Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
File: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft (raw, json)
Hash identifier: PjTEHGI3VezgbGJb/ZaqoBvsyis9gsv3XfAwkF5UJ3M=
Subject key identifier: 3A:12:BD:79:89:AF:2B:B1:65:3D:09:D3:9E:05:59:08:F8:32:49:4F
Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
Certificate issuer: /CN=d09da99a73ba7202418f73718932dc8d7c153e32
Certificate serial: 0196542585705F8CCC21CB328F406A424993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 17:01:07 +0000
Manifest this update: Sun 20 Apr 2025 17:01:07 +0000
Manifest next update: Mon 21 Apr 2025 17:01:07 +0000
Files and hashes: 1: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl (hash: JGsOFXMeGdnjhhpkhOe+YZQYxCD778tknRQH/L2mhXk=)
2: nJUcoCNc07cyfYEUlMwbz1g_DaE.roa (hash: Ib/IQqjAiE9xz41/z9I1UMYPE1ywAN0ig2dufXZbgBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:85:70:5f:8c:cc:21:cb:32:8f:40:6a:42:49:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32
Validity
Not Before: Apr 20 17:01:07 2025 GMT
Not After : Apr 21 17:01:07 2025 GMT
Subject: CN=3a12bd7989af2bb1653d09d39e055908f832494f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:7e:fd:12:35:3f:04:02:d0:06:42:36:06:
62:8f:55:76:81:c3:9f:a4:11:84:2b:08:2a:28:b5:
d1:8b:fe:74:73:48:fb:f5:9a:e2:3f:0c:8a:f0:ef:
ff:10:32:91:eb:83:fc:9c:96:1f:df:1a:a9:bb:2d:
e3:1e:4c:00:af:49:4d:0a:e6:ee:0c:bc:88:e0:49:
8e:0d:76:06:1e:5e:13:78:09:6d:fa:6b:b3:80:df:
47:61:d7:8a:e4:ae:86:72:6d:51:dd:bc:62:49:5c:
34:cd:0d:d7:54:5f:05:b2:0d:49:9e:3c:d5:c7:7d:
52:43:73:3a:d5:ef:40:c5:d6:29:c8:23:5a:c8:92:
17:f8:3c:51:a3:0d:75:3c:c8:49:06:58:4e:a6:df:
4b:68:93:50:2a:9d:a6:04:f6:f3:fa:df:55:93:30:
d7:cd:f1:4f:08:2d:b9:35:c7:05:51:da:9e:02:53:
35:4b:ae:90:fa:5e:7b:f8:4c:79:f8:5c:f6:a2:f8:
d2:2d:5b:07:78:35:a5:e7:74:05:b0:c0:46:6c:6b:
15:10:d7:4d:eb:2e:31:9d:f6:83:bf:e8:d5:0d:de:
ac:29:b5:70:26:10:29:8f:90:05:a9:44:7d:0d:56:
3e:95:c3:31:0e:e4:57:09:31:29:69:9c:54:a6:77:
d5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:12:BD:79:89:AF:2B:B1:65:3D:09:D3:9E:05:59:08:F8:32:49:4F
X509v3 Authority Key Identifier:
keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:63:98:f2:4b:9e:2e:9b:07:d7:df:24:ad:11:62:0e:b8:e6:
5e:ac:3a:11:86:28:43:61:11:a5:30:0a:5d:e0:5d:93:22:b4:
e1:58:40:48:a5:ee:c7:7d:9c:2a:4f:79:29:37:a4:e7:8e:07:
53:36:c1:ad:41:95:a6:40:82:78:81:36:45:8c:f5:48:4f:e5:
a9:8f:f1:2d:bd:da:da:16:dd:6c:54:50:c8:5a:5f:3e:66:9e:
bd:92:07:e7:13:fc:5d:76:48:12:01:ce:42:20:40:a9:86:8c:
44:7a:7e:d3:a5:bf:3b:66:ac:d5:2c:9d:ca:e3:df:c3:9f:41:
99:d1:33:68:99:34:29:a2:0a:26:02:5d:0e:1f:d1:c2:7f:50:
a4:d5:37:eb:44:b7:d4:70:58:d5:0f:95:f5:f1:9a:38:39:96:
36:fe:a7:8d:31:07:72:ed:df:98:b1:5d:47:1f:e8:e2:14:80:
05:1b:c2:90:a4:48:14:a8:4b:f0:e9:4e:d5:94:bc:b1:7c:26:
0f:5d:15:ee:2d:68:8c:65:8b:88:b5:ce:69:a5:7e:bc:58:dc:
2a:8c:ab:52:2b:b5:6c:0b:9f:71:0d:77:49:0e:b7:f5:66:8c:
0f:69:c0:0f:73:b2:ca:bf:23:92:80:0f:9e:6a:85:4b:50:81:
2c:5a:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:59 2025 by rpki-client