Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: uTTyW/gzqgtTe1F5sDeFyC21cvHiJkrOWTCUvjwkdrY=
Subject key identifier: F5:8F:2F:4F:03:C2:B4:7F:A8:E4:8F:D1:57:05:78:E6:11:33:34:6D
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 01964A0FEA0B81BB2C60E5B1298C4DE70487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 127B
Signing time: Fri 18 Apr 2025 18:01:18 +0000
Manifest this update: Fri 18 Apr 2025 18:01:18 +0000
Manifest next update: Sat 19 Apr 2025 18:01:18 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: m8IplzKqglUPvJB94Zb8kxyY22f7eVTrypZTXupXOoY=)
2: KEydF7bMk6RADdNKhYi6WFKpHSw.roa (hash: bl+U1VafH5Wzj+g/exETARmZ+DznhEsF7Fa2nlPP/i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:ea:0b:81:bb:2c:60:e5:b1:29:8c:4d:e7:04:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Apr 18 18:01:18 2025 GMT
Not After : Apr 19 18:01:18 2025 GMT
Subject: CN=f58f2f4f03c2b47fa8e48fd1570578e61133346d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:46:c6:fd:98:1b:4f:58:f4:dc:db:8d:8b:
73:af:b3:bd:dc:78:46:0b:e5:a6:d5:9d:71:22:49:
9f:81:c3:e9:b1:80:1e:ac:a3:3f:db:b6:72:e2:78:
65:b8:74:c6:09:1e:9b:ea:d0:a2:88:52:10:5e:22:
d9:8c:df:b1:19:69:67:81:83:87:c7:dd:cf:87:f6:
7f:41:31:f4:c8:df:99:5b:d4:97:d5:59:33:bb:fc:
07:68:e4:3e:d9:38:95:51:32:f5:77:f0:f6:d7:26:
aa:55:56:ec:b5:63:cf:6c:d3:06:27:a1:a3:84:d5:
61:cc:e6:67:c4:e6:83:71:df:35:9b:0b:3f:97:8e:
2d:b0:5e:0c:64:b5:9b:ea:a3:07:2d:01:09:f7:df:
ff:ac:ec:e1:46:ee:6a:8b:51:3c:a0:ec:3f:32:f4:
b8:18:43:91:8c:a2:e9:bc:3e:88:d9:dd:e8:1f:30:
dc:2d:58:0f:86:fd:fb:7a:9b:c1:d0:4d:c0:f3:19:
29:e0:b5:8f:54:d1:02:3a:30:3a:46:51:55:e5:5b:
7a:a9:49:d3:3a:f9:ef:66:c7:c7:ee:7e:58:53:0a:
7e:2b:1b:89:02:67:88:d4:8e:5d:9d:b4:84:92:95:
f8:10:49:43:f8:9c:4a:3a:a1:be:eb:4c:73:57:a3:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8F:2F:4F:03:C2:B4:7F:A8:E4:8F:D1:57:05:78:E6:11:33:34:6D
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:dd:06:67:30:3d:21:cf:ec:9b:4e:2a:2b:8a:bb:38:6f:f5:
d4:66:3d:aa:03:96:7d:8a:5b:28:55:32:62:7a:aa:51:6e:09:
40:64:4d:9b:e1:6b:c1:25:89:0a:0c:3e:9e:52:20:9b:6d:31:
05:c8:55:85:36:b1:c6:43:27:27:b4:cf:d1:f8:2c:2c:6f:d3:
85:31:f0:93:37:cb:c3:cc:6e:e1:73:70:12:84:cf:90:15:97:
fd:a7:9d:30:05:00:cc:14:68:cb:9f:cb:cd:13:7e:5f:7a:f8:
75:73:b6:61:7e:cf:72:97:59:3e:35:e8:25:b5:d0:b3:67:37:
a9:8a:97:7a:f0:b8:d3:db:7e:de:b7:7f:53:e5:20:8e:f6:3d:
30:a0:3a:55:50:74:b2:53:e8:c4:d5:34:dc:78:92:41:c7:7f:
4a:55:11:21:84:db:9e:65:3d:fe:8f:de:a1:f0:c9:5c:f1:55:
a3:40:92:7b:b3:cd:05:c0:59:bc:29:8b:45:77:e7:3f:3f:6b:
47:25:cb:de:44:64:2c:10:30:25:17:bc:3c:e0:35:bb:06:53:
74:50:8b:11:f4:f2:8d:84:a5:df:42:c8:ea:ef:29:35:34:d9:
a2:49:c6:7b:2e:0f:ef:a5:1d:0a:e3:87:95:a3:a0:64:ed:12:
83:dd:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:00:21 2025 by rpki-client