79:
5a:fa:69:75:e4:cc:40:8e:a2:55:ad:13:ac:ad:8d:
60:c6:23:d4:da:d0:54:c4:d8:4d:32:c0:51:c0:f0:
f3:8f:d3:52:17:79:55:f4:f7:bd:4e:6f:4e:66:f9:
01:49:e9:7d:21:fb:1a:dc:61:b5:42:9a:26:f9:e9:
47:b3:70:f3:f4:02:33:85:a9:13:15:1a:58:ec:8a:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:08:DA:03:99:04:5B:9F:61:91:70:79:D4:DC:11:26:80:5A:14:EF
X509v3 Authority Key Identifier:
keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3e:d3:7e:e4:b5:c5:7f:cb:10:87:a3:37:08:80:ed:2b:c0:
e8:00:30:19:c9:d6:1c:b2:4c:e3:13:e5:c6:6f:b3:d5:ca:e8:
46:d3:f2:c9:5c:a2:94:cb:ed:11:6c:68:a5:9c:f1:2b:03:cc:
b5:5c:a8:28:47:94:a8:84:35:93:b6:86:4c:68:30:ee:8b:e2:
90:0b:f9:64:5e:03:ba:11:0a:2d:d5:69:6d:60:51:1b:45:85:
fa:3f:b6:82:6b:2e:2f:2f:12:1f:2b:e8:00:bd:59:d1:ea:79:
c1:dd:91:5f:e2:59:41:1a:96:63:41:cc:fb:1e:a2:29:13:67:
e2:0c:d4:d8:04:19:61:a3:fc:46:d5:88:ad:43:ec:b1:a5:93:
dc:49:75:d7:47:a7:d3:49:67:d4:58:52:ed:fa:7e:0c:90:87:
99:c4:0c:20:fe:77:2a:5f:c3:93:68:0c:e7:82:05:73:11:de:
1f:25:d5:42:a0:4e:04:bc:b8:bb:bc:04:fc:17:87:7b:ce:cd:
bd:3a:e8:b5:8c:cf:17:28:49:06:de:d7:76:3a:d4:76:45:24:
dd:62:ab:7f:5b:8c:4b:ae:9d:5d:f9:a2:ec:6a:0d:60:a4:8c:
38:9e:4b:46:bd:ca:21:6d:dc:19:c6:ae:95:93:01:e0:91:d0:
0b:34:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:38 2025 by rpki-client