Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
File: jAfs12ZszvkegvfsvOC6KFM2-0U.mft (raw, json)
Hash identifier: ysL0ONW3ta7VPKdh88cV3mD+SHD4gpat/PCKlCS4+ks=
Subject key identifier: 03:47:FA:37:C3:C4:F8:8C:E7:48:BE:B5:92:5F:73:2B:A7:8A:72:2D
Authority key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
Certificate issuer: /CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Certificate serial: 01964F6C9B1B15A3D0692406B63CE7779D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
Manifest number: 1195
Signing time: Sat 19 Apr 2025 19:00:39 +0000
Manifest this update: Sat 19 Apr 2025 19:00:39 +0000
Manifest next update: Sun 20 Apr 2025 19:00:39 +0000
Files and hashes: 1: HO38BQkZbk8sOl9HIcFWqylWAn0.roa (hash: f5PO7xcOqg4j7osu62n1SoIVysgleTKMRASaV5PScOY=)
2: jAfs12ZszvkegvfsvOC6KFM2-0U.crl (hash: zK3sdx73tH7tjbvdbI8qjHhNKgCiWxBX1vbSC5fVYK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:9b:1b:15:a3:d0:69:24:06:b6:3c:e7:77:9d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Validity
Not Before: Apr 19 19:00:39 2025 GMT
Not After : Apr 20 19:00:39 2025 GMT
Subject: CN=0347fa37c3c4f88ce748beb5925f732ba78a722d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b6:47:ff:1c:18:79:c6:9a:d5:13:34:e9:20:
d6:7a:3a:69:18:42:5a:ff:45:d8:6f:55:c9:05:00:
19:52:ce:38:a1:80:ae:24:eb:4e:01:4d:a5:9d:d7:
35:75:94:24:ed:68:e5:04:4a:e5:93:4f:b0:2e:1e:
46:11:77:08:9d:8f:6b:78:9e:57:89:db:30:18:79:
28:ff:e5:32:94:ba:3b:b9:1f:fa:29:70:b7:32:ee:
90:40:46:33:d9:30:48:9b:ce:fa:27:30:57:f5:01:
97:00:6c:98:a8:9a:19:29:ba:78:19:98:6b:c2:b6:
a0:8f:56:a6:ad:40:c5:26:2a:b5:da:30:01:75:19:
f3:17:71:13:a2:66:75:00:39:83:f3:77:a0:0d:ba:
88:8b:a0:d4:c6:4e:aa:96:e4:3b:45:ef:c8:09:a1:
4a:b9:1f:76:5e:c0:28:c0:c2:f0:1e:dc:0f:da:9e:
bc:7f:1f:9e:20:ea:bb:5e:eb:0f:af:da:b8:3d:72:
c5:8b:be:b9:d0:cf:cc:7e:65:80:c3:5b:e4:58:78:
8b:45:66:b3:54:cc:20:f3:14:5e:e9:86:d7:89:54:
38:0a:8c:a5:f0:06:03:1d:da:f5:67:3d:e9:db:31:
48:33:8a:a4:09:a5:4b:86:5e:55:86:87:8b:fb:19:
a5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:47:FA:37:C3:C4:F8:8C:E7:48:BE:B5:92:5F:73:2B:A7:8A:72:2D
X509v3 Authority Key Identifier:
keyid:8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ab:6f:80:00:61:94:46:da:a5:78:b8:e7:fa:18:96:12:48:
d8:12:b9:f1:ba:b8:58:c6:32:bb:dc:ec:cd:8b:2e:89:05:76:
df:4f:c1:0b:04:4d:ba:cd:0b:42:44:71:00:ad:12:19:55:3c:
39:7d:df:69:06:a4:37:7f:88:08:2e:f5:46:ed:82:1b:a5:60:
4f:60:17:f3:0e:5d:8e:46:85:7d:6c:7b:ce:9a:1f:31:36:d6:
20:08:f0:c7:3d:6a:5d:f6:f7:57:91:d4:4a:f9:9f:4d:fa:16:
67:05:a2:1c:4f:52:45:b5:8d:c8:45:62:a5:b3:b6:4a:3f:89:
85:3d:28:ec:86:c6:e3:62:76:73:e0:5b:0a:b9:9e:2e:e5:c8:
99:1c:47:65:ee:0a:5c:47:02:76:2d:ea:23:ba:c8:15:ae:ec:
8b:cb:de:30:90:cd:35:30:cd:6f:b9:84:7f:ae:33:25:31:0f:
b7:c9:56:c5:e0:fe:a3:65:36:cb:97:5f:6f:ba:ef:e9:f9:e5:
45:ca:9c:22:7b:fb:30:52:72:94:c2:ad:a7:55:01:00:65:25:
e6:cc:65:b7:a6:a3:fa:cf:8d:17:46:b8:0f:d3:13:b6:a1:c7:
79:7f:13:79:a8:c5:7e:7e:14:f0:45:6e:32:fa:0d:75:48:63:
9e:5f:27:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:29 2025 by rpki-client