Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier: rkaAaiRaH6S6mrVF3KqLNGIn9BQTpi78jOCMJzLmdQ8=
Subject key identifier: 11:EA:A7:AC:EA:18:3C:81:14:1D:E3:90:49:3C:FF:24:44:61:BB:F0
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 019655DD2AFBD6FE359796131E86D89EFC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 01:01:19 +0000
Manifest this update: Mon 21 Apr 2025 01:01:19 +0000
Manifest next update: Tue 22 Apr 2025 01:01:19 +0000
Files and hashes: 1: gUp9W6gdzA4HeeDeBLYOgieiGro.roa (hash: lrN/LUw9qbgMyjQd+6zHffB/Q9YQH49/9bc6+74QbTo=)
2: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: FQbs5socOnzZu6OLogzyU/idj2qiyehzZiVLjRhdoU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:2a:fb:d6:fe:35:97:96:13:1e:86:d8:9e:fc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: Apr 21 01:01:19 2025 GMT
Not After : Apr 22 01:01:19 2025 GMT
Subject: CN=11eaa7acea183c81141de390493cff244461bbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:5e:d4:5b:ce:b2:a9:8a:f1:70:d7:4c:23:
23:bc:96:0c:ae:0e:0f:9d:2b:dd:bb:75:c3:3a:5c:
a4:43:9b:c6:0f:77:4b:76:bb:94:10:de:ff:90:0c:
86:51:59:8d:7d:92:43:f1:b6:a3:f6:f5:8b:bd:5d:
96:37:95:b5:47:18:96:8e:6c:37:f8:83:f5:67:ec:
fb:ac:05:50:ed:33:2b:a0:4c:46:b4:5f:33:de:ac:
c0:91:e6:8b:8b:d5:4d:11:44:e9:4a:d9:d4:37:1d:
0a:04:57:26:c6:d7:b2:87:f5:99:15:21:0a:0f:e3:
5a:85:3a:4f:05:87:b9:90:60:b4:78:a0:7f:d8:33:
57:89:b1:da:39:4d:16:a3:aa:fe:99:48:e9:7f:98:
fa:bf:63:34:9f:10:78:59:63:3c:71:0b:09:f5:b1:
b8:cc:c9:bd:19:71:44:0e:fc:ff:bc:f8:32:b1:54:
b1:a5:3d:9a:ca:f1:0d:fc:36:7f:4f:d5:15:e3:01:
ea:b4:f5:00:d8:ae:af:11:6c:23:2c:33:c5:31:8e:
3b:e2:bb:cb:89:97:b9:76:83:02:a8:cd:83:9c:58:
a0:3d:e2:d0:80:3b:5d:8b:eb:ef:87:e2:e5:53:b8:
bb:cc:20:a7:74:8c:7d:bb:32:67:14:a5:f4:c8:7a:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EA:A7:AC:EA:18:3C:81:14:1D:E3:90:49:3C:FF:24:44:61:BB:F0
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:69:77:f0:2e:96:61:f1:3f:87:a7:f8:6d:23:49:df:e2:1d:
da:2a:85:6c:1a:21:02:75:25:ee:70:e4:c4:04:1f:83:96:40:
49:c9:e2:ab:f9:25:13:cc:50:9a:a5:bc:e1:0e:d7:f3:5a:0c:
ab:ae:ae:8f:52:26:fd:91:76:a7:b8:c2:e7:b9:a3:a0:c4:f8:
82:1c:94:e7:03:e7:5d:a3:c8:a5:2b:b1:0e:cc:65:15:e2:56:
89:de:a1:6e:52:17:ee:4e:4a:31:64:09:21:ee:f1:10:2e:6b:
ae:5f:89:ea:e6:76:dd:06:89:5d:17:33:4e:d1:dd:78:79:95:
e6:95:5f:96:77:6c:41:ee:b2:bc:b8:71:b7:8b:c2:4e:a6:ac:
c1:83:d1:df:cb:f4:09:da:15:07:ae:0c:3a:fc:11:8d:76:13:
6d:0e:a0:b0:2e:56:71:42:4b:1b:6c:8a:bf:54:47:34:ca:24:
0d:79:af:20:f3:02:7a:ee:9a:97:4e:f2:a9:32:fc:12:6a:6a:
e0:3d:64:93:0d:2f:fa:3e:a4:f2:68:18:d9:1b:78:93:4e:eb:
59:c9:8a:d8:bf:95:67:39:82:77:b6:d6:5b:f2:a8:4c:6a:7b:
fc:c1:2a:cd:1e:21:87:db:f6:39:4f:fd:c4:3a:00:cf:c5:a5:
7e:b4:52:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:08 2025 by rpki-client