Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
File: JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft (raw, json)
Hash identifier: /g8qRn0xTzTw74DUXLuf+yETycbtSkCNNdFOTsuBZyk=
Subject key identifier: 43:A9:A3:FE:97:69:0D:B7:C2:3A:60:69:F4:23:06:50:E7:46:D0:0F
Authority key identifier: 25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
Certificate issuer: /CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Certificate serial: 019681A28953C498BBE6E132BA64669D6C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 13:00:34 +0000
Manifest this update: Tue 29 Apr 2025 13:00:34 +0000
Manifest next update: Wed 30 Apr 2025 13:00:34 +0000
Files and hashes: 1: 6cDE2TEs1tcQMXNmWEOcfp5TsHw.roa (hash: /Z9kWSQkfFUGliAF6HSs16rOY5YOKoilEvtZIr4dqcM=)
2: JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl (hash: MIjgmVLOJQbAgHDMU1sqO3DbIrXQo0rF4kJeZ2zzIHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:89:53:c4:98:bb:e6:e1:32:ba:64:66:9d:6c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Validity
Not Before: Apr 29 13:00:34 2025 GMT
Not After : Apr 30 13:00:34 2025 GMT
Subject: CN=43a9a3fe97690db7c23a6069f4230650e746d00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:6b:8e:64:f4:a0:b9:cc:4c:f1:1f:5e:8b:
2e:ff:3b:28:d9:80:72:5f:fe:83:a8:ff:b1:61:51:
6b:34:5c:45:09:ab:19:aa:f0:34:66:b5:f4:25:6f:
71:16:1f:b4:f5:31:b1:db:6d:3b:22:b4:f6:cf:38:
18:eb:9a:22:5f:03:94:7c:98:22:ff:10:56:ee:ba:
66:5e:b8:94:86:a5:a9:87:7f:cd:02:8f:16:ab:76:
26:77:90:33:21:e4:25:95:d0:cd:d4:85:60:ab:f5:
2d:89:32:f1:f0:28:ad:57:b2:69:e2:08:8b:84:10:
e8:c7:b2:43:84:cc:62:80:32:23:6b:e7:67:66:7e:
bd:5b:28:36:fb:0b:4c:1e:49:ce:f6:38:18:a7:24:
ad:48:d5:8c:9f:6f:ac:fc:6e:2d:43:87:d4:ec:8f:
b6:f9:09:b3:37:b8:bb:92:62:4e:b3:08:a4:5e:2b:
8c:e3:62:01:d5:26:98:08:48:13:54:7b:f7:20:0a:
00:da:9a:0a:05:c5:f8:0a:4c:43:18:f7:1b:19:24:
d2:a7:39:1c:6b:09:b1:86:61:75:f2:75:6d:eb:c7:
2a:37:6e:4f:fc:dd:cd:9c:a1:ca:c4:6e:62:85:c9:
c9:8b:84:e6:9c:19:e4:9d:45:93:f2:ea:94:35:09:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A9:A3:FE:97:69:0D:B7:C2:3A:60:69:F4:23:06:50:E7:46:D0:0F
X509v3 Authority Key Identifier:
keyid:25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:13:c8:a1:20:8e:0c:ff:8c:9f:ae:5a:b5:2d:2b:16:15:95:
36:c8:b8:5c:4b:54:fd:f1:71:f5:fc:67:55:a0:19:59:f1:16:
30:1f:de:57:dd:87:ff:d0:2e:fa:31:aa:50:7e:ce:e5:b6:4a:
86:dd:8a:a0:43:b6:3b:75:7f:b1:4d:77:73:23:d7:c7:fd:b0:
9f:08:78:ab:88:98:e6:ff:c3:fa:9d:78:04:86:7f:6d:49:80:
35:be:4b:bd:2f:5a:87:10:47:39:db:60:36:2b:90:b1:f7:b7:
a1:b7:09:42:30:5e:f2:03:1a:34:74:37:23:c8:ae:4d:da:ce:
42:11:c8:74:a7:79:17:21:66:3f:e0:f1:c9:37:a8:bb:5e:73:
f1:a0:1d:5c:35:fb:94:48:9d:0d:8b:ac:a9:00:c7:9d:4f:11:
a1:21:07:04:f5:88:db:7a:ea:b3:88:80:4d:e7:04:44:6d:56:
d4:06:63:26:0a:f5:33:95:dc:4b:fd:4d:ed:80:66:5c:8d:32:
20:33:3e:eb:c0:31:3f:39:1c:73:a0:1d:ed:df:bf:8b:41:30:
79:18:0c:2c:67:b6:a0:83:b2:db:6e:b2:26:4a:a2:4f:7a:0a:
04:c9:d2:23:84:b0:02:27:73:1c:19:da:06:51:d2:f2:9f:b6:
f8:54:a4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:35:53 2025 by rpki-client