Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier: /ZjrtgiOoG7t++8Zqxz8KLIKX/g4Epkp3mqEi4h5K+U=
Subject key identifier: 0C:57:93:12:F3:61:F6:CD:85:DB:93:A4:B2:6E:2E:0E:F4:48:4B:7C
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial: 01964E59E667C890DF257745A623D1B651E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number: 09EC
Signing time: Sat 19 Apr 2025 14:00:36 +0000
Manifest this update: Sat 19 Apr 2025 14:00:36 +0000
Manifest next update: Sun 20 Apr 2025 14:00:36 +0000
Files and hashes: 1: RW_H_ESDaZiZhgwMqK0qV1tKkxQ.roa (hash: 8rlM5Gf4dfcpQSnuob8gpQKJA3IonaJYfplAZEgt4uw=)
2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: 670WItUx+0LZgPNhpgTG9li+O3ozPudGXk4rfYdQLAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:59:e6:67:c8:90:df:25:77:45:a6:23:d1:b6:51:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Validity
Not Before: Apr 19 14:00:36 2025 GMT
Not After : Apr 20 14:00:36 2025 GMT
Subject: CN=0c579312f361f6cd85db93a4b26e2e0ef4484b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:94:48:10:1b:18:67:67:39:60:b0:88:0a:
a2:f2:82:57:a5:ad:ac:39:e0:35:ea:7e:23:38:12:
32:19:f5:6c:3d:a0:d2:48:25:a5:07:57:5f:ba:78:
2c:5e:89:b3:9e:8d:80:ac:ad:17:71:eb:94:9d:ab:
c9:a7:3d:67:c3:83:a6:d7:46:63:53:fd:11:a9:55:
55:b3:8b:11:f6:ca:82:65:f5:cb:65:ba:74:b6:e5:
73:12:7d:f1:83:5f:bc:e8:cc:51:10:d8:c7:9f:ec:
07:63:e4:4d:1e:47:b9:71:fb:07:54:b6:a9:16:6b:
e6:de:b3:4b:13:33:16:21:f4:61:f5:2a:42:99:ae:
a2:92:2b:75:e7:8d:3a:63:91:39:7e:1e:07:ba:c1:
1a:c3:fb:13:1b:2a:a1:61:d0:05:af:50:de:a5:6e:
60:d3:a1:0a:4d:68:d4:d9:90:b9:4b:f8:60:3a:a0:
44:8d:72:80:7e:84:25:40:d1:ef:2e:56:89:f6:1e:
11:6a:45:47:5c:46:58:1c:27:5c:d7:62:e9:fa:e0:
29:04:5b:e6:1c:9f:c6:8e:09:ae:e3:d9:0b:25:5d:
3e:b6:b8:9a:a1:d0:d5:9f:de:15:63:08:9d:e2:ce:
12:52:55:ef:d9:9d:00:49:ad:85:65:57:a0:89:43:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:57:93:12:F3:61:F6:CD:85:DB:93:A4:B2:6E:2E:0E:F4:48:4B:7C
X509v3 Authority Key Identifier:
keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:84:88:75:ed:c3:5a:98:16:16:b9:84:f5:13:70:c9:12:d0:
33:89:ec:3c:b3:bc:81:54:bc:e2:d5:14:da:ed:7b:cf:2a:15:
38:eb:8d:79:0b:8b:7e:42:d5:aa:12:e1:ab:60:62:0a:ab:e4:
b9:06:52:71:7a:b0:dc:7f:10:6e:cc:bc:dc:28:c6:de:a0:1f:
7f:63:35:ea:26:2e:8a:69:43:74:e9:31:81:b0:b0:41:fe:82:
5b:ce:30:38:77:e8:ec:f9:cc:56:15:0b:fa:47:c5:f7:e6:62:
70:85:b8:4d:4d:81:55:4a:b9:72:40:7b:e0:1d:5f:b4:c1:11:
de:33:96:c8:05:06:bd:cb:fe:14:ac:05:0c:7b:74:0e:4e:84:
a8:34:c9:c7:84:16:af:7d:78:7d:44:fb:a3:13:5d:a0:c0:cd:
99:a7:f3:5f:b7:b8:5d:59:77:6c:32:e0:df:f0:59:d1:89:0b:
bb:b7:5a:12:84:b0:10:5b:f1:54:3e:ef:5e:d9:98:00:e0:85:
a5:e6:34:d6:20:1d:77:00:27:24:ce:3c:f6:f6:93:52:71:7d:
9a:4c:36:28:cb:dd:3c:27:3f:95:37:bc:08:df:95:28:6b:7f:
bb:c3:22:ad:ff:1d:b6:be:4d:e4:b4:a7:ae:75:86:7c:9f:30:
1a:24:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:17:01 2025 by rpki-client