Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
File: jNFQ_x-81CqT603fQ8pxx748cog.mft (raw, json)
Hash identifier: XrwxjmR6H5C1LBji7g2mVhcc5PiJCh2zBCpuZ9opt5Q=
Subject key identifier: F7:CD:1A:72:FD:A0:21:7A:6C:EB:63:DB:74:2A:E1:03:77:A4:99:AF
Authority key identifier: 8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88
Certificate issuer: /CN=8cd150ff1fbcd42a93eb4ddf43ca71c7be3c7288
Certificate serial: 01958BF25B03980B200B3D9B66894D0F3B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
Manifest number: 049F
Signing time: Wed 12 Mar 2025 20:01:10 +0000
Manifest this update: Wed 12 Mar 2025 20:01:10 +0000
Manifest next update: Thu 13 Mar 2025 20:01:10 +0000
Files and hashes: 1: 7z0XvIoMLRkvX8RxCyA_VWiqjmE.roa (hash: TxbKQ6YqJPrLysV+NWU+TpSYoKbOqzVVz5RnT6KXSRE=)
2: jNFQ_x-81CqT603fQ8pxx748cog.crl (hash: mK4GLEXYApEDAzU1u7DwtIUKuHAzW8265yV4YSYSeUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:5b:03:98:0b:20:0b:3d:9b:66:89:4d:0f:3b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd150ff1fbcd42a93eb4ddf43ca71c7be3c7288
Validity
Not Before: Mar 12 20:01:10 2025 GMT
Not After : Mar 13 20:01:10 2025 GMT
Subject: CN=f7cd1a72fda0217a6ceb63db742ae10377a499af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:96:05:6f:c6:62:88:d2:d7:bc:e2:7b:77:
8a:8d:63:71:af:64:06:47:f2:c4:fd:ee:4f:7f:cc:
03:12:01:fa:cb:58:37:83:ca:6e:3e:cf:5f:cb:66:
34:f3:22:82:c0:73:0f:8d:8a:5d:a2:65:b4:c1:d0:
fe:84:e2:ec:a3:14:a5:35:18:80:a8:85:9e:bc:e1:
e5:1d:41:56:18:f4:30:58:d6:b1:fe:8b:50:d8:e4:
bd:6a:5d:55:81:79:2c:41:3f:a1:96:72:94:84:83:
5b:49:1d:a5:81:3f:f8:3f:97:7f:20:17:d9:87:66:
b0:f9:3b:91:00:ea:2a:16:e6:b5:22:5f:3e:26:ec:
83:16:fa:f8:01:c8:37:0c:e0:ce:62:07:c2:ba:84:
b3:58:42:55:2f:c7:d6:c5:93:6e:c4:63:6d:f7:93:
fc:2e:06:79:03:ed:c6:60:e7:10:a1:1c:73:e9:ba:
5b:26:18:18:52:a7:9e:66:7f:33:a6:86:90:80:8a:
59:5c:e4:02:5b:bd:45:d2:a7:2f:42:36:97:b1:ac:
c2:1c:e8:22:17:9d:04:2a:17:09:f7:79:77:14:1b:
60:26:68:4b:32:cf:35:b1:8d:7d:ed:53:26:9b:cc:
a8:8c:5a:5c:e2:d9:81:be:10:07:d5:49:64:30:df:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CD:1A:72:FD:A0:21:7A:6C:EB:63:DB:74:2A:E1:03:77:A4:99:AF
X509v3 Authority Key Identifier:
keyid:8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:06:82:af:4a:cf:b6:0d:16:f3:c9:62:a6:c1:a4:79:ef:7c:
87:ca:0b:f4:52:09:17:dc:fa:ad:6b:44:3d:8a:fc:27:94:f2:
78:a4:31:ca:9c:15:0a:d1:53:d6:91:74:05:f5:d7:e4:94:15:
a1:98:9f:69:b1:d0:db:01:69:ee:12:77:de:7a:6a:d9:2c:6b:
2b:9c:a6:ae:e1:54:49:82:21:ee:c6:f0:86:4b:85:2b:68:60:
3e:46:37:b2:c7:52:00:dd:f7:4d:9d:ee:10:cd:fd:41:8f:59:
a3:20:c1:fa:71:ff:22:79:5f:4f:50:77:09:00:36:3e:ba:cc:
2e:08:3d:92:d2:c3:53:2f:f2:7f:30:ab:07:99:60:35:4f:01:
e9:cf:34:48:68:c3:38:89:ee:3a:75:13:e0:c3:93:c9:44:02:
34:86:7b:69:de:95:21:d2:7a:43:f2:40:8f:fe:69:96:cf:71:
0a:60:69:e5:8d:b9:fa:f4:0a:93:96:86:f4:70:c0:95:78:46:
d8:c4:66:2e:b7:c2:ca:61:c9:1e:b5:62:31:98:d5:fc:58:f3:
83:64:ce:41:a7:fe:fc:69:1e:8d:21:4b:ef:73:83:38:ce:e5:
df:bc:d8:68:7a:a6:7d:d7:2d:a3:a8:98:36:74:03:b1:5a:3b:
1a:a5:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:56 2025 by rpki-client