Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
File: JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft (raw, json)
Hash identifier: URQ84C4hkfFvdCqtnAWw+mYzwuDL0KXotgTwA3xk/8w=
Subject key identifier: D0:E8:C3:96:EF:DE:5C:AB:1E:91:94:BA:34:D4:F6:22:78:DD:14:1D
Authority key identifier: 25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
Certificate issuer: /CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Certificate serial: 01968390997C45833BB0EC4C2175F9DD7D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 22:00:13 +0000
Manifest this update: Tue 29 Apr 2025 22:00:13 +0000
Manifest next update: Wed 30 Apr 2025 22:00:13 +0000
Files and hashes: 1: 6cDE2TEs1tcQMXNmWEOcfp5TsHw.roa (hash: /Z9kWSQkfFUGliAF6HSs16rOY5YOKoilEvtZIr4dqcM=)
2: JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl (hash: 2HKrI6PkhX1KPvffAgxiEwtJLKqdzbZUal3Hx/VF26U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:99:7c:45:83:3b:b0:ec:4c:21:75:f9:dd:7d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Validity
Not Before: Apr 29 22:00:13 2025 GMT
Not After : Apr 30 22:00:13 2025 GMT
Subject: CN=d0e8c396efde5cab1e9194ba34d4f62278dd141d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:04:a9:74:0a:91:96:72:d7:1f:6d:9f:4e:
05:a1:47:76:c2:6c:ca:16:61:e6:08:44:08:74:12:
3b:f9:8b:85:c1:e2:73:e9:39:6a:b1:f2:ea:27:e7:
b9:4b:1a:92:57:d5:42:21:53:25:81:b7:8c:41:3b:
39:2b:64:69:3d:73:d3:97:e4:51:20:f0:64:78:3f:
87:0c:14:5e:3f:7f:52:97:78:9f:1e:5f:b7:4b:0e:
de:96:fe:dc:f5:09:7b:49:a1:20:d8:8c:90:78:40:
09:82:9f:3b:6a:a1:fa:be:b0:45:69:ec:ae:43:cc:
26:29:b3:57:14:5b:f6:25:04:01:e9:90:cd:10:6a:
e5:2a:30:3f:cf:07:bf:95:87:14:15:f0:84:ba:c0:
1b:16:4c:4f:84:a7:20:9b:27:4f:d8:47:b1:36:ce:
89:d6:6f:8f:c1:ec:79:b5:02:60:38:8c:96:9a:47:
ab:ae:25:f9:fc:97:aa:cc:99:89:03:7d:82:80:0a:
f2:51:c7:1d:44:e9:a2:8a:b3:35:6d:f7:b7:86:15:
57:bb:8e:1a:43:0f:7d:62:5d:1c:5a:7d:63:c7:44:
ca:bd:39:53:f9:30:63:32:0f:05:c5:83:f5:15:d6:
dc:44:50:44:c6:2d:c2:22:30:08:8f:b9:7d:d9:02:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E8:C3:96:EF:DE:5C:AB:1E:91:94:BA:34:D4:F6:22:78:DD:14:1D
X509v3 Authority Key Identifier:
keyid:25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f5:0f:13:cd:7d:3e:0d:f9:1b:69:e0:dc:c3:8a:97:ca:6d:
85:ca:c8:79:6e:f9:81:79:87:3c:62:bd:33:e9:10:34:53:e0:
4e:bb:2d:e1:ef:7c:d8:6e:bd:e9:ea:cd:73:1b:0f:e5:27:e6:
0b:30:8a:46:82:2c:8f:b4:e0:9f:09:5d:6e:ec:96:d9:da:6b:
5f:83:08:69:2c:c1:48:0f:d8:38:8f:0c:a1:2c:f0:7c:6b:83:
31:0d:04:49:b2:5d:0a:0e:5f:6b:7c:ab:4b:ef:4f:68:0e:02:
da:4c:15:fa:8d:9a:90:47:eb:84:20:f1:99:d2:f8:55:22:f8:
eb:f9:c6:df:30:a0:bf:10:03:64:5d:82:72:0c:a9:90:7d:7b:
ea:5d:72:c6:c8:92:67:e1:9f:33:d3:37:50:b5:00:04:00:e5:
5b:81:30:86:56:2a:46:b8:cd:44:ea:d8:65:60:fd:b8:66:e0:
f2:c1:ba:ee:d1:20:42:10:15:a3:6e:4b:09:23:f9:b3:12:79:
9f:5d:51:63:b8:04:40:e7:4d:41:c1:31:bc:8c:ac:0a:e7:c0:
dc:8f:a3:06:d5:b2:32:24:cc:56:10:c6:35:6e:68:8a:7e:a3:
b4:c0:1c:af:51:d9:3c:e1:fd:12:62:3a:20:e7:f6:5c:4a:1a:
7b:31:da:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:56:31 2025 by rpki-client