Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: TlqNsBQ6JA8rNJ36prtw1z2VheXBOlyI934NwQ5qKD4=
Subject key identifier: B7:05:4F:57:94:7D:A8:5E:BD:93:43:A6:65:40:DE:1D:E6:E8:37:E3
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 0196B77E797B2ED4AE45AE39379CDFE883F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 1025
Signing time: Sat 10 May 2025 00:00:41 +0000
Manifest this update: Sat 10 May 2025 00:00:41 +0000
Manifest next update: Sun 11 May 2025 00:00:41 +0000
Files and hashes: 1: ExwmpmCoQJo2OxTGvS9tBUVoCTI.roa (hash: 5uKveASNNkoz3m6Z/IoI5wPaRI1/s/iR92XdJr3b/vs=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: NDP80SK+uCeugwZqpwaHq2O8tt/FUnP9DHl/b7oIGr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:79:7b:2e:d4:ae:45:ae:39:37:9c:df:e8:83:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: May 10 00:00:41 2025 GMT
Not After : May 11 00:00:41 2025 GMT
Subject: CN=b7054f57947da85ebd9343a66540de1de6e837e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:b2:9e:d2:3e:f1:91:83:07:8f:18:12:b6:
ad:5b:39:64:26:bf:e6:eb:5a:e5:18:52:c1:8b:6f:
d4:21:54:54:0a:cb:0f:15:77:62:86:a4:8e:79:22:
58:59:7d:69:dd:55:2e:86:37:aa:d3:71:ec:cd:e0:
0e:db:31:e6:df:15:34:a3:1d:41:51:0c:c1:a0:91:
e9:99:2d:3b:f8:06:47:77:9b:c5:16:49:32:e8:51:
4f:7c:0a:1c:c6:d4:a4:31:7d:c5:a4:22:3d:2a:81:
0f:23:76:95:94:90:f4:31:24:ed:c4:33:68:f0:8d:
71:89:89:69:41:03:1b:21:2b:af:d9:c1:0c:93:08:
32:87:ee:21:9e:27:ea:0b:be:7d:e2:7d:70:4e:9d:
74:c7:45:e2:78:f7:f5:3e:08:15:e0:a7:75:45:58:
0d:18:61:da:b2:6f:9d:0c:00:70:5e:14:e9:d9:69:
d0:e7:98:13:16:53:cb:b6:38:89:d9:88:37:5f:ee:
87:a0:d9:b4:c4:0e:33:e7:27:11:00:2a:80:b4:c0:
08:ca:35:17:77:64:95:42:4d:00:62:df:78:6b:f8:
39:60:e9:ed:46:a9:03:40:1b:45:8b:d3:57:6f:c6:
88:39:05:25:ab:ae:14:f6:e7:4e:4b:01:be:3e:bf:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:05:4F:57:94:7D:A8:5E:BD:93:43:A6:65:40:DE:1D:E6:E8:37:E3
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7e:01:3b:a3:19:91:06:88:89:06:17:a5:3f:36:ea:99:9d:
d5:5f:42:1d:17:3f:65:e5:8e:0b:83:5d:e9:8a:a4:60:72:29:
03:14:67:ed:ec:a0:ee:84:05:2c:9b:c4:1d:c5:54:82:97:d1:
16:17:5b:be:09:90:03:1f:8d:cd:5d:2d:9a:0d:78:29:d8:8b:
5f:32:8e:6a:6b:b8:2e:0e:15:26:74:cf:3f:46:99:3e:0e:ec:
8a:53:56:bc:5d:78:c8:a1:6e:ac:0a:df:b0:3e:87:06:07:36:
26:8f:2f:df:ba:7a:b1:0d:9b:94:ba:17:7e:d3:43:d7:b5:ba:
a5:89:0e:30:5e:6a:65:31:17:14:ea:5e:35:2d:0c:9d:15:5e:
65:34:7a:95:e8:eb:1b:85:2c:54:e1:73:e0:e4:a7:10:21:9b:
35:f2:9b:e6:04:61:16:4a:50:43:20:b1:5e:e4:93:f4:b5:f0:
de:fd:4f:12:92:cc:62:8c:70:e2:f0:de:97:c1:bc:b8:10:82:
c2:77:1e:0e:51:17:88:9a:3a:8f:d0:27:3e:1f:08:ef:41:f2:
93:77:14:07:5a:09:82:0d:55:37:7b:a2:95:b3:3b:af:57:ce:
37:4f:56:0e:d4:82:53:be:f2:ee:d6:f5:e6:5e:52:8a:ab:bd:
76:e6:f5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:27:08 2025 by rpki-client