Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
File: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft (raw, json)
Hash identifier: /EhP4MC7HMAiKGN4rfLppwq16k+ie2PbW0OorjBpiEs=
Subject key identifier: 65:65:32:50:87:B9:C6:7B:9A:72:57:79:CB:4E:7D:7D:85:98:FB:F9
Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
Certificate issuer: /CN=d095364395ccfd8543977358fa9b71f9271544f6
Certificate serial: 019652366F608DB32DDAAC8E2FA9939E6856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
Manifest number: 0CC7
Signing time: Sun 20 Apr 2025 08:00:21 +0000
Manifest this update: Sun 20 Apr 2025 08:00:21 +0000
Manifest next update: Mon 21 Apr 2025 08:00:21 +0000
Files and hashes: 1: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl (hash: HzKfOQI8AQ8TjbXzjAFFwGVj3wUJ1HxLaZnJq4FS7p0=)
2: WMhbwojz363aPcIT4pKLzOiKIQA.roa (hash: t03L1DneJHTF/s4FlG1CvztpxUkTwBNYCp5o+q76WB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:6f:60:8d:b3:2d:da:ac:8e:2f:a9:93:9e:68:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6
Validity
Not Before: Apr 20 08:00:21 2025 GMT
Not After : Apr 21 08:00:21 2025 GMT
Subject: CN=6565325087b9c67b9a725779cb4e7d7d8598fbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4e:8b:93:e9:20:37:6a:44:dc:ac:61:63:50:
87:2c:88:57:c1:da:c3:55:c6:98:3f:d1:cc:e9:58:
2c:fd:95:54:fe:67:92:c8:bc:ad:f2:3e:6e:5a:c8:
21:bd:cb:8f:f1:19:10:94:93:d1:bc:89:ea:23:6c:
81:ff:75:e9:ad:5f:85:5c:e0:1a:af:eb:5f:2c:f8:
8b:82:0b:cf:99:31:b4:64:ec:02:8a:d9:46:fb:6b:
74:48:ab:d5:08:5c:fb:e6:70:7a:a5:4a:44:c3:4f:
63:78:94:e2:79:9d:40:20:0d:6d:fe:33:f5:ce:72:
f5:b5:09:46:5d:3a:a0:ea:f4:32:a9:24:97:a6:91:
e9:3a:68:34:e1:83:64:5d:2a:ac:87:05:12:7a:97:
25:2f:9e:c2:a3:4e:1a:45:26:85:30:5c:7f:b9:d8:
54:bb:81:0f:ad:e5:29:50:d7:aa:58:cc:31:90:63:
eb:13:37:54:be:60:e3:5e:90:8d:76:6c:7b:f8:ef:
88:be:16:d2:0e:8c:df:94:31:4c:d1:46:92:99:a1:
89:28:a9:a8:0a:e7:54:14:ed:71:c4:b1:da:0b:48:
86:b2:a4:1d:f9:01:58:0f:d2:79:0d:a7:62:10:64:
3c:8f:e0:fe:58:93:3a:b9:ec:dd:0d:b8:f6:97:bd:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:65:32:50:87:B9:C6:7B:9A:72:57:79:CB:4E:7D:7D:85:98:FB:F9
X509v3 Authority Key Identifier:
keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:69:22:f1:5a:27:82:72:01:6d:74:1a:70:e6:5c:05:73:28:
96:d0:94:16:1a:b4:fb:87:8a:47:39:d4:8e:85:1e:1f:f0:45:
29:28:80:45:cf:39:08:1c:14:7f:40:2f:76:cf:7a:5e:15:69:
18:9c:34:94:e7:40:bb:46:f2:53:34:4e:df:39:c4:49:20:05:
00:84:8b:bf:62:fe:65:4f:73:57:e2:4c:c9:4a:da:a2:23:33:
7d:2c:f1:28:5d:8f:f5:4f:da:f2:87:27:c3:4c:50:34:27:d7:
01:e3:c3:16:31:0f:78:56:8f:2c:92:a4:68:c9:fd:b9:3c:5b:
ab:a0:29:82:dc:a9:e6:27:10:78:0a:09:54:3c:8c:65:fb:a8:
e5:6f:2f:a6:02:4e:ad:47:32:4a:d1:22:94:07:dc:e3:06:aa:
e7:66:76:58:23:02:39:7f:01:78:eb:74:74:21:67:8f:7e:ea:
ea:3c:05:a8:73:a6:04:33:c2:47:ab:2d:95:43:81:96:31:37:
14:1a:a9:74:40:ee:23:c5:9b:d4:43:41:45:0b:4c:8b:7d:f8:
83:bb:bb:48:4a:26:a3:28:eb:d2:1e:41:76:a7:2b:ac:d3:4d:
92:f1:6c:69:59:21:c6:a2:bb:ba:f9:60:02:fc:87:3a:d0:29:
80:bb:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:37 2025 by rpki-client