Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: kYiAAAes7ThJr5fYI8AxFypCp5SD20iBGKwWag0hgyA=
Subject key identifier: 17:14:D3:1A:93:FC:C6:69:63:72:B5:C3:8B:AA:2D:DA:49:55:84:2C
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 0196760CFAE3E75703BC0D191850126E04A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 1242
Signing time: Sun 27 Apr 2025 07:01:24 +0000
Manifest this update: Sun 27 Apr 2025 07:01:24 +0000
Manifest next update: Mon 28 Apr 2025 07:01:24 +0000
Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: HmB3NgS/4gGGSGSkA4hTGgmnCg2NQDqwDlSVklpCKjc=)
2: dc8PgnhayzDZSzqf3yg7QDbNGi8.roa (hash: J+tA+61lQEEvu8m1aPgIRjodULbBtcVS6a22ypCO1hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:fa:e3:e7:57:03:bc:0d:19:18:50:12:6e:04:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Apr 27 07:01:24 2025 GMT
Not After : Apr 28 07:01:24 2025 GMT
Subject: CN=1714d31a93fcc6696372b5c38baa2dda4955842c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:a6:dd:50:fc:4c:12:47:42:05:8b:0b:40:
a0:3e:c5:e9:7f:fe:ca:83:d3:bb:4a:77:ea:bd:29:
34:64:98:40:56:b8:49:fa:74:76:82:a4:11:ba:84:
c4:07:71:32:cd:3d:b1:ab:d6:0c:a4:76:a4:72:47:
d1:63:07:d7:33:1f:ac:b0:d4:98:82:0e:14:79:22:
26:f9:43:18:40:28:31:11:2d:14:30:6b:12:15:2d:
24:6f:c2:68:16:c9:d2:1f:05:fe:0a:37:38:32:7d:
7d:12:a3:86:46:88:a1:1a:ec:11:22:3d:1c:57:c2:
5a:0a:1d:45:81:fd:f6:fc:97:87:1d:a5:c5:27:72:
64:3e:bd:30:9c:a0:18:db:f4:6a:da:bc:dc:8e:8f:
bd:72:0e:5a:ac:c7:67:bf:fb:2d:3f:c3:c3:5a:ce:
b4:ad:e3:0a:92:c7:2d:94:c3:ca:47:f7:a0:1d:b9:
19:ed:20:18:4c:ae:eb:34:b1:40:b2:cb:1c:45:0e:
17:3f:fa:de:a5:e8:07:93:b3:bb:2a:f2:fa:8b:a3:
eb:46:db:4a:12:ae:e7:17:fd:a2:5d:14:ca:ba:32:
69:50:b1:86:4d:fd:2e:9a:b3:c3:eb:f3:1e:fc:4d:
1b:4c:ee:78:7e:d9:85:22:df:58:05:62:c6:7f:29:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:14:D3:1A:93:FC:C6:69:63:72:B5:C3:8B:AA:2D:DA:49:55:84:2C
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d3:ba:5f:2e:93:b8:c9:bd:16:26:04:7f:ba:7a:b6:db:b2:
a0:d6:32:93:48:c9:9e:d6:dc:03:47:b9:6d:dd:71:0e:6d:57:
ad:a3:95:31:36:00:44:47:e4:12:d4:d9:a3:1b:fd:50:b3:2a:
7e:dc:fd:e9:7f:c5:14:d8:ea:b5:71:84:1a:6c:c3:6d:02:1e:
ee:c8:f1:1f:ff:3b:37:96:72:46:75:ca:13:73:01:19:cf:4b:
ae:5e:23:30:37:7e:f0:d5:74:08:21:72:c5:79:b4:df:5c:8f:
b4:59:0f:a2:70:aa:59:65:a8:cb:a3:9b:5b:73:79:52:1e:cc:
1b:a4:8c:83:11:86:aa:a3:ad:63:94:67:8a:fd:83:a4:1d:65:
e5:36:3f:3e:ea:36:bf:f8:90:2a:91:fe:4e:b8:49:e5:c0:be:
39:08:9a:d9:72:1f:b3:4f:e5:06:8d:04:3c:02:56:99:3f:78:
02:0f:94:a9:50:49:b1:b8:a7:41:44:de:4c:3f:a4:73:50:77:
d4:63:c0:cb:26:6b:3a:a0:48:30:aa:9a:88:a0:53:14:77:9b:
ce:bf:f3:d1:0c:bc:96:c2:ba:f7:b4:f3:af:4d:38:95:53:b6:
e4:2c:34:77:c1:f1:0c:1f:62:3a:01:7b:24:ba:72:bb:40:5b:
2a:a1:87:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:32:29 2025 by rpki-client