Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: jDCxkpGBdBFY+2flLVbK+VE/CkiaGzGJ44IvUkZHvX0=
Subject key identifier: 8C:9D:32:E2:B1:BA:0C:47:8F:74:5D:A6:10:B4:75:9C:57:5A:5B:D0
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 01965613D8A4417065A369123F951216804C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 02:01:03 +0000
Manifest this update: Mon 21 Apr 2025 02:01:03 +0000
Manifest next update: Tue 22 Apr 2025 02:01:03 +0000
Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: A9d8xL7f0LkdIokC77ujGs2nLeRTkAEq6TURmuHzfiA=)
2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:d8:a4:41:70:65:a3:69:12:3f:95:12:16:80:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Apr 21 02:01:03 2025 GMT
Not After : Apr 22 02:01:03 2025 GMT
Subject: CN=8c9d32e2b1ba0c478f745da610b4759c575a5bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:ba:2d:48:89:0a:ed:db:37:a4:a9:96:b3:
22:a7:6f:cf:1e:f9:54:54:d0:60:16:c0:e5:43:a7:
72:38:b8:b6:cb:86:95:40:d2:fb:68:56:ed:86:75:
a8:c2:30:90:6d:fa:99:76:d8:fa:ae:30:be:de:29:
b0:40:a8:07:25:78:59:b4:9f:f9:fc:c0:1d:c8:69:
84:25:71:20:26:d6:48:9e:7c:45:c7:fc:29:25:90:
ae:a9:f1:b8:f4:b9:07:da:2f:65:c5:79:6f:73:97:
33:e9:97:75:8e:e6:04:cd:60:61:d0:63:2b:7f:1f:
2e:92:f6:90:db:2d:e1:3c:69:1d:ea:02:3f:44:9c:
7b:a4:c1:56:71:3f:dd:fa:9b:59:49:ff:44:d9:2e:
e9:5c:23:f2:c6:ca:6f:a3:b9:7b:19:28:c5:05:da:
b3:f9:d2:24:12:dc:4e:6f:42:45:68:ef:60:70:49:
15:06:1d:98:6a:0e:3f:3f:90:6b:56:c8:c4:7e:d3:
5f:5f:88:a2:d7:ac:66:f8:01:50:11:ab:4f:f0:48:
a9:f1:b1:c1:92:7a:64:75:43:90:7a:4d:2c:79:46:
c2:1e:c1:a9:3d:40:da:bf:8e:54:61:ba:e9:75:10:
ae:8e:29:a2:6c:ed:6b:b5:c1:e9:da:5a:87:ad:19:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9D:32:E2:B1:BA:0C:47:8F:74:5D:A6:10:B4:75:9C:57:5A:5B:D0
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:42:aa:e3:f2:4c:e8:d0:3c:ea:fd:4d:f1:c9:5c:1b:bf:10:
df:87:39:96:65:fe:a4:01:ff:76:a6:19:5f:0b:9f:37:5c:d3:
c9:27:5c:1a:d5:b9:eb:d9:52:fe:bf:c9:4d:ff:51:5f:15:30:
fa:01:2d:4e:3d:42:9d:cf:2b:d4:cb:0c:ec:01:1a:79:af:39:
38:fd:1b:0e:bf:85:21:a3:ad:0e:49:32:db:36:28:79:61:84:
34:3a:31:2d:a4:06:c1:c6:a4:f2:45:75:0a:3a:a7:e1:c9:a7:
a5:af:5d:8f:ee:b8:ce:96:2c:41:d3:c0:40:a0:0b:96:12:dd:
79:23:f0:15:7c:40:f8:a8:fe:ac:c4:f6:5a:da:12:00:67:06:
6d:a5:f6:63:32:a1:0e:73:0d:7b:5b:c0:05:61:6c:d3:cc:e6:
47:72:7c:36:6e:3b:dd:a2:d2:6f:b0:06:3b:18:02:4d:1c:16:
2e:4e:dd:2b:0c:c5:f5:19:58:14:16:35:7b:95:d1:dc:9a:5b:
32:a3:b2:c1:9d:e1:70:31:be:bb:44:1c:b8:44:2b:ef:0b:7d:
29:23:aa:d1:b2:85:d4:73:38:cd:4d:6b:1f:61:14:a3:46:4b:
fd:24:2a:55:bc:50:03:12:08:69:28:75:be:ce:05:f7:6d:da:
20:39:7f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:40 2025 by rpki-client