Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
File: JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json)
Hash identifier: lg10TcZcV/AMH+I1DkDItYysCKoHcEOjbZOglyqDTuo=
Subject key identifier: 44:ED:FF:04:B5:D7:B9:07:EC:16:F1:C0:DD:6C:5C:D5:9F:2F:CE:E9
Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
Certificate issuer: /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Certificate serial: 019771BF496C145BB316D946E4835C0BD6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
Manifest number: 01CE
Signing time: Sun 15 Jun 2025 04:00:50 +0000
Manifest this update: Sun 15 Jun 2025 04:00:50 +0000
Manifest next update: Mon 16 Jun 2025 04:00:50 +0000
Files and hashes: 1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: CET6BgBWyOyKGQhnwJ5eIfjwko6+6kTRWGxGvu2Rc8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:49:6c:14:5b:b3:16:d9:46:e4:83:5c:0b:d6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Validity
Not Before: Jun 15 04:00:50 2025 GMT
Not After : Jun 16 04:00:50 2025 GMT
Subject: CN=44edff04b5d7b907ec16f1c0dd6c5cd59f2fcee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:43:6f:f2:97:b8:36:93:41:84:50:6a:fe:
3b:26:44:76:79:3b:3c:76:70:6a:fd:5b:a8:a4:5b:
47:c0:5e:ae:52:eb:e2:be:fc:03:bf:e9:35:14:89:
96:08:0c:e4:a0:b9:33:7c:60:ce:34:4f:91:b2:39:
59:be:f4:22:b6:35:16:7f:af:83:d0:b4:4d:81:7d:
39:ac:5a:c3:9d:a8:39:70:ec:2a:28:f8:26:d7:31:
c9:d6:d9:ea:7f:c7:8e:78:42:cf:d9:1e:3d:e6:a6:
c7:2c:03:48:9c:54:3f:e9:5b:5e:6f:7c:04:17:46:
8e:d8:98:b3:0e:38:81:7b:b7:08:e8:3b:dd:6f:f8:
f0:86:ae:96:70:76:75:ad:9c:94:71:7a:aa:18:83:
06:50:d6:61:47:5c:21:93:5a:90:23:d4:1d:6c:5e:
e8:cf:1e:30:b8:8f:da:e3:f7:9e:62:77:70:1d:e2:
dd:4f:24:cd:fd:18:89:42:59:90:68:2a:0a:7f:96:
91:c4:ef:b1:7b:4b:90:98:8f:c4:77:6d:e5:c2:3d:
10:cf:56:6b:b1:50:59:14:b6:25:16:1a:40:73:7d:
50:62:0b:9f:1a:dc:f9:58:10:be:87:f5:ff:08:c2:
b5:56:2b:82:ed:0f:7c:55:31:37:29:ce:43:ac:8f:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:ED:FF:04:B5:D7:B9:07:EC:16:F1:C0:DD:6C:5C:D5:9F:2F:CE:E9
X509v3 Authority Key Identifier:
keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c1:a9:10:71:12:a1:5e:3c:f7:05:72:68:21:11:17:3d:40:
80:0f:d5:1e:28:9d:de:cf:c0:ba:f0:27:9f:cd:aa:d9:53:7c:
91:4b:54:7d:09:d0:a4:88:58:cc:f2:39:1a:3b:31:3f:3b:ef:
9c:b3:51:6a:43:27:5c:c6:b3:5c:65:78:3a:06:bf:8b:81:16:
63:64:7a:80:2e:bb:13:1c:a7:59:2f:70:30:c8:ad:2c:f3:b8:
ab:32:0f:db:dc:bf:f8:45:0c:1b:dd:65:1d:90:96:3e:e1:22:
47:75:bd:ae:68:d7:b9:ca:de:85:89:7e:58:03:55:32:5a:24:
8f:b1:85:9b:64:aa:31:60:2e:84:1b:bc:34:b7:15:f1:1d:ce:
e1:0f:3a:f5:38:9e:d6:7d:eb:4b:25:36:c5:f8:66:92:df:7c:
58:95:76:54:4f:6c:ec:e6:8f:b2:98:8f:86:66:1d:6c:58:79:
fb:d5:1f:12:eb:0c:61:ee:92:1d:a3:a5:b5:65:a1:d6:11:23:
bc:cb:26:c3:3a:10:b5:fe:0b:e8:aa:93:ac:2d:a4:79:da:5f:
38:74:01:2a:31:b1:39:c7:f2:44:e6:70:b7:aa:7d:80:9c:43:
7b:94:92:2e:1f:38:c0:36:d9:78:06:0c:93:a9:99:e3:0c:52:
7f:f2:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:01 2025 by rpki-client