Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: KdVIk287WsTrf3J6H5in6JFcsffvcSqB2GcPYVFjUMU=
Subject key identifier: EF:98:33:1C:DB:F2:FC:22:5F:B6:BA:36:AF:FE:47:EC:BB:A6:E5:B4
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 019616C6D259C97972260DA3C0DDA669C929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 1254
Signing time: Tue 08 Apr 2025 19:00:50 +0000
Manifest this update: Tue 08 Apr 2025 19:00:50 +0000
Manifest next update: Wed 09 Apr 2025 19:00:50 +0000
Files and hashes: 1: 3H7i_vFx5kv1rmREwXCmTM5oMqw.roa (hash: hMtleRQFOxKLJtL4y1szjPfSERJkDY1m3qfGe4WIw2I=)
2: RsZOcDmkBIUPjHAIBtXdE1isEIo.roa (hash: YV+XRYidOStCwFSLI7pqeek9g91t1Wq016mp7gDOMSA=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: ZMn0Bp8zTEkQrMq3oW5o9T57E4O/wwRRDkNF9+3UXQI=)
4: oelP10O0hKN0MJjmizXtRBBnIm0.roa (hash: Kv4VxSnM51++YGnfrGOwbQ9f/51H5VRCwP22x4tg44M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:c6:d2:59:c9:79:72:26:0d:a3:c0:dd:a6:69:c9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Apr 8 19:00:50 2025 GMT
Not After : Apr 9 19:00:50 2025 GMT
Subject: CN=ef98331cdbf2fc225fb6ba36affe47ecbba6e5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:66:62:47:22:4a:47:2c:0c:72:50:68:ed:db:
40:13:fc:60:b0:c5:b0:2a:3f:65:4a:52:02:20:64:
3e:5e:39:52:cf:15:02:b1:e4:f9:69:9d:bf:b9:70:
21:fb:80:34:7e:f3:5b:ca:74:93:dc:1d:d9:77:70:
74:92:24:a5:eb:c9:b1:b8:e0:ed:3c:80:5f:c2:51:
f2:bb:ce:6c:57:eb:57:6e:0c:be:b9:2d:da:54:73:
9d:66:55:ad:fb:fe:10:df:35:e1:fc:4b:7e:3f:78:
ec:23:72:f7:c3:20:b6:3a:96:37:3a:3e:16:e7:0f:
a8:4b:7c:0e:b9:33:b3:c9:9c:69:00:04:0c:67:88:
d5:04:2e:12:e4:97:0b:d3:83:9c:cc:96:2b:5b:9b:
ed:07:33:14:0b:42:c7:3a:3e:6f:3c:24:d2:75:ef:
c2:2f:b5:f5:26:80:92:9b:2c:ee:1c:a2:92:3b:24:
6e:7f:c0:26:98:de:e1:59:ae:91:ec:72:70:fa:6b:
e6:30:f5:4e:28:75:9a:de:2c:b5:3f:53:20:31:a2:
71:58:50:2d:9e:80:a3:f9:4c:02:55:a7:e5:65:ed:
8b:ee:dc:77:dd:38:44:56:a7:ea:d3:37:d9:53:55:
77:d3:90:b7:2b:5c:61:86:ea:c0:9d:c5:18:52:c0:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:98:33:1C:DB:F2:FC:22:5F:B6:BA:36:AF:FE:47:EC:BB:A6:E5:B4
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:69:a7:5d:5b:7a:21:c5:8b:8f:5c:98:ff:91:9a:d9:d0:e9:
5f:6b:2e:a2:33:f1:b5:09:6c:c2:52:ec:9b:03:ac:48:73:13:
ef:5b:b6:f9:1c:09:6c:7a:5b:be:85:ef:9e:cb:3c:8c:76:58:
0a:94:2c:16:85:53:51:7e:43:98:c8:42:e3:01:06:23:8b:54:
80:d1:37:bc:2f:5a:1d:0a:1a:3d:2d:a9:5d:05:cf:b0:7e:2f:
d8:66:c8:e0:85:ff:3c:a8:a7:ae:bc:5b:cb:02:64:48:2d:f1:
45:6e:26:1e:23:db:96:f0:45:84:d4:94:98:1b:01:23:e9:f5:
81:b3:67:63:de:c4:8d:42:20:13:27:88:9f:cd:a0:f1:78:c0:
77:ea:ad:8a:0b:6b:ad:9f:6f:7d:b9:b6:14:d8:2f:8e:29:18:
ab:db:d5:5e:2d:5e:be:1b:77:a1:01:4b:80:06:21:0d:5d:8d:
e7:72:80:99:7c:fd:45:ed:59:ce:0d:a6:c7:b8:ef:e3:dc:c1:
f1:5a:7d:20:1d:de:1b:6a:95:ba:5a:84:48:8b:89:ed:24:eb:
2f:9e:41:bd:b7:f5:5a:bb:55:d5:15:84:1f:4f:72:31:17:fc:
57:28:18:80:5e:77:9f:ac:3e:5a:e0:42:ef:a1:cd:c9:94:07:
8a:a3:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:02:10 2025 by rpki-client