Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: GN4bUqyAuD6sDOec55wImUfMIxUTFz4uC06wY0eusuk=
Subject key identifier: A6:CA:35:9A:B8:FA:9D:59:31:69:92:C9:A7:76:85:BC:87:A1:D6:2A
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 019652365042A0A456D2F858C6C08F8CB9D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 148F
Signing time: Sun 20 Apr 2025 08:00:13 +0000
Manifest this update: Sun 20 Apr 2025 08:00:13 +0000
Manifest next update: Mon 21 Apr 2025 08:00:13 +0000
Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: iojQKgwF/FdCn/yBW7tcIKFl+x+/HP6GM5MyNxnVr6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:50:42:a0:a4:56:d2:f8:58:c6:c0:8f:8c:b9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Apr 20 08:00:13 2025 GMT
Not After : Apr 21 08:00:13 2025 GMT
Subject: CN=a6ca359ab8fa9d59316992c9a77685bc87a1d62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3f:fb:11:b8:ae:5b:5c:e7:fb:fa:f8:1d:dd:
8e:ad:a1:84:d6:9c:15:f2:b4:cd:3f:e0:ca:a2:e1:
4e:d7:ed:ed:cf:c3:e7:08:39:57:37:31:7b:9e:65:
25:7f:bc:3c:a1:8f:d9:c6:1b:b0:0c:0f:be:f2:73:
9c:f4:c9:a5:e5:36:d1:b1:ee:93:ed:98:01:20:61:
45:e8:7e:f4:ec:be:4b:d7:c1:aa:0d:7f:08:60:15:
30:04:ac:8c:0a:4a:d7:49:90:a5:95:e7:78:3e:38:
6a:ab:cb:cf:ad:54:f0:a3:ea:68:7e:d5:bd:b1:9e:
92:43:28:88:1f:42:97:f6:7e:b3:cb:54:a1:9b:c2:
58:e8:5f:8a:0b:d1:8d:61:c2:62:55:46:c3:a1:70:
59:67:2b:5d:32:26:86:4b:bb:80:b8:c9:05:f3:57:
c5:f7:5b:f8:7a:06:15:a6:5d:f4:75:08:ab:d2:46:
09:3a:15:2d:65:f1:05:0c:7e:29:1d:cf:93:20:2b:
7f:8d:7e:13:ff:33:9d:5d:c8:c9:34:9c:b4:43:09:
b6:77:15:69:64:16:0a:03:36:c4:e6:a4:b8:e5:cb:
ba:bc:cc:42:6b:34:15:c6:2d:5b:bd:cb:a5:63:63:
28:93:56:07:43:fc:4c:bb:3e:26:ca:26:c0:30:38:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CA:35:9A:B8:FA:9D:59:31:69:92:C9:A7:76:85:BC:87:A1:D6:2A
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:76:74:36:1c:5c:e5:4c:cd:ed:3a:5b:f4:cb:18:cc:f2:9a:
de:93:d3:f4:69:97:29:a4:af:e9:69:e6:e1:ec:bf:cc:0a:6d:
68:2a:fb:9d:60:36:62:93:ba:fd:26:02:45:d0:9a:b6:f0:51:
15:76:69:c2:08:59:2e:a2:5f:d7:5e:39:30:b5:da:b5:f7:48:
20:e4:2f:12:40:df:a6:22:bf:bc:b7:f0:27:c7:c6:cc:e2:0d:
44:ed:78:62:6f:21:9d:50:d6:c2:48:33:80:1c:65:3f:df:78:
f7:27:ce:1f:e2:be:9c:fb:53:cd:b4:c1:db:80:4f:8a:c7:2a:
7b:0f:54:84:88:46:d8:e1:ac:7f:2a:80:4f:c1:0b:7d:23:f2:
dc:a6:05:02:ca:64:f9:80:08:e7:80:bd:4c:37:14:59:96:2c:
e6:ae:cf:d3:c9:f1:1c:fd:13:61:c5:79:40:1b:a7:53:fb:6e:
a3:7e:13:3e:3a:7b:60:ca:75:d4:0d:07:38:41:be:ef:ed:4c:
e2:b3:dd:77:4d:60:22:00:0c:2f:9e:ae:fd:29:49:57:c8:fa:
81:9e:9c:49:cf:02:a6:2f:73:96:a0:4c:58:44:bd:13:2d:11:
e5:24:36:0d:06:d2:1f:cd:dc:ea:9f:91:45:e9:7a:ee:3a:ca:
41:31:6a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:45 2025 by rpki-client