Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: NWK4INBZ5RLzd6xkn9QK61q2VxF9Jkvd2E4IGGYd/vM=
Subject key identifier: 21:99:2C:20:00:0B:F0:82:7D:65:AA:D3:D1:BF:2A:A7:BF:E2:36:49
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 0196C194381E04D8D27D27FC39BF73BE8EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 121D
Signing time: Sun 11 May 2025 23:00:38 +0000
Manifest this update: Sun 11 May 2025 23:00:38 +0000
Manifest next update: Mon 12 May 2025 23:00:38 +0000
Files and hashes: 1: MXjGchA1tthe9hBaCTy34XWuIys.roa (hash: m9xSPEOr8P6pGopF9XMr9mPGzbIw3wWqJY/1QxjlC64=)
2: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: 5PBZkuCO9p5TYrv/LVu5IAv92zmfSHfgCmCwX0iRWyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:38:1e:04:d8:d2:7d:27:fc:39:bf:73:be:8e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: May 11 23:00:38 2025 GMT
Not After : May 12 23:00:38 2025 GMT
Subject: CN=21992c20000bf0827d65aad3d1bf2aa7bfe23649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:4d:9f:df:43:70:0c:36:d7:4c:c6:64:96:
45:35:dc:9a:c3:eb:1d:f3:1c:65:38:e3:f7:f5:4d:
6d:f2:af:03:1a:21:25:43:43:f0:f9:05:33:2a:be:
ff:55:2a:86:87:bf:12:7f:97:8c:c1:fd:01:c2:69:
2d:cd:cc:b1:29:a7:8b:ca:96:31:68:cc:76:f9:53:
74:5d:b0:5b:73:6f:09:d2:3e:ef:04:53:5d:34:97:
ee:d2:e6:e6:9a:f6:7d:c5:77:02:07:5c:6d:df:f5:
f2:dc:a5:0f:28:81:1d:8e:f2:5d:95:10:ca:22:c6:
88:0b:e8:ea:0e:63:82:50:57:29:d6:26:3d:2b:ac:
3d:de:e8:66:57:b9:b9:39:3b:f5:fa:06:b6:d8:29:
e4:05:3d:c1:04:43:5c:08:1c:81:58:a2:14:68:08:
6b:b1:29:60:3c:84:68:f2:8c:89:3a:3b:eb:2e:b5:
09:c0:e7:79:26:1b:ac:1c:7f:ec:55:4b:7e:38:3d:
1c:e2:cc:d1:78:9e:72:6a:22:ff:a1:bb:0b:3d:6a:
a9:ac:e2:9d:d7:84:12:b6:76:7b:2d:0e:54:a8:b0:
d0:cd:7e:83:04:75:57:7a:04:8e:db:9d:4d:be:03:
1a:8a:53:ad:bc:72:3e:4a:47:87:66:36:d9:13:5d:
00:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:99:2C:20:00:0B:F0:82:7D:65:AA:D3:D1:BF:2A:A7:BF:E2:36:49
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:f6:de:1e:fb:2e:17:d6:3d:fc:af:f5:7d:f8:c5:2d:46:71:
f3:7b:03:79:76:03:6f:6e:c1:ef:db:8f:5e:9e:71:95:f7:87:
ae:fe:6a:b1:dd:ff:b3:50:e0:0e:b7:54:d8:16:b3:3b:ae:a0:
62:b1:e3:f7:d2:38:e4:58:9c:ca:7a:b5:55:09:1d:21:1f:0f:
17:ce:0e:1b:44:9d:cd:f9:75:72:d4:ea:14:a5:e7:7a:50:b2:
27:06:c5:e0:b0:cb:ea:4e:2b:e5:9c:b2:a5:63:75:81:cb:63:
36:7a:29:1d:23:29:de:0a:b7:35:7a:fa:00:fc:5d:46:02:1d:
7f:d9:a0:5b:4f:30:b4:5f:74:ad:59:d6:3f:81:51:cf:8a:74:
f9:43:2f:d2:8c:bb:00:40:b8:67:68:f8:12:4e:37:24:9f:33:
f8:d4:71:ff:a1:6a:d1:97:f4:65:9e:fc:d9:47:79:b2:88:34:
01:44:da:07:56:34:0d:15:06:9e:af:79:99:a4:f9:4b:c1:50:
86:ab:c3:96:1c:b5:72:31:c4:f2:ff:8e:78:81:24:0f:ba:71:
d2:a6:df:b5:d4:38:43:67:f3:b5:98:c5:3d:a1:0b:d7:74:b8:
6c:37:10:97:05:87:bb:0e:ca:6a:da:85:95:80:6e:51:72:1b:
1a:97:55:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:56:56 2025 by rpki-client