Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
File: 8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json)
Hash identifier: xNAJpl1qkkQGP0BRwcWgCpl+jz+RTTZsUkp+E1gjKyw=
Subject key identifier: 81:FD:95:C8:E9:8C:45:E8:88:92:95:03:EB:D8:A1:38:FB:22:12:38
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial: 01958C28F75A51F73DDF41C36E069B502A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 21:00:49 +0000
Manifest this update: Wed 12 Mar 2025 21:00:49 +0000
Manifest next update: Thu 13 Mar 2025 21:00:49 +0000
Files and hashes: 1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: SAH9kGDDbQ2UskKgqBJ0b/jF2WGVDj7CAmMv+q1F4fE=)
2: K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa (hash: W5Jwdvi7etvP6GxGLNbBoK0ap2sodrYQoCXcswND0as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:28:f7:5a:51:f7:3d:df:41:c3:6e:06:9b:50:2a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
Validity
Not Before: Mar 12 21:00:49 2025 GMT
Not After : Mar 13 21:00:49 2025 GMT
Subject: CN=81fd95c8e98c45e888929503ebd8a138fb221238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:43:36:51:3e:09:0c:8e:de:23:e6:f2:df:a5:
4e:d5:76:a0:16:4a:bd:20:81:c1:09:79:ea:fe:37:
05:de:7c:5c:6b:8a:eb:ba:52:7b:97:c0:61:43:f7:
62:4b:2b:43:cc:e6:16:02:e9:d2:f1:fa:9f:d1:1a:
61:f7:4a:49:52:a7:3f:17:7b:f8:df:e6:b3:b6:92:
71:bb:cb:33:e7:9c:35:20:cb:87:29:8e:e9:49:34:
e5:a1:fa:94:4e:5e:bf:b4:c8:2b:24:0d:fd:40:fc:
40:f5:bb:02:eb:7e:38:22:cb:d4:71:69:38:db:9b:
04:f7:4b:0e:79:73:8f:81:ab:29:96:47:b0:55:0b:
ab:e5:95:31:60:b2:a6:b4:a4:92:9a:c0:32:09:e0:
7f:53:3f:a6:3b:ee:e6:9d:df:5c:8a:86:20:53:25:
83:24:3f:95:a0:c0:05:a8:01:55:f9:57:ac:42:db:
fd:af:78:11:17:9c:08:b2:42:73:b8:58:1e:0b:fe:
1f:91:f5:e7:07:5b:d7:3c:8c:55:ca:63:b1:c6:0d:
eb:12:b4:a7:f4:5f:4f:10:24:66:a8:ef:0a:35:7f:
ef:f8:a0:40:7a:fc:b2:0c:0d:b2:61:2c:19:82:83:
76:c4:9b:45:5e:bd:6f:93:35:bd:d9:2e:c0:3f:44:
7e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FD:95:C8:E9:8C:45:E8:88:92:95:03:EB:D8:A1:38:FB:22:12:38
X509v3 Authority Key Identifier:
keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:02:4a:d7:49:73:21:ff:cb:83:81:87:b7:28:3c:63:77:87:
d7:c5:5f:22:22:ec:87:d2:34:5a:91:37:cd:88:95:d1:05:a7:
cf:d6:bd:c2:70:5e:be:e3:2d:7d:48:ff:72:54:cd:cc:1b:47:
2f:9f:8b:44:26:17:77:ae:a9:60:3e:41:b2:a0:49:c3:a9:ef:
7b:04:7c:43:9f:d2:d4:06:a8:59:fa:0d:6e:c9:2c:71:94:4f:
8f:6e:43:59:33:51:33:b3:0e:8c:5c:59:58:76:cf:c0:dc:07:
72:68:35:15:01:ea:35:eb:ad:b9:76:fc:0f:f4:02:fc:1b:6a:
32:75:ca:66:7b:a1:b1:f4:29:45:4b:0d:c3:47:ad:e7:2d:10:
ad:6c:65:d4:7a:d9:d9:da:94:2a:60:c5:b8:1a:7b:8f:45:c7:
d4:6d:49:37:9b:07:b4:42:b4:41:c8:13:59:25:e4:61:81:bb:
bc:0d:ac:d4:1c:44:f7:13:60:04:02:3d:4b:6f:4a:e5:b3:a1:
a5:15:7a:69:b1:25:c6:e6:31:11:a8:40:95:b4:e8:ff:9f:4c:
e4:77:62:aa:80:4f:1a:d3:b9:ea:81:4d:4d:67:15:a6:07:7f:
8a:e9:68:5f:f5:19:ed:32:09:49:c6:71:35:42:41:4a:88:8b:
34:4d:b7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:26 2025 by rpki-client