Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: 383hLkb/w26HGghmefAcdZb36YfO57IxMAzSZ6LZOkM=
Subject key identifier: 41:A1:97:FE:37:B2:36:A1:D0:80:AB:8E:F1:79:2E:2C:D0:78:92:E7
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 0196A80B7A3479EEE64E6943CA67AD785116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 0DEA
Signing time: Wed 07 May 2025 00:00:46 +0000
Manifest this update: Wed 07 May 2025 00:00:46 +0000
Manifest next update: Thu 08 May 2025 00:00:46 +0000
Files and hashes: 1: GQxkJdIQ2mMnuH7dZw47ZjRqiOY.roa (hash: j81MHjapkMDfvn23UflaNVCyJQMSfhc/nd+jMYFAbFo=)
2: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: SQ7+41BClPDufJYycHtwnrUfxvH68WfNxMLgZEP91xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:0b:7a:34:79:ee:e6:4e:69:43:ca:67:ad:78:51:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: May 7 00:00:46 2025 GMT
Not After : May 8 00:00:46 2025 GMT
Subject: CN=41a197fe37b236a1d080ab8ef1792e2cd07892e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:02:ca:68:7f:3d:2f:b7:08:74:b8:c5:07:
3d:b1:8e:c0:24:12:f9:e2:11:8c:93:d1:53:f2:36:
84:fa:57:39:79:87:2e:89:86:a1:27:d9:3b:c9:f2:
a5:dd:dd:28:bf:4b:f0:7c:c3:fb:b9:e2:78:e4:63:
c1:dc:ff:9c:6c:84:69:64:5e:23:be:83:7c:a0:da:
24:8c:ee:07:91:11:b6:d2:f1:c0:f8:8f:04:42:68:
29:22:4c:b0:c4:b0:4b:db:84:f8:29:1c:49:e4:bb:
0c:3d:22:bd:86:d7:e8:0d:a4:52:d9:63:da:a6:9d:
1f:e6:fb:fb:92:98:ec:33:26:33:c3:da:f6:f0:9d:
0f:19:6a:d0:57:6a:49:69:e8:e6:49:e9:14:01:3c:
a9:8d:ce:61:3f:43:65:d4:42:9b:16:35:37:b4:17:
95:9b:60:8d:ac:83:d8:bc:51:95:05:d6:3a:86:1d:
1a:da:f7:07:54:40:af:e5:c7:bf:de:95:86:f7:1c:
96:84:1a:56:89:76:e2:f6:cd:b1:7b:c4:e1:b4:81:
61:08:dd:bd:af:15:43:60:67:33:0f:d4:7e:db:8a:
6a:2a:92:97:ab:1d:45:53:63:10:d0:51:d8:bf:e8:
76:9d:a9:d5:63:05:aa:cf:1f:47:fe:05:6a:b4:d9:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A1:97:FE:37:B2:36:A1:D0:80:AB:8E:F1:79:2E:2C:D0:78:92:E7
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9f:ce:d8:24:f0:f7:d9:95:f9:91:d8:a3:62:a5:2f:88:8e:
dd:82:77:9e:9d:38:97:23:ea:5b:f9:cf:4d:e7:e0:d2:92:e1:
a6:30:d2:4c:e8:a6:05:cc:9b:7e:32:eb:d1:53:cf:94:86:20:
6a:78:94:fb:7b:26:3d:a8:78:e6:00:79:1b:a0:4d:a1:0a:10:
4a:ca:d5:e7:6a:2e:f9:72:c3:93:c2:63:ba:d0:89:8a:ab:53:
98:f7:5c:cc:84:e0:03:c7:73:c5:ad:fe:85:16:69:61:33:cf:
72:da:51:04:aa:98:9c:48:e8:1e:bc:ba:42:c9:5e:5f:3c:36:
1c:2c:df:81:74:0a:a4:d2:b4:ff:1d:35:b4:f4:32:99:f2:60:
bd:d3:c1:a5:09:a7:05:7a:49:58:92:fb:12:ed:7a:57:45:e6:
91:dd:50:02:ea:8f:37:8f:0e:03:39:f6:b6:0a:29:94:0b:dd:
d1:dd:cd:f4:33:eb:61:3e:f1:25:a8:08:d4:45:4a:fc:bf:32:
4f:64:fc:55:c6:e6:16:1e:b3:a4:40:42:20:2d:d5:9b:36:c4:
89:30:83:f5:2e:a1:d5:ec:83:c2:0c:8d:5d:ae:ca:57:ed:4a:
6a:4e:3f:08:80:e6:0b:cc:da:c3:9d:91:f0:bc:29:18:0d:22:
56:00:03:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:24:18 2025 by rpki-client