Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: 97pNcFTLLMT2IsFZ0E7RuD0+pRVMl9P4xaVfv1tUT4Q=
Subject key identifier: 0C:1C:85:43:47:22:99:90:7B:53:95:58:B4:40:E4:CB:E1:D9:CC:B6
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 01958F2A9CA270CB40709AE102D8546035DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 142A
Signing time: Thu 13 Mar 2025 11:01:29 +0000
Manifest this update: Thu 13 Mar 2025 11:01:29 +0000
Manifest next update: Fri 14 Mar 2025 11:01:29 +0000
Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: rcGgNFtjs9NifM6ok5XtP94G/9UqTPG1/fmmRBA2lG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:9c:a2:70:cb:40:70:9a:e1:02:d8:54:60:35:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Mar 13 11:01:29 2025 GMT
Not After : Mar 14 11:01:29 2025 GMT
Subject: CN=0c1c8543472299907b539558b440e4cbe1d9ccb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:2c:6d:35:af:c5:98:ae:2e:d5:89:60:df:
6e:2a:11:37:ed:77:94:63:af:89:07:93:de:31:78:
a4:6b:6b:25:aa:c9:1d:d9:12:42:4c:0c:81:c4:ca:
57:b1:cf:c3:65:e4:ec:c5:fd:ef:cc:17:5a:c9:56:
0a:99:a3:59:94:80:b2:9c:09:60:48:be:47:0b:00:
e5:c8:09:e4:09:61:a7:23:e3:83:ce:2c:48:68:3a:
54:be:88:9c:41:82:15:8a:a0:e4:19:31:56:7c:65:
46:c4:cb:9e:19:ec:bf:ea:84:df:7d:b5:30:79:ac:
af:8e:ca:71:78:ef:54:12:6f:24:31:d3:14:37:a2:
cf:84:a5:26:74:39:44:83:3d:d1:b4:dc:2a:ee:dd:
b9:a1:bf:a2:67:bd:5c:d0:11:fe:02:f2:10:4c:91:
c9:0c:37:0a:59:a3:d5:87:82:36:ea:5d:6f:8e:04:
8e:a7:72:e2:0d:a9:c8:bd:0b:a7:91:73:01:11:46:
62:d4:e1:0a:95:2a:8c:b4:95:54:24:d5:58:40:92:
17:cd:06:f6:6d:03:3b:14:9c:d2:e6:d6:2a:77:34:
1e:ba:e5:a9:78:53:df:be:84:67:71:78:85:8e:13:
08:d9:19:53:37:43:dd:9f:ac:cd:1e:d0:a7:77:69:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1C:85:43:47:22:99:90:7B:53:95:58:B4:40:E4:CB:E1:D9:CC:B6
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2c:d3:7a:53:20:07:1f:2f:87:63:ed:42:8e:27:9f:19:a4:
7f:ba:0d:6c:f6:64:11:14:29:2f:de:47:70:fc:26:63:02:47:
10:d0:12:1e:ed:69:c6:a5:fc:6c:4f:2d:fa:99:0f:62:6c:dc:
7c:c1:20:db:0a:7d:5a:b2:59:31:0d:9d:49:d4:7d:00:b7:a9:
2d:bd:b2:b0:98:b7:35:f0:e4:ea:05:ed:eb:a9:5a:50:f1:0c:
92:07:66:9d:58:98:62:24:80:13:f4:3e:81:5b:78:d4:ce:f2:
7c:3a:22:00:01:13:a9:d4:65:bb:b3:33:1e:59:82:95:80:9f:
12:21:4d:93:46:a5:6e:57:05:e9:10:4c:62:67:51:f2:44:15:
14:3a:5b:ca:c2:07:c0:1c:42:56:d7:de:2c:fc:3d:c7:c5:b4:
b3:0e:88:57:cf:94:33:7d:da:b5:05:ca:2f:f7:f1:6e:72:72:
65:98:f0:66:3a:89:8a:cd:50:e9:99:ba:c5:d4:a8:aa:06:52:
13:99:1c:9c:a7:74:6f:31:d8:5b:8f:fa:6c:24:bb:49:40:3a:
1c:8d:fe:f5:19:32:c7:9a:e7:28:77:a3:e2:93:89:65:63:7b:
f1:1a:71:3e:40:e8:11:49:03:c0:10:9b:24:a6:8f:a9:fd:23:
5f:73:cb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:36 2025 by rpki-client