Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier: RfIN4SgMrbCQcmhLPkh5cHpLrNTCVg+pZ/Z/tehFpow=
Subject key identifier: D7:AB:8A:DA:0E:89:95:B0:B8:7A:AF:B2:4A:A2:25:2E:75:A5:80:9A
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 0196B558F7E34D95F938ADE39B89BCA38A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number: 0A05
Signing time: Fri 09 May 2025 14:00:28 +0000
Manifest this update: Fri 09 May 2025 14:00:28 +0000
Manifest next update: Sat 10 May 2025 14:00:28 +0000
Files and hashes: 1: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: sAFRpU0Xc9Iui577oO1ewLOO78RlcjlACCKVdxXTEb4=)
2: wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa (hash: oOyNKTQaCSCE6Wpivc9w4AbPACJjW6ReZk27bCRwMBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:58:f7:e3:4d:95:f9:38:ad:e3:9b:89:bc:a3:8a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: May 9 14:00:28 2025 GMT
Not After : May 10 14:00:28 2025 GMT
Subject: CN=d7ab8ada0e8995b0b87aafb24aa2252e75a5809a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:07:8d:e6:e5:e6:ce:85:fa:71:98:47:03:
22:86:65:bd:55:fe:05:b8:20:cf:7c:36:57:04:2f:
b3:53:7c:dc:68:d0:0d:51:07:d2:85:a4:86:f8:56:
93:e0:d5:cb:f2:9a:cf:34:40:bd:e0:20:4e:01:d0:
79:92:1d:23:63:c5:db:99:16:af:58:34:be:7e:02:
ef:4b:44:d1:0d:67:d0:a7:d8:6f:81:63:8a:f5:b8:
0a:f7:ff:21:07:c2:70:5a:f3:1a:6b:05:20:a1:62:
4b:df:57:f8:3e:d7:b3:de:66:4b:5a:2c:4b:09:2e:
ca:62:f8:c7:8b:92:ee:bc:12:c8:4c:c1:f6:36:27:
eb:fc:bb:e6:94:f9:18:2c:55:dc:06:83:0f:a5:5d:
d5:0c:71:dd:39:7e:96:25:c1:3b:dd:db:68:18:90:
15:f5:71:70:e9:0e:a9:46:05:82:78:65:b2:d2:7a:
2e:96:ce:58:26:98:48:19:2a:4e:39:50:b0:26:5a:
60:54:30:c3:fc:67:62:07:ec:fd:72:ff:fd:24:5b:
02:65:bf:b2:fe:7b:59:bd:25:19:7b:96:10:6e:5a:
cf:14:aa:f6:f2:f2:0d:45:b0:a0:09:9e:6b:27:e5:
48:f2:fd:6c:73:a3:2c:cd:e0:58:70:87:54:80:d6:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AB:8A:DA:0E:89:95:B0:B8:7A:AF:B2:4A:A2:25:2E:75:A5:80:9A
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c4:42:dd:cc:0e:8a:b0:c3:c1:ae:70:f6:2e:52:14:83:15:
bc:87:b9:cf:9b:2e:15:58:a8:5e:3f:b5:55:b4:64:c7:b9:71:
5c:97:12:5b:64:3f:cc:d0:fb:7b:ee:6b:34:5c:7a:9b:39:75:
d2:e8:49:c1:67:27:52:06:00:c0:98:2a:2d:81:bd:82:3c:7a:
fb:13:4b:32:b3:c8:36:4d:82:2d:f5:30:82:76:da:e0:08:3e:
a5:77:ec:25:94:98:c4:0c:94:ad:5e:50:5f:60:ff:1f:d9:f1:
44:f0:46:8a:c0:66:7d:22:aa:1d:63:3e:7e:06:0d:66:6f:ad:
4b:7d:62:9f:87:a5:21:19:ea:3c:b1:5f:a7:e7:6b:32:dd:8a:
36:92:4c:b6:d5:f8:79:10:5f:e4:21:c9:34:c6:b6:70:c7:d1:
79:4f:6d:42:da:fb:67:06:70:8a:7f:51:57:07:a4:ac:db:35:
5f:23:eb:50:b0:44:40:c5:9b:99:d0:e2:09:05:4b:fc:3e:40:
b4:9d:50:94:60:15:bb:3f:f2:44:e8:74:ac:10:c8:06:25:d8:
e7:d9:7f:08:49:3e:20:ff:c8:4d:c6:67:d1:7f:80:dd:bf:fe:
c2:f3:d8:94:0f:84:7b:5f:42:1e:36:8a:ab:20:3b:a1:7a:f6:
90:bc:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:50:53 2025 by rpki-client