Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
File: r0j2f1P86YkdQVk6yEyuMEq_y88.mft (raw, json)
Hash identifier: +jG6PwGYW6eW93K9zWM4B68zonccMtHgNPRO5dboPT4=
Subject key identifier: 8F:19:55:58:C3:18:DB:CE:4A:34:5C:D9:01:D2:82:88:F8:55:2A:BF
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial: 0196C0EF0DAE98848267F85CAE79236F0B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 20:00:14 +0000
Manifest this update: Sun 11 May 2025 20:00:14 +0000
Manifest next update: Mon 12 May 2025 20:00:14 +0000
Files and hashes: 1: LJm4ejx93tTGGSMSp9-CoJADCNU.roa (hash: enkxB1ym9D6j6OauD2B7/3J70MmuSWDzwk6AA84rwRE=)
2: Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa (hash: comS5qd1rLPpE+d2v/ddO3rLzCRrN86e4IPWwWweF9Y=)
3: r0j2f1P86YkdQVk6yEyuMEq_y88.crl (hash: jE2GI75VlQtcLoxqn85OISmGAkGZ9gLZ9CyQUPTcuZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:0d:ae:98:84:82:67:f8:5c:ae:79:23:6f:0b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Validity
Not Before: May 11 20:00:14 2025 GMT
Not After : May 12 20:00:14 2025 GMT
Subject: CN=8f195558c318dbce4a345cd901d28288f8552abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a7:7c:c1:60:2d:b1:92:82:d7:45:1f:ae:71:
c0:6a:02:07:d4:37:71:76:96:ec:06:6a:23:6a:7f:
f8:14:7d:c9:af:a1:f7:0b:c2:a0:a8:a0:6f:42:3b:
75:68:ea:80:2f:c4:6a:d9:6a:69:3e:b7:e4:8f:81:
53:14:34:a9:d0:63:2c:d7:bb:2b:7e:6b:d7:4b:af:
54:7a:3a:86:0a:cb:b9:0b:6a:bb:08:88:49:19:c8:
31:bb:c2:2c:12:e8:47:2c:cd:d5:15:20:14:8a:05:
4f:b7:ee:3d:b9:65:e9:72:d8:b7:5f:1f:fc:8e:fc:
84:59:f8:2a:c8:4c:7e:26:be:ea:7f:0f:7c:56:a0:
6c:e5:92:7a:74:88:e7:d5:15:60:9f:33:5f:03:3c:
84:58:76:99:e5:28:f2:e9:18:a8:30:c5:5a:dc:98:
99:eb:81:04:48:c1:e7:21:f6:4d:4f:04:53:1a:b8:
6b:5e:ee:97:bd:d0:9f:3d:d1:cb:e9:77:30:80:62:
53:8e:8c:aa:25:2c:88:d3:b7:91:1b:8b:e0:df:ba:
13:40:37:24:51:d2:80:be:d2:e4:ee:56:47:f7:92:
38:4f:19:61:b4:1e:b1:5b:2f:59:27:24:79:08:fa:
dd:48:9f:ad:40:e5:9b:22:fb:1f:94:bc:a5:5c:81:
57:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:19:55:58:C3:18:DB:CE:4A:34:5C:D9:01:D2:82:88:F8:55:2A:BF
X509v3 Authority Key Identifier:
keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cf:e7:0d:22:67:79:20:15:03:80:b4:91:09:34:1a:02:11:
fc:2a:68:84:98:f2:b7:a8:2c:dc:b0:c4:e0:ee:ac:88:37:d4:
3e:44:f3:69:65:aa:52:87:70:37:f3:ae:38:9e:ae:c7:5a:3b:
cd:fb:0a:4a:52:56:29:1b:48:2b:29:d4:fd:cb:12:8d:fe:8e:
bc:7a:0f:13:ac:12:55:31:b7:e9:b2:94:f4:55:18:87:f4:27:
4d:aa:0b:cc:2d:2d:36:07:dc:3c:30:43:75:c2:d1:50:78:4e:
a3:2b:ee:00:b9:07:f5:f9:4f:84:3e:f1:68:08:07:ef:6d:db:
40:5c:ab:aa:6b:48:ba:f6:8e:77:d3:de:89:2f:a4:5e:37:fe:
11:dc:61:8c:43:21:a7:d0:23:5c:3b:6d:f7:73:54:f1:83:c4:
b2:4f:0a:50:33:0d:7f:0a:df:ad:fa:41:c8:5c:3f:fa:ab:4c:
8f:7a:ec:2c:2f:c1:cb:a9:7a:ae:b9:7b:b3:e9:11:59:53:ee:
72:ee:6a:5f:0b:ef:fa:dc:58:14:b1:2b:8a:a4:0e:2d:34:39:
71:3e:39:85:51:65:98:ec:8e:e6:f4:0f:ae:f0:83:d6:cb:d6:
40:81:53:77:75:0c:b2:ab:13:44:f1:97:de:00:95:98:d4:fe:
ab:f5:cb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:12:18 2025 by rpki-client