Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
File: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json)
Hash identifier: 0N4vFyr8rvmxK6t/PceiizwxlTQnCGIC+3znG4zXKWw=
Subject key identifier: 91:FD:F1:09:7D:DF:93:2D:F4:BC:25:19:88:3F:4A:8A:66:36:A7:0D
Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
Certificate issuer: /CN=d098e907c63457e6ca6281dfe297d972bffda805
Certificate serial: 0196526D552FD3A73BC32B79CCB9ADD31387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
Manifest number: 1028
Signing time: Sun 20 Apr 2025 09:00:18 +0000
Manifest this update: Sun 20 Apr 2025 09:00:18 +0000
Manifest next update: Mon 21 Apr 2025 09:00:18 +0000
Files and hashes: 1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: vylR7XJ+1OBylZ1GsGbk7UYwIxsP2CoN9jKEXr+RTsM=)
2: ur2jQXpGWWYECBsXTeT3ihs6vVk.roa (hash: BxlFUb0zmMnW7XaJszRYUfw8FuEEod2RQjrGiW/bsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:55:2f:d3:a7:3b:c3:2b:79:cc:b9:ad:d3:13:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805
Validity
Not Before: Apr 20 09:00:18 2025 GMT
Not After : Apr 21 09:00:18 2025 GMT
Subject: CN=91fdf1097ddf932df4bc2519883f4a8a6636a70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:7f:88:b4:6c:13:b4:fc:2d:16:5f:95:69:
83:4f:ab:d0:b2:c0:a9:32:9e:20:8f:6a:9b:a8:39:
c1:79:ce:a3:7d:54:df:58:20:f9:ec:de:0e:b6:5f:
33:97:a0:3f:7e:78:8d:72:cb:85:4b:cf:86:98:5a:
56:78:85:3d:01:c1:fe:4b:84:e2:be:83:61:2a:d3:
b4:c9:eb:11:83:9f:81:55:ea:70:f2:32:27:37:7e:
ac:c5:be:ce:4b:24:29:a3:07:eb:19:ce:83:fe:79:
74:2f:37:b1:cb:32:aa:71:f8:1c:88:fa:12:61:88:
3c:f2:ea:31:6b:10:31:34:2b:47:3c:79:f3:1b:52:
be:fe:8c:dd:38:a1:1f:d1:05:c0:40:56:1c:51:34:
07:b7:6d:14:99:2a:53:dc:8e:c2:91:a3:f4:7a:49:
41:c9:95:cd:61:00:22:74:e0:7b:1b:41:9c:16:e5:
cf:46:74:10:77:34:25:58:cb:ff:c2:09:12:2a:7c:
40:8d:01:b1:67:1d:ac:5b:74:23:0d:f5:a1:65:71:
40:0a:ab:66:3a:1a:b3:f7:e3:e1:79:47:39:0e:12:
1a:5b:6f:09:2e:4d:ca:8f:cb:99:f2:49:6a:5e:67:
dd:15:66:13:1c:eb:07:bd:db:64:77:a2:f1:b7:51:
32:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FD:F1:09:7D:DF:93:2D:F4:BC:25:19:88:3F:4A:8A:66:36:A7:0D
X509v3 Authority Key Identifier:
keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:81:af:8d:7c:64:55:4b:f3:61:9b:5e:d8:2b:e8:7a:9b:4c:
e5:a0:bb:d0:95:7e:c3:11:20:69:21:4f:6b:81:67:07:fb:a6:
31:b2:24:5a:26:1d:6e:32:b0:93:f2:de:9b:1b:eb:18:f9:90:
a5:2a:65:da:7a:fb:c2:64:a4:bb:af:8c:c0:43:f8:4b:e6:77:
83:a1:ed:85:84:cf:c7:a7:16:03:96:6d:c1:91:91:3c:9b:ed:
79:77:ef:ce:d2:43:09:65:d7:18:c6:9e:6a:dc:3c:15:8d:bd:
7b:40:e0:f1:38:41:c8:a6:49:17:1c:9f:b2:6f:0d:c1:89:69:
fb:5e:de:80:a7:db:2d:0b:05:6c:17:3a:6b:1e:83:48:4d:82:
1f:fd:40:29:52:96:b7:6d:b9:d4:49:4a:17:46:38:6a:ab:c6:
44:5c:9e:04:3d:69:e2:df:af:19:e1:de:b4:c5:6b:70:c9:6e:
8d:e0:7b:6e:ce:9c:f6:60:bd:56:26:19:0a:7c:c5:78:85:f1:
46:f5:e9:dd:39:81:5e:59:56:f5:b6:c2:41:c5:95:0a:21:e4:
4b:28:68:98:38:10:a4:60:8e:1f:dc:67:f5:b9:f1:0b:6c:5f:
8b:79:1f:ee:0b:f8:ff:10:a3:b3:ea:71:2e:81:4d:9e:76:dd:
a9:76:c5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:33 2025 by rpki-client