Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
File: jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft (raw, json)
Hash identifier: hUOFnpN94XHPvZnSwiavekYbNqj/kl5366MdvyowSjQ=
Subject key identifier: 3A:AF:7B:0A:DB:EF:D2:9B:15:8C:38:84:BE:B3:68:7C:20:20:82:28
Authority key identifier: 8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
Certificate issuer: /CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Certificate serial: 0196B935B40C219DFB8C6DE2C2F344D55954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
Manifest number: 0480
Signing time: Sat 10 May 2025 08:00:26 +0000
Manifest this update: Sat 10 May 2025 08:00:26 +0000
Manifest next update: Sun 11 May 2025 08:00:26 +0000
Files and hashes: 1: 960ydd6N5IVjJ8SKw0-cCFu0l5A.roa (hash: vdzIyqJL7Fj4rd7R5SOUV3BY5/WQ96AWM5L49KfXiUE=)
2: jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl (hash: 5HcriLbsrPKGzLx5j8/4v3UgL1EsKus2AtrKR9XslGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:b4:0c:21:9d:fb:8c:6d:e2:c2:f3:44:d5:59:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Validity
Not Before: May 10 08:00:26 2025 GMT
Not After : May 11 08:00:26 2025 GMT
Subject: CN=3aaf7b0adbefd29b158c3884beb3687c20208228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:9d:fc:13:ce:05:39:6b:c3:ff:ec:4d:6c:
4b:7e:48:44:42:92:6f:89:ef:74:fe:af:98:6d:87:
a7:90:e6:32:f3:4e:2b:97:81:21:09:57:c9:4a:1f:
65:39:d0:b9:1d:7f:52:03:ae:54:e7:97:d7:ec:cb:
36:06:f4:d2:11:09:52:b6:3e:f5:97:6c:bd:89:57:
70:d1:59:ff:16:da:19:33:09:96:e9:a3:8f:80:ed:
2d:a1:09:69:d6:3a:4b:02:e6:2a:2a:d0:8b:f3:68:
ae:06:24:eb:5c:5e:15:3c:6a:7c:6d:6d:dc:28:ad:
76:eb:b9:9f:dc:88:a8:b8:4c:35:9f:50:76:d2:b1:
97:21:23:90:5e:8f:3f:49:8a:96:12:d7:20:4a:3a:
df:37:82:9c:1f:4f:e7:bb:da:c4:3e:f2:01:89:9f:
3b:a1:2b:16:5c:d2:2b:1b:82:cc:db:76:c4:56:bb:
7f:ec:2a:86:2a:75:54:3b:da:48:2f:e9:b1:d1:ad:
a6:02:e6:cc:93:d9:30:9c:61:ea:e2:85:45:5b:30:
24:f5:47:0f:91:01:c9:cc:59:99:17:f1:62:b4:a5:
32:e8:67:6e:07:b5:1b:c1:01:93:96:f0:97:23:42:
50:fe:12:44:3a:7a:70:8b:82:b5:6d:be:c3:99:7d:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:7B:0A:DB:EF:D2:9B:15:8C:38:84:BE:B3:68:7C:20:20:82:28
X509v3 Authority Key Identifier:
keyid:8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f2:42:ae:fa:20:6d:da:52:f7:8a:1d:81:db:1e:1f:e5:80:
ff:66:43:b8:68:c4:e5:5a:69:70:0a:c4:72:84:01:c9:34:10:
c5:a1:69:1f:20:47:57:0a:3e:a2:4a:f3:3a:3f:be:f0:cf:44:
47:96:cd:57:81:42:0f:6c:fb:db:54:b5:62:81:f7:c4:93:ab:
e5:44:c0:d8:72:b9:63:44:e1:3e:04:ff:96:a2:8c:df:11:a1:
2c:e8:ab:ab:e8:73:9d:00:da:34:f6:97:06:04:6f:cd:ae:d8:
59:cf:8a:9b:47:a8:4a:ed:3c:23:3f:b2:b0:30:ab:27:94:e4:
c7:26:04:0b:f3:53:31:37:83:22:d6:a2:7b:63:4e:d2:06:56:
13:4c:a4:24:65:87:4e:51:d9:3e:ff:ff:f7:3b:d0:b3:32:d8:
d9:1d:41:9b:4d:13:36:77:c0:03:fb:57:70:21:0b:5e:bb:36:
d8:79:08:56:16:39:64:51:a5:4b:05:9b:8a:23:16:0b:37:15:
16:b8:13:14:20:3b:7a:d2:03:04:c2:2f:01:e7:3d:6b:1a:bd:
a5:ec:43:fc:bf:79:90:96:40:e3:63:63:b0:ab:71:45:75:c3:
06:53:62:78:18:d7:92:13:4e:97:6c:d2:ce:58:16:87:48:cf:
be:79:ea:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:49:51 2025 by rpki-client