Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: LhKAtXqzP7m2Z7D3O8RVdQUWUKkp+lyQWbESpfMdEy8=
Subject key identifier: B8:53:9B:29:E3:82:1E:12:3A:CB:E0:6B:5E:C1:7D:6A:A6:5E:2D:54
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 0196BF379B7226429B50815D65CDDE1A29E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 12:00:14 +0000
Manifest this update: Sun 11 May 2025 12:00:14 +0000
Manifest next update: Mon 12 May 2025 12:00:14 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: bocO4k3e9YbD+hTriqOZo4Iapz52gf9U9R3iq1Sgm1Q=)
2: J_WwZWRwUeRaMtDotR_iY7Q6fWw.roa (hash: jAGifMZyJSQbsPFRP+S78wMNisVnQ/cWhKpvEThjZOI=)
3: K6nmXLryL1T-tWqAokSMk69cu-4.roa (hash: WBKa7aT4uLMRBq7574LflAMd1wdXVfKmsx/BV6lZJyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:9b:72:26:42:9b:50:81:5d:65:cd:de:1a:29:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: May 11 12:00:14 2025 GMT
Not After : May 12 12:00:14 2025 GMT
Subject: CN=b8539b29e3821e123acbe06b5ec17d6aa65e2d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:c3:b9:0a:19:e8:43:c2:5b:07:80:e3:40:
e9:13:d2:23:f2:82:84:8f:d3:5d:d5:cf:c5:96:07:
dd:e4:4b:bb:dc:1a:19:f9:21:d2:a5:3c:4f:b0:24:
2c:2c:fe:98:4c:70:5a:ff:76:61:57:dd:a1:3d:e4:
3f:6a:74:6b:c3:55:05:f1:9c:81:6f:f7:77:9d:ac:
ff:c4:de:95:ad:7c:5a:66:a5:6d:07:c3:69:42:3e:
66:fc:25:42:e5:79:95:71:a1:59:c3:b0:6b:d6:53:
5f:f0:c5:5a:fc:32:b2:20:c8:44:ca:12:7b:79:ac:
81:c3:00:8a:f7:51:f0:2f:80:b6:38:0a:c3:b5:6e:
f2:ea:18:6d:f9:f2:93:59:d4:19:97:e9:51:b8:c8:
20:43:a0:77:73:81:46:fb:dc:b4:72:66:1f:26:77:
a7:22:19:d1:3c:c9:dc:60:39:5b:94:ee:e2:c8:67:
8a:64:28:1e:5f:72:11:b2:f1:14:4e:20:3e:3f:f9:
03:1a:c8:20:cb:b4:3b:fd:4a:74:80:3d:21:34:20:
0d:68:3d:23:92:12:b8:64:9c:b2:38:90:f0:61:f5:
c1:ac:62:d7:52:ea:78:82:d4:a6:d3:2f:0d:6e:19:
1b:c1:92:56:f7:85:e0:7a:e2:81:95:fc:43:03:aa:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:53:9B:29:E3:82:1E:12:3A:CB:E0:6B:5E:C1:7D:6A:A6:5E:2D:54
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:31:d9:31:a9:07:ef:8d:b6:4f:81:4f:6b:5d:4b:d7:ff:be:
87:ae:93:ee:40:be:fa:e6:5c:d3:ce:55:e2:72:29:b7:4c:38:
b9:44:e7:32:d4:c3:a1:7d:07:3d:6f:d4:80:7b:94:fc:ab:b3:
ff:28:df:bc:06:30:77:70:7d:59:1d:2a:43:20:33:e8:75:f6:
46:5e:37:74:19:2e:c1:c4:ea:66:09:3d:5d:58:ac:e4:ff:3c:
23:4a:1c:d7:8b:ed:2d:e9:c7:f0:52:f3:8c:b3:0a:c8:6c:2f:
6d:0d:dc:b6:be:d5:84:f4:41:e5:30:9f:86:2a:27:b0:8e:61:
62:49:9e:94:d1:68:73:4e:0c:f1:bb:cf:d5:b6:8b:3e:40:00:
42:11:e6:2b:3d:f7:e6:43:09:24:52:db:6d:d3:ec:9d:4e:cb:
47:5f:86:23:29:d0:b0:66:a0:73:f7:3f:84:08:cc:50:20:05:
3e:0f:2d:6f:7a:f5:b5:5a:9c:d8:d1:19:db:20:4e:44:bc:39:
d0:74:04:11:7b:f4:f0:ef:71:de:7e:b5:f4:c1:6f:4e:ab:d9:
22:ce:46:e9:9c:0b:f0:04:aa:12:98:49:4d:c0:c8:e7:e4:ac:
c0:57:f0:11:d6:77:04:1e:58:cd:21:3b:62:6a:da:8e:f9:b5:
09:d2:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:42:59 2025 by rpki-client