Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier: La5VzFZSLkFO2KIM4s+qO+wJhXznUSw5HwsxMfTux/8=
Subject key identifier: E8:EB:19:29:9B:71:F2:4E:55:AA:E5:67:8C:04:F7:41:00:6C:B1:AE
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 0196BD49431E03418C81BC25B77CDBF64FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number: 1254
Signing time: Sun 11 May 2025 03:00:17 +0000
Manifest this update: Sun 11 May 2025 03:00:17 +0000
Manifest next update: Mon 12 May 2025 03:00:17 +0000
Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: kFp6AeD+tLi+6RqYWy79cGaVBPyZB/3V14RiEvQsktE=)
2: 7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa (hash: 9coWzyh+KYo6PjWXvZi4r37a7LcyA66ZeCRl9p/oIqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:43:1e:03:41:8c:81:bc:25:b7:7c:db:f6:4f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: May 11 03:00:17 2025 GMT
Not After : May 12 03:00:17 2025 GMT
Subject: CN=e8eb19299b71f24e55aae5678c04f741006cb1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2c:0d:08:23:c0:19:42:f2:ab:e2:81:d1:dd:
ce:da:9d:1e:76:1e:3f:59:ef:44:5f:ff:71:a9:7e:
5a:31:bd:2c:f7:db:8f:2e:04:4a:e2:83:83:37:11:
c1:ec:2d:50:a0:eb:42:34:3f:77:f1:de:6e:0f:a2:
b5:41:0b:f9:fd:58:f7:06:03:b8:16:f6:ac:af:04:
f8:2b:0d:0f:2c:5a:0e:9e:27:46:93:0b:48:01:12:
d3:b7:8d:64:16:60:b0:70:7b:4f:c2:84:1a:88:38:
be:4d:bb:a0:9e:e1:e1:9a:6a:57:31:4a:23:ae:a9:
6c:96:e0:82:9f:89:70:fb:e0:4f:20:ed:45:66:9f:
06:a7:da:e6:08:b4:2b:49:a2:ad:5a:1c:14:39:d3:
c4:8e:85:8d:82:fc:f5:d7:32:ac:1d:2f:b5:5a:ef:
0b:19:43:07:c8:31:bb:52:71:90:81:a1:7d:ae:2a:
e0:71:47:c9:85:ce:44:97:3f:45:f0:d8:49:b4:82:
fa:cc:d0:65:1c:6e:82:93:74:85:01:20:e0:d5:1e:
aa:2a:4d:2a:ca:d4:c8:3c:7f:67:d5:14:23:1a:4f:
85:c3:a3:d2:81:58:95:d9:4d:18:e4:8d:98:31:ba:
52:93:a8:9c:3c:06:18:bd:08:ad:1b:2e:79:b0:c5:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EB:19:29:9B:71:F2:4E:55:AA:E5:67:8C:04:F7:41:00:6C:B1:AE
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:39:b1:31:68:f3:4a:39:61:08:9e:8c:d6:88:1f:40:3e:09:
be:f8:c5:75:05:bf:14:ca:43:d2:f2:e0:10:c4:2e:87:8f:cc:
4f:d3:4a:e3:a3:3f:83:97:e8:1d:07:ac:17:f8:72:dd:29:b9:
11:8a:d7:77:e4:d4:ec:04:75:a3:a2:a7:06:cb:b9:1d:04:d2:
18:4a:14:9e:06:04:b0:0f:d7:c1:0d:d8:fb:25:62:b9:b1:80:
57:7c:53:46:3f:91:0f:9c:45:19:11:e8:a8:23:be:09:02:51:
16:09:23:09:d0:97:ec:75:51:73:6f:51:50:f4:ad:48:c6:b9:
7b:3b:8f:95:c2:db:da:ad:e6:f9:e0:07:d3:13:b2:43:3b:44:
ed:1a:03:4d:13:bd:1a:31:3e:dd:9a:ce:25:93:22:93:9f:36:
e3:be:95:86:31:d8:53:f3:b2:be:9e:cc:84:56:87:03:fd:7a:
25:74:fc:75:2c:98:24:53:a3:46:e1:cf:18:fa:f3:d0:d2:f4:
36:e0:74:c6:7c:46:d6:cd:45:0c:6e:d3:30:78:99:a0:71:e4:
31:d4:a9:fb:10:7b:49:7f:f2:84:31:56:93:99:8a:8d:17:3b:
88:d3:6d:83:76:30:95:cd:7a:a9:57:c7:7c:e1:d4:2b:4b:5c:
c7:03:e0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:45:58 2025 by rpki-client