Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
File: mjfe_wVaUdk-HtL3xzIX12B6jPI.mft (raw, json)
Hash identifier: 0sJ+9/1NReK0Z0vPXb4FShBdeRYSyY7qcWwIHUMZAco=
Subject key identifier: AC:D6:9F:B0:AB:29:B0:85:C3:AE:99:CE:95:8C:90:F1:FB:DC:ED:53
Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
Certificate issuer: /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Certificate serial: 01964D101F79891051C8CABB17CAD853C3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
Manifest number: 02C5
Signing time: Sat 19 Apr 2025 08:00:24 +0000
Manifest this update: Sat 19 Apr 2025 08:00:24 +0000
Manifest next update: Sun 20 Apr 2025 08:00:24 +0000
Files and hashes: 1: YxveI4ih6pTB1sKFupGdm18Smzc.roa (hash: dR429rKnleksdPGeSDctkW6MMPKSaofQtmcnafzS7xs=)
2: mjfe_wVaUdk-HtL3xzIX12B6jPI.crl (hash: ysZVD/yMKmsg5FBBs9MakzyxNif/VCWRyTFp0H8H6sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:1f:79:89:10:51:c8:ca:bb:17:ca:d8:53:c3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Validity
Not Before: Apr 19 08:00:24 2025 GMT
Not After : Apr 20 08:00:24 2025 GMT
Subject: CN=acd69fb0ab29b085c3ae99ce958c90f1fbdced53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:a8:8f:d7:2b:9e:39:c5:82:81:7a:af:45:
5b:12:f3:bf:df:92:6c:43:64:f8:95:9f:a3:de:65:
dd:19:e9:2f:bf:41:49:bc:51:68:39:e8:8e:0b:fe:
78:4c:2b:4d:67:c6:47:8d:3d:4b:d7:9a:bf:0e:35:
05:fb:5f:8e:48:4f:04:7e:b5:d6:7e:42:7a:2c:a9:
52:1f:c5:3c:69:60:af:99:09:c8:0f:27:5f:10:86:
8c:88:83:9d:f2:3f:97:c4:5f:46:97:0b:0d:ad:7d:
d3:48:22:a8:63:53:f2:e2:1e:c3:37:be:e0:a8:26:
d5:7a:a3:64:c7:33:24:98:d5:59:05:de:75:3d:5b:
dc:00:8e:b6:12:3d:b6:5c:77:c9:f7:72:8b:a8:3c:
37:85:91:c4:63:77:f0:89:b0:19:ec:8d:3d:be:55:
67:fb:8f:b8:d1:74:3c:1e:3f:6b:9b:68:b7:0d:bd:
b2:21:a1:74:f6:72:90:65:48:1c:fa:b4:ad:14:39:
c7:d2:38:e4:17:70:50:f6:42:85:91:9c:9b:42:5f:
b3:3a:72:fd:b2:73:a1:ed:34:37:51:18:99:2b:16:
f8:10:97:ab:81:cb:c3:81:ea:de:f0:5b:fa:26:d4:
50:13:a8:fb:19:28:bf:30:e5:44:a3:bf:ac:1a:c5:
64:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:9F:B0:AB:29:B0:85:C3:AE:99:CE:95:8C:90:F1:FB:DC:ED:53
X509v3 Authority Key Identifier:
keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5d:d3:e3:6c:fd:5b:10:73:17:4a:28:cc:5b:4b:06:a6:a3:
69:8d:f6:a2:6f:92:98:32:31:0a:b5:15:b8:c4:13:27:e3:2a:
fa:05:f8:82:f5:85:b5:ff:7c:32:dc:1e:3e:0b:94:c0:ee:ac:
3f:a5:17:65:f0:65:51:d8:5a:be:3e:4b:dc:e7:7c:37:31:ca:
79:8b:af:2f:4f:31:c6:b0:04:ce:6f:ae:5f:61:10:bd:d2:02:
0e:8c:fc:48:54:84:36:5c:f6:5d:2a:e6:dc:cc:1c:03:39:08:
41:33:f6:85:a6:a7:c9:0b:6b:ce:ed:74:40:ab:37:51:82:4f:
5f:c7:36:0a:16:31:24:2c:e1:6b:0f:06:0c:c5:24:46:80:37:
34:49:84:ed:01:18:c1:3a:ea:96:ea:7d:2c:9d:90:75:4a:c7:
c5:a3:92:8f:71:d7:2b:f7:a7:e8:3d:82:7b:6b:c4:c0:1b:18:
82:5c:bb:b4:54:b4:33:0b:71:be:38:3e:d5:b9:ec:69:12:ab:
94:bc:f4:8f:56:f8:50:b6:a0:80:65:df:5d:7b:71:cb:a7:3f:
dc:91:a3:9c:d4:97:fe:cd:eb:05:b9:34:b2:d4:ee:16:4e:7b:
0a:e2:b8:2a:e5:3f:38:f3:6a:f6:a9:50:76:0a:25:8a:f9:20:
02:d2:a1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:05:49 2025 by rpki-client