Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier: d6QyQS5P7hXTPTNa1qa+pZg3YYdJWUdFwdlfbXeRi/w=
Subject key identifier: 21:CF:AB:CA:5A:19:97:C9:E6:19:0C:58:91:EF:56:2F:AE:54:C3:6D
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 0196B47D5AA0B6BF1553AFCBCC06183C4A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 10:00:36 +0000
Manifest this update: Fri 09 May 2025 10:00:36 +0000
Manifest next update: Sat 10 May 2025 10:00:36 +0000
Files and hashes: 1: gUp9W6gdzA4HeeDeBLYOgieiGro.roa (hash: lrN/LUw9qbgMyjQd+6zHffB/Q9YQH49/9bc6+74QbTo=)
2: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: zlyYF9wrD2N4DT1NjiUHH/3dne8mAFrfE/Q2YTWyWP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:5a:a0:b6:bf:15:53:af:cb:cc:06:18:3c:4a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: May 9 10:00:36 2025 GMT
Not After : May 10 10:00:36 2025 GMT
Subject: CN=21cfabca5a1997c9e6190c5891ef562fae54c36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:bd:37:4d:0d:c5:04:ad:ff:5c:1a:bf:59:
c0:8a:4f:99:00:95:7d:33:84:ec:1d:e3:a1:25:ca:
e9:98:9c:9d:d6:6a:2b:99:b6:ab:eb:c2:c0:61:52:
89:6f:d7:70:70:4b:dc:1c:2c:b7:4d:02:28:fa:96:
23:ef:08:49:07:c5:d7:bc:5e:29:be:ed:a5:2d:ea:
6a:cc:b7:cd:93:b3:61:6f:c5:ca:a5:df:3f:3f:81:
e8:99:95:5c:f9:27:d3:70:c9:0d:4c:f5:2a:8b:1d:
4a:ae:ce:a0:30:0d:bb:aa:c8:f6:a9:ea:4e:f9:5b:
d1:51:64:f0:70:31:4c:d9:06:44:a6:d2:65:19:07:
ae:f1:43:30:da:ef:88:15:66:00:34:8e:1a:2a:26:
79:61:9a:e5:40:19:37:ed:4b:07:db:fd:c4:1a:2f:
cc:aa:03:93:26:b3:76:10:87:aa:15:0e:15:6b:73:
a4:cd:68:43:3a:3c:db:42:54:01:83:d5:c1:8d:67:
c7:82:de:25:cb:d9:f4:2d:de:8d:47:d4:fd:20:1d:
3a:47:1b:41:67:4e:7f:84:b7:fa:9f:c1:57:4a:20:
37:2b:6c:11:74:99:34:51:37:80:21:f2:00:08:7d:
cd:51:8f:f6:9c:6d:96:90:51:d5:c3:d0:1c:6a:4c:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CF:AB:CA:5A:19:97:C9:E6:19:0C:58:91:EF:56:2F:AE:54:C3:6D
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:83:94:85:5b:59:5f:49:28:15:9e:dd:92:cd:80:9a:5c:22:
2e:2c:7b:07:a5:ff:48:8e:a2:e2:e9:05:64:9e:61:28:66:5f:
df:3d:86:48:4e:62:9f:70:bf:a8:6f:b8:7a:c0:b9:a0:96:92:
40:0a:ba:b1:e7:a2:2c:8a:f4:54:ce:c9:cc:d9:d7:df:88:ce:
2f:c6:e3:98:96:97:6a:c1:49:9b:98:07:1a:c3:51:30:4a:1c:
a6:59:6d:9d:8a:52:22:37:a5:fc:3a:4d:d7:c8:33:e1:6e:1e:
b0:29:54:58:f1:21:51:1d:92:89:65:83:2f:46:46:93:66:58:
0c:a2:d2:31:25:7e:ab:a1:50:a4:d3:cf:5f:3f:32:52:7e:15:
f0:83:7f:0f:9d:ea:1c:94:ba:1e:b5:8f:ad:70:9c:5a:bb:84:
9d:92:b2:5a:20:7e:43:21:b9:22:99:54:5f:2a:9a:e4:b4:c4:
42:01:0e:4d:6f:c3:25:7b:6b:1a:eb:48:59:b0:8d:87:4e:17:
9f:ee:08:be:7e:0a:ed:0c:cf:63:80:ac:c7:0c:89:0d:69:7e:
0d:d8:c3:dd:d8:04:ee:d8:16:f5:1e:42:31:4f:e3:77:11:13:
a2:6c:6e:e2:cf:98:08:d4:e3:81:06:a9:64:2c:8e:15:8c:a9:
94:a1:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:47:16 2025 by rpki-client