Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: ggybKKL38F+3bIi4ESXp2TT8ZDfqqomUFzl2T2ZVeNo=
Subject key identifier: B5:FB:A0:5A:0E:9A:21:31:7B:FF:47:93:1A:40:FA:63:FD:05:56:D6
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 01963A2EA772CB5BA83ECF4165C4DAE5B10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 14EF
Signing time: Tue 15 Apr 2025 16:00:58 +0000
Manifest this update: Tue 15 Apr 2025 16:00:58 +0000
Manifest next update: Wed 16 Apr 2025 16:00:58 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: K+LDdYPtQyINWDM5SdR2mw9sYc1+cRXiSwGJ65L3SVE=)
2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:2e:a7:72:cb:5b:a8:3e:cf:41:65:c4:da:e5:b1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Apr 15 16:00:58 2025 GMT
Not After : Apr 16 16:00:58 2025 GMT
Subject: CN=b5fba05a0e9a21317bff47931a40fa63fd0556d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:52:d5:a8:a5:4b:3e:fd:79:2b:90:da:f8:
fd:52:b5:1c:e6:7c:bd:d8:d9:3b:3c:8c:8a:20:ca:
00:c2:e1:94:e2:eb:8c:ff:2f:a5:4a:1c:59:e2:f0:
c0:a4:85:5b:16:ea:d3:db:82:12:76:48:94:ca:ad:
ff:70:81:d5:50:c8:d9:3d:cd:f6:9b:2a:f7:d4:fc:
c8:d9:55:4d:d9:9e:f3:e6:b4:cb:e4:75:d2:0a:0d:
06:5c:b3:d6:16:e6:bd:ae:9c:71:99:7e:a5:74:e0:
1e:c8:d4:9a:14:a6:02:35:dc:dd:26:bb:e4:85:17:
3a:62:99:b3:c3:2e:ca:ed:a2:65:48:fb:7e:4a:51:
d9:30:7d:7b:27:26:69:42:1b:1d:2d:b3:15:9b:93:
0e:8a:fa:83:9a:05:a4:61:9d:92:06:ae:59:da:e9:
d7:f7:99:52:47:f9:2c:3c:2d:05:2f:e8:08:86:3a:
b1:02:a5:19:f8:de:53:42:a1:15:16:65:f8:bd:3b:
21:0a:31:8e:07:e1:70:a9:81:56:17:ef:6a:29:63:
51:37:46:78:ec:fd:4c:bd:4a:93:26:1d:40:a6:48:
79:fa:c9:39:d4:72:71:73:40:a1:62:04:07:88:56:
c5:3f:a9:41:ee:6c:a0:1a:c9:af:32:e2:43:57:73:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FB:A0:5A:0E:9A:21:31:7B:FF:47:93:1A:40:FA:63:FD:05:56:D6
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1f:59:23:4c:a7:d8:6f:fc:c6:9b:3f:e9:95:41:67:e2:c4:
ba:40:dc:57:71:b2:9d:81:6d:34:9a:cb:ca:81:77:9b:e7:fc:
80:86:8f:c6:49:dc:0d:a2:2a:31:9a:7c:3a:d9:93:ed:e5:b4:
8e:99:82:ab:bd:7c:12:ba:c9:42:e5:14:e7:d8:e1:f8:08:28:
ab:02:52:e8:51:e0:0e:5b:1d:6c:d6:ed:50:c0:08:ca:e4:4c:
78:34:04:d3:c4:5b:47:28:d7:f3:8d:d0:9f:2f:e9:db:14:b6:
bb:fd:51:e4:de:cc:6e:32:d9:07:b0:00:cb:1e:94:47:a6:b2:
39:61:f0:ce:28:b6:35:1e:e8:a5:6d:f2:cd:69:e2:93:95:c5:
31:b2:28:fb:08:59:ec:cb:5d:1d:43:d1:21:06:60:ee:9b:02:
3e:09:63:75:1b:e3:a9:25:0f:91:5a:3f:25:18:68:f2:2b:00:
69:34:e4:5e:e0:ab:44:ba:ab:3d:e7:df:2c:4f:bf:c8:f8:1d:
10:c4:51:0f:e5:14:1b:69:05:c5:63:68:16:7d:55:16:b6:55:
ef:b4:0a:3e:90:1e:62:85:fb:58:1f:b4:3b:c8:40:d5:28:24:
3b:0d:18:a3:34:09:01:32:da:e4:80:01:6d:04:31:58:6c:10:
b7:40:d3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:33 2025 by rpki-client