Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: exVV3ejUUBgQUUuCIiP+XcoJzm+xMbRgNhmsxX2kIL0=
Subject key identifier: C8:F2:77:CF:7C:05:E9:05:B1:19:6D:5B:E0:D1:F2:CE:6E:F7:77:DA
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 0196A3534B1B4DAEC5AD3D9719DC2420F287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 0897
Signing time: Tue 06 May 2025 02:01:06 +0000
Manifest this update: Tue 06 May 2025 02:01:06 +0000
Manifest next update: Wed 07 May 2025 02:01:06 +0000
Files and hashes: 1: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: hR0vHmitKZDTAKOfeyYtPi+Kzz4Gr4m2vw66+Zke+Q4=)
2: y1KtkhbJcf8xMKGegKszt0QDaOo.roa (hash: MP5sL9q4mE2nj3U5Tn7LLkafXsvaYmUnSKWAsDGsqZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:53:4b:1b:4d:ae:c5:ad:3d:97:19:dc:24:20:f2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: May 6 02:01:06 2025 GMT
Not After : May 7 02:01:06 2025 GMT
Subject: CN=c8f277cf7c05e905b1196d5be0d1f2ce6ef777da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:35:99:68:fc:04:5a:bb:ca:3d:54:f2:21:14:
c3:9b:c9:1b:b6:41:77:3b:45:71:87:28:4e:95:43:
48:b5:88:18:49:d1:c7:8a:9d:34:70:0d:06:6e:2f:
33:9d:17:87:d5:c3:7b:4a:05:e0:e2:1b:31:f1:d7:
af:b3:ee:c8:b3:64:32:84:cc:47:0b:5d:75:67:09:
0c:89:f0:32:c2:8e:99:b4:e5:f7:c0:e4:2e:4f:8e:
76:16:43:26:1d:d5:b2:5e:57:9e:94:28:95:11:d1:
a8:d0:1a:7c:44:a7:a3:9b:93:8d:fb:03:ae:ce:f2:
d3:ba:21:29:72:22:4a:aa:a5:13:6f:42:22:dd:0d:
b5:66:d9:d9:97:95:64:b8:a6:e7:ac:c0:35:f1:ea:
72:2e:c0:e7:4a:31:50:54:2c:f1:b7:55:b3:1f:5d:
53:06:d2:82:e5:b6:6f:94:0e:f3:10:2e:48:fa:e0:
11:bc:5e:ae:44:77:6b:65:8f:d3:f5:d2:f8:b8:6b:
3f:4d:3d:3f:71:73:72:0a:c9:a8:31:c0:24:65:8c:
2e:9a:eb:e4:8d:00:cb:e2:b7:74:43:63:b1:4d:9b:
b7:48:11:d3:44:b4:c6:01:bb:0d:55:e1:cf:55:99:
1b:12:49:f8:e8:16:a9:56:fe:87:1f:43:14:1a:ff:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F2:77:CF:7C:05:E9:05:B1:19:6D:5B:E0:D1:F2:CE:6E:F7:77:DA
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a5:a4:fe:68:76:59:48:c6:e5:e1:9f:f3:98:a7:bc:18:3f:
c9:94:fd:be:d0:8d:81:ae:36:f4:61:75:a2:17:b5:20:7d:9a:
af:46:1a:7d:04:af:13:d2:8f:10:d3:1f:dd:83:e8:d0:6f:fc:
66:5a:4c:06:db:a9:b4:41:ed:ef:18:59:ae:f7:34:05:4c:1f:
86:c8:6b:97:d8:ee:19:6e:30:65:bf:a6:f3:e5:2d:4b:db:1e:
cc:85:00:5e:87:59:b2:5b:2f:8e:ec:cf:42:5a:9c:06:36:88:
76:1a:c6:c1:4f:26:61:27:0f:13:69:f3:41:f5:6c:e1:36:02:
94:9f:18:b0:f1:34:1a:2b:3e:5d:6e:ed:03:1f:a0:45:b8:40:
0d:94:83:52:d9:6d:e7:5b:ef:85:b5:cd:82:84:c5:8d:43:c7:
b8:7a:e6:40:85:9e:df:62:a0:07:c2:22:8f:c9:1c:77:63:d5:
a5:b3:5a:33:c4:de:a0:e8:0c:55:26:df:50:db:d9:cf:3a:db:
bf:ae:af:43:69:9c:ae:e4:24:8a:76:26:d4:f1:0e:5a:c7:d0:
20:cf:2e:8d:05:65:16:3d:8a:6c:36:9a:9a:cd:40:01:46:de:
07:2d:c7:9b:c7:3a:d9:12:aa:e6:b1:57:d7:36:72:a0:c1:ca:
9f:9b:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:55:23 2025 by rpki-client