Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: eC7VzGqC2fn9+C12TYAmaQZ/b0vw5g/qwyGlQ8W5/BQ=
Subject key identifier: FA:FC:9A:53:BC:34:97:CF:D6:0E:B4:21:04:74:A8:77:AC:EE:F2:20
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 0196C6162AE3244FE8D2191FA52E1EA52C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 20:01:03 +0000
Manifest this update: Mon 12 May 2025 20:01:03 +0000
Manifest next update: Tue 13 May 2025 20:01:03 +0000
Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: 4mCmfdrl+ulmwdQdAIQgHIC8EWVrbWR1ZU0AGdVCoR0=)
2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:16:2a:e3:24:4f:e8:d2:19:1f:a5:2e:1e:a5:2c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: May 12 20:01:03 2025 GMT
Not After : May 13 20:01:03 2025 GMT
Subject: CN=fafc9a53bc3497cfd60eb4210474a877aceef220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:96:95:eb:d1:e0:18:78:9c:5a:42:fe:e9:
c1:f6:85:02:26:c3:25:b8:7a:d0:88:0d:f9:8d:de:
15:a7:76:8c:20:0a:72:90:53:ef:d7:cc:a4:82:01:
19:8f:1f:ce:1c:20:99:7d:31:71:32:29:19:1f:21:
46:38:c7:67:a4:bf:f2:69:04:6c:2b:43:51:9e:58:
a5:fe:cf:ad:7e:da:d6:cb:db:65:cc:16:14:bd:f2:
74:a3:72:6e:fd:02:cc:cf:24:8d:a4:6f:b4:f6:2f:
e3:ff:49:0e:35:91:22:ad:1d:86:14:c1:27:f1:cb:
d8:55:ba:6b:4c:06:26:72:38:44:2d:46:d7:56:73:
ff:a3:34:c2:59:d2:79:f1:df:81:9c:6f:75:9a:7e:
16:0d:34:c5:2e:e7:5c:42:d2:16:b9:8d:ab:1f:67:
a2:c2:63:3d:b1:ea:b7:dc:17:0f:e9:8e:31:a2:4d:
4c:31:1d:3f:96:68:2c:95:21:f6:17:00:ea:94:58:
4c:cc:fc:1f:80:90:08:d8:53:69:6b:52:ee:90:72:
33:ac:8c:c9:ef:87:96:e4:14:a7:51:fb:ea:d4:44:
80:38:22:3c:26:57:31:22:ae:77:fa:4a:7e:5d:9d:
a3:2a:82:a2:45:14:14:ea:f0:2a:14:ef:9b:d8:07:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FC:9A:53:BC:34:97:CF:D6:0E:B4:21:04:74:A8:77:AC:EE:F2:20
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:aa:f0:44:4b:00:0e:a7:e5:a6:c7:8f:bc:d3:e4:0f:d8:97:
d1:e5:f0:a8:0f:93:5b:c0:5b:40:9b:b6:56:3d:5c:cc:d7:f9:
b6:41:4e:7d:c3:70:c6:d0:63:3b:b5:71:ab:a7:6c:34:b2:6f:
fb:c0:73:a4:49:89:c4:5d:c4:a5:34:49:62:1f:af:b7:ff:bb:
0e:e2:1d:e8:1c:12:4e:5c:b8:52:19:d8:1d:38:96:63:49:a4:
8a:7e:86:86:fa:1e:33:ef:3f:5c:f2:b6:66:9e:ae:6b:5e:3f:
4c:d6:c3:f4:2b:17:8b:f4:02:63:14:09:4c:55:5f:0b:fb:b4:
bf:b6:c1:15:06:d4:29:74:12:75:48:fe:b1:ad:20:47:1c:0f:
3d:4b:40:89:e5:fd:89:60:db:38:79:2a:ee:05:f1:01:8e:86:
25:f8:ea:30:89:4d:01:b4:3a:43:62:88:1f:95:e4:ad:13:d0:
45:17:2f:01:e9:fb:4d:88:fb:54:9e:e4:58:75:ca:00:84:d7:
67:59:61:81:86:61:16:cc:a8:c8:70:34:fd:e3:6e:e4:87:19:
16:c6:37:c3:9b:18:4b:98:cf:41:ff:e9:13:64:52:16:a9:f3:
fe:2d:b0:2d:be:98:53:b3:ee:a8:84:11:f3:60:0d:45:bb:78:
e2:03:44:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:58:18 2025 by rpki-client