Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
File: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json)
Hash identifier: EtkYUnA+WVE3sTbgLC6+Z58qiiNs6GEYBgTjjDJ3QS4=
Subject key identifier: D6:D3:3A:D9:AA:46:0A:66:2F:85:01:F0:F6:A7:F4:E8:E3:FF:45:88
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Certificate issuer: /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial: 01958C97107816FBD454A4C5E9305AF65A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
Manifest number: 08D1
Signing time: Wed 12 Mar 2025 23:01:05 +0000
Manifest this update: Wed 12 Mar 2025 23:01:05 +0000
Manifest next update: Thu 13 Mar 2025 23:01:05 +0000
Files and hashes: 1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=)
2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: eJIezAzldxzzLQpaXmz7uSVehGMwLWAOJk0JlxIXxbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:10:78:16:fb:d4:54:a4:c5:e9:30:5a:f6:5a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
Validity
Not Before: Mar 12 23:01:05 2025 GMT
Not After : Mar 13 23:01:05 2025 GMT
Subject: CN=d6d33ad9aa460a662f8501f0f6a7f4e8e3ff4588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:67:3a:7c:ee:7f:b2:ae:22:cd:a9:20:84:
c8:00:df:1e:6d:9b:78:87:95:43:0d:f8:68:87:5c:
50:7d:ae:11:a1:83:36:3c:80:a6:41:fe:ed:58:f9:
a6:d7:54:09:90:9d:88:e8:3a:02:f5:93:42:ef:2b:
af:3e:d8:b6:b1:17:5b:ec:89:e4:82:d3:f8:c9:a0:
58:46:15:60:47:c0:67:68:10:ce:98:da:cc:50:77:
95:9d:8d:af:35:38:a2:aa:57:61:e4:cc:57:4d:ba:
32:25:74:cf:7f:28:da:f9:43:be:ae:b8:fa:4a:33:
17:af:9e:60:36:64:fe:62:39:62:86:9b:cf:37:86:
4c:de:f9:94:2d:cf:ea:7f:19:21:72:fe:bc:fa:00:
44:2c:d0:06:4f:73:7c:0f:33:17:bd:fd:9c:3b:65:
58:ff:8a:6c:87:b5:f3:27:4a:94:70:92:b9:1e:86:
5d:17:12:fe:df:c4:a5:bb:a4:55:90:3b:09:07:c6:
59:a6:b0:39:b8:f5:ba:45:17:c1:99:22:a1:ff:55:
67:42:ef:c3:51:48:e6:b7:8a:37:ff:6a:4f:8d:d1:
68:bc:71:ef:ee:7e:d8:aa:2a:d3:15:60:74:df:e4:
a3:1a:54:7f:09:55:ff:ff:75:c6:19:19:6f:42:d3:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D3:3A:D9:AA:46:0A:66:2F:85:01:F0:F6:A7:F4:E8:E3:FF:45:88
X509v3 Authority Key Identifier:
keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ab:89:f7:8a:bd:01:5d:c8:b5:58:93:ce:80:12:02:b5:31:
b8:ca:f5:60:20:e4:9f:4b:bf:b0:ae:1d:2e:d4:3a:b3:2c:2c:
04:9f:fc:93:a2:75:65:33:2d:67:69:bc:6f:98:3a:d6:7f:f7:
98:1d:90:a4:27:14:55:b3:28:a9:3d:eb:d5:fb:27:63:75:f0:
4a:6c:c6:d7:12:a8:f9:4f:30:23:14:8a:31:11:40:dd:96:f3:
38:0d:f7:eb:9b:08:99:4d:12:ce:96:d2:3f:17:ce:1d:de:27:
4f:73:84:e9:e4:4b:38:4c:b9:1a:f2:bd:95:10:3a:63:cf:a8:
08:9c:21:e3:a0:d6:f3:ee:eb:2f:ce:3e:01:7b:23:1d:d1:f5:
fc:c7:4a:38:e8:e5:c7:64:e7:b3:52:85:b9:dc:01:0a:66:08:
95:34:69:b6:9b:ed:f3:7c:5b:08:1a:72:9a:f9:49:19:b2:16:
0f:ff:a9:99:eb:c6:f4:29:17:96:aa:98:0c:e6:d0:ee:6a:3e:
17:5e:82:56:4a:e0:d6:79:3b:9c:a5:89:0c:7c:aa:b7:ad:67:
57:e2:cd:41:b7:54:58:6c:46:57:51:9d:14:1e:80:45:00:3d:
10:72:48:63:f7:f1:e3:9b:3d:83:2d:39:86:15:e7:5e:69:78:
68:67:8a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:27 2025 by rpki-client