Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: seAOK/GGIUecBaHhm03m7YIarI0tiYN+w0U2yh8ORPE=
Subject key identifier: 42:2F:65:87:A5:16:55:73:C6:0A:64:F2:94:EC:8D:CE:D4:BB:63:E7
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 0196342D21E4F90550D9EC697DAB72DAA764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 14F0
Signing time: Mon 14 Apr 2025 12:01:35 +0000
Manifest this update: Mon 14 Apr 2025 12:01:35 +0000
Manifest next update: Tue 15 Apr 2025 12:01:35 +0000
Files and hashes: 1: 1IvUdF6sc26gQi1PrEF2at2Gu_w.roa (hash: v/QlU4UHuYWzg7iCrnrdYQGm1IMje67B6F+Jo7o9yAA=)
2: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: XBK6YJmDCczlTRQ6ZOO7GtykQ/rKsDTh9zGPQKnQ5PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:2d:21:e4:f9:05:50:d9:ec:69:7d:ab:72:da:a7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Apr 14 12:01:35 2025 GMT
Not After : Apr 15 12:01:35 2025 GMT
Subject: CN=422f6587a5165573c60a64f294ec8dced4bb63e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:ea:f0:4e:c1:a9:12:f8:33:20:de:fc:2c:
36:f3:a3:be:4e:4e:ca:a6:25:7c:c5:91:b8:68:d0:
84:67:ff:1e:f9:f3:d6:63:5b:e1:dd:0b:49:00:de:
19:5e:99:0c:fb:9a:a9:17:24:ca:cd:d8:80:77:5d:
7a:9f:d3:09:f4:05:89:28:5d:4a:7c:d2:98:6b:3b:
f4:13:23:46:29:b0:17:4a:52:26:ef:33:bb:39:86:
fc:65:59:ae:80:43:35:27:f2:92:4b:40:62:b0:b3:
63:cf:12:4c:ca:17:9d:92:8f:0b:5c:b5:cd:eb:bf:
f0:ba:ed:c5:74:2c:30:17:e3:b1:bd:6b:71:30:90:
c8:b0:58:17:d2:d6:f6:eb:05:0c:20:7a:94:0c:b9:
02:3d:0d:9e:97:0a:dc:70:47:f0:fa:bd:4a:88:82:
d0:dc:96:ea:a0:29:e4:ce:85:cf:9b:d0:27:4c:0d:
09:2e:c8:52:84:75:c0:83:ac:4b:a8:70:b5:f5:a2:
16:f9:c5:35:9e:74:36:98:8e:4f:ad:07:55:56:dc:
27:c9:b1:9b:30:96:33:c8:49:aa:73:08:15:8a:5d:
f1:59:c4:32:fb:e3:32:ac:5a:c8:ff:33:3d:fb:74:
ef:17:4e:ec:2e:4c:df:c1:1f:9d:44:61:19:d8:75:
64:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:65:87:A5:16:55:73:C6:0A:64:F2:94:EC:8D:CE:D4:BB:63:E7
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4b:5b:90:ea:71:06:99:b2:97:23:32:33:24:03:16:f2:dd:
01:56:c2:01:a9:f8:3e:be:cd:42:c6:08:ec:b4:34:9d:54:cb:
39:f2:36:96:92:9c:53:f2:ef:55:36:15:c1:2d:ba:e2:b4:22:
98:fc:14:59:f0:af:c8:77:c3:89:ad:a5:a0:3d:cf:5e:de:4c:
45:90:65:24:67:fa:54:f1:99:8b:65:09:54:da:e2:bb:6e:75:
6c:2c:a0:ae:49:39:82:0c:d5:94:11:99:b3:0d:b0:48:f7:80:
2c:07:ce:28:3a:69:a1:6a:0b:32:67:a7:8d:9a:e0:f0:de:c0:
36:f8:f4:22:89:23:13:d0:d0:0e:ac:77:4f:f8:ac:d4:10:4d:
bd:79:f4:a2:23:9b:29:7e:26:54:51:b0:f5:a1:72:f9:1a:0c:
9b:38:3e:61:3f:b0:56:b7:86:9f:f8:97:1c:00:c8:3d:34:28:
0f:cf:ba:ba:55:ff:78:57:3d:85:83:48:b1:61:2a:a4:c1:29:
a3:fe:78:f0:66:df:9d:5e:8d:8a:85:ca:1e:c9:bf:a0:93:b5:
b8:6c:40:27:78:c8:8d:58:ad:72:f3:66:1a:2f:c5:99:8d:b7:
a1:af:94:64:3b:48:d2:c1:c0:50:7d:2d:e9:82:42:ad:07:be:
e9:b4:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:36:35 2025 by rpki-client