Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: 2e8YOM9M6rQ4I9bX8xCEuoK9K0gJeJ+awjbk2o8RyQs=
Subject key identifier: 4D:CD:6D:BA:11:D0:3C:23:59:05:05:98:32:CF:17:A4:FA:B1:D0:1A
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 019613586ACE80844E7F428553B711665A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 03AA
Signing time: Tue 08 Apr 2025 03:01:23 +0000
Manifest this update: Tue 08 Apr 2025 03:01:23 +0000
Manifest next update: Wed 09 Apr 2025 03:01:23 +0000
Files and hashes: 1: DLu57DZ9WcMMQAmctMKhjMYOA_8.roa (hash: AHuCNcId9Lo6xFcInpQkBT6Qmu0yRSdhlMD93oKCtcM=)
2: S0aXQwzEMfO_byK88_PAIYF0E0Y.roa (hash: zkNEouDr8/eydtpoAL8WuNQuUPE88TuaPOB3fN49Myk=)
3: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: QcPxhKosV261JAupd8hvLNefx8GPo7h+xZqHhOT6QNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:58:6a:ce:80:84:4e:7f:42:85:53:b7:11:66:5a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Apr 8 03:01:23 2025 GMT
Not After : Apr 9 03:01:23 2025 GMT
Subject: CN=4dcd6dba11d03c235905059832cf17a4fab1d01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:ed:46:3d:19:47:60:1b:5c:f6:7c:53:ba:
c6:a9:79:c7:47:6d:7e:7d:39:7f:53:38:18:61:1b:
55:51:3e:d3:d0:fe:f8:5b:9e:27:1d:ef:77:f8:4c:
82:d7:72:b6:42:af:d3:6f:95:26:77:f3:f9:c2:35:
15:1e:65:62:d8:09:5c:55:e7:aa:96:92:e5:ab:a9:
21:08:54:ac:2d:77:da:9a:3e:c7:7c:88:09:4d:33:
6b:3f:ef:dd:cf:2b:7c:e6:00:0b:6f:75:1d:ce:4d:
96:c6:1f:75:71:00:c2:52:8f:fd:13:0a:6a:24:3a:
27:b9:4e:2c:eb:f8:1b:76:28:2d:26:53:73:3e:77:
af:5c:75:f8:b0:0b:d4:8f:95:dd:0e:8c:e2:61:32:
d7:b1:17:35:ff:b6:ac:68:6c:23:48:c0:95:c8:32:
04:58:e5:10:55:43:53:8c:d9:0f:cb:3b:e4:2f:b8:
e1:6d:29:98:28:6c:5c:5c:19:46:31:04:35:e6:c0:
86:32:91:98:e6:b2:1a:f7:d1:01:c6:e9:b6:67:6c:
6b:b0:c8:45:aa:41:e7:28:71:9e:1b:1b:d2:5d:15:
58:e6:ca:3b:2f:83:49:30:f2:a5:e0:61:bc:a4:ee:
9c:f5:53:08:13:27:c4:38:e5:b8:67:d2:12:d1:b3:
b7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:6D:BA:11:D0:3C:23:59:05:05:98:32:CF:17:A4:FA:B1:D0:1A
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0f:83:d2:28:db:27:38:f1:38:1f:0f:77:0e:4a:17:62:b3:
5d:12:15:d5:11:04:bc:64:c8:82:f0:ce:ad:dc:00:9b:97:2e:
e9:0e:cb:b5:b6:bb:dd:9b:56:4a:36:5a:48:10:8b:00:1f:fe:
a8:c9:55:0d:5c:f7:a8:ba:d2:1e:c0:bf:c0:d7:21:b6:df:c5:
33:ee:7d:ac:05:d6:7c:20:64:1e:8b:9d:26:c2:8f:92:94:74:
7c:e3:ef:2d:4d:4b:e8:94:73:8c:95:1b:68:c1:e4:97:c5:5f:
03:61:1b:c8:74:86:07:8e:c4:69:b8:ce:6d:43:e0:74:b3:f1:
6d:4d:ed:b7:60:3b:16:89:40:65:86:34:ca:14:46:76:e1:1a:
f6:c6:e0:31:a2:50:27:ca:0a:34:8c:5d:64:cb:ee:f8:7c:43:
7c:f9:56:54:88:be:4b:5f:7a:5b:20:7a:90:b2:89:69:5a:04:
bc:c7:4c:95:c6:a2:5e:07:20:c6:fe:31:4b:92:78:30:4d:f2:
18:19:7a:24:d9:6b:77:e0:e4:23:7e:1c:99:6a:a5:e1:b0:29:
e4:fc:cc:c1:84:1f:83:7e:5d:b4:a5:82:8d:4d:56:6b:4b:6e:
3f:14:46:06:65:0e:1d:10:3a:6c:27:15:47:1f:69:8f:2b:a0:
42:1d:8f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:06:27 2025 by rpki-client