Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: GOBIR94OVrpVL9CjZoVGmxefv1LiUdNDn4TpUdeBJuU=
Subject key identifier: C5:20:AD:9E:EC:88:86:CE:CB:87:46:FB:6A:54:3E:14:46:A6:4D:C7
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 0196BC005A5CD56D965FEC28F2F62F07E486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 1242
Signing time: Sat 10 May 2025 21:01:01 +0000
Manifest this update: Sat 10 May 2025 21:01:01 +0000
Manifest next update: Sun 11 May 2025 21:01:01 +0000
Files and hashes: 1: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (hash: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=)
2: hdN3TWiGF-v4lVfB-_MZbJp6BC0.roa (hash: FBzq8JkLasFx9OYifFuQNiKO30TthScuWNWKtgQWVSE=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: T1dOqOZH/ZUqmRsEZWPAz6EEWewUSViwEEFBfCqOhfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:5a:5c:d5:6d:96:5f:ec:28:f2:f6:2f:07:e4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: May 10 21:01:01 2025 GMT
Not After : May 11 21:01:01 2025 GMT
Subject: CN=c520ad9eec8886cecb8746fb6a543e1446a64dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:ee:24:43:ce:d5:07:51:7d:67:d3:80:85:
16:5f:96:69:89:56:18:38:f4:0f:eb:97:3d:e5:27:
6e:be:ab:a4:4d:17:c1:88:65:eb:2c:26:0a:cf:3a:
0d:8e:04:ef:66:1e:fd:e7:40:a6:d1:66:46:34:43:
b0:dc:ef:aa:9c:7b:79:a9:aa:c3:be:81:55:65:eb:
45:97:f1:1f:cb:4c:50:74:5e:d0:e4:6b:de:2f:07:
54:cf:6a:fb:7e:c0:d5:1d:1d:17:ff:de:9d:37:7e:
2d:25:02:44:96:be:ad:c3:70:f8:51:ef:e4:d9:cf:
f1:21:53:fa:e7:96:15:7c:26:0e:e5:72:e0:02:1c:
45:24:e6:cf:bc:33:e5:e5:0e:db:41:b5:17:e7:43:
0e:01:d8:1a:49:ae:e2:03:3d:33:d5:ec:7a:68:3a:
54:4e:9d:f3:80:e2:ca:90:a9:f7:42:7c:4a:94:a9:
24:0e:3e:1f:3f:04:5e:b2:a6:05:6b:a1:e6:e8:4c:
b9:97:2d:64:01:be:a9:d5:20:c5:68:66:c2:83:42:
28:1b:c8:32:be:68:27:b4:19:75:1d:7e:88:0b:ef:
ec:ee:68:9a:ba:ec:76:ff:eb:25:74:b9:6e:d0:93:
58:3a:79:ef:19:b5:25:7a:2b:4d:77:b5:f3:d6:42:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:20:AD:9E:EC:88:86:CE:CB:87:46:FB:6A:54:3E:14:46:A6:4D:C7
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d6:fc:c9:b2:4d:d1:ec:62:a1:e4:94:d8:16:3d:c8:12:c2:
b4:b7:71:94:68:21:b1:a3:85:b0:18:5a:34:85:be:32:3c:f6:
d6:33:25:b3:11:96:16:f2:06:46:30:b4:e4:80:c1:99:7a:7f:
e2:7c:aa:64:48:35:0c:ca:92:d4:6a:88:71:1d:ff:20:46:ac:
1f:b4:86:1a:9a:da:74:f6:27:5a:60:b1:34:82:94:9f:39:2c:
d7:f8:d1:0d:cf:5f:48:a6:df:5a:20:d5:bb:7c:0d:74:98:fd:
4f:c8:18:64:13:90:a7:f6:07:82:e9:cc:cf:06:8e:a4:01:b2:
85:6b:50:ba:f9:df:45:8d:6b:5e:f0:54:72:8e:47:51:e1:95:
01:49:30:c7:c1:3c:3a:02:5e:9a:a1:0f:c9:ac:ae:7d:3f:1e:
89:be:0f:e9:a8:d6:b7:fa:82:b1:59:ff:5e:e9:85:f9:c4:51:
af:96:ee:97:05:ae:af:5f:40:0a:ab:5c:c9:be:59:b4:44:82:
57:70:d9:1c:7d:74:b7:de:9e:11:6f:38:92:05:c7:98:d9:ad:
e1:ee:ad:ef:c6:bd:50:f5:d0:ef:69:0e:8b:92:1c:30:b1:89:
cb:24:79:82:5f:3b:e5:9c:7d:35:1d:45:2d:90:03:ae:13:81:
13:9b:c9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:50:12 2025 by rpki-client