Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: 51QhKTIG0Q+zku0GM5JO8wMjThLM+uE8NVyu5t3O6T0=
Subject key identifier: C4:9A:7B:35:73:A6:15:E8:B6:22:ED:E6:AE:13:F6:0E:5E:8D:68:6B
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 01967DFCD6C9725442B84B34C54738D546DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 20:00:44 +0000
Manifest this update: Mon 28 Apr 2025 20:00:44 +0000
Manifest next update: Tue 29 Apr 2025 20:00:44 +0000
Files and hashes: 1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=)
2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: FxqRQAtsrOOPC+K5YgGT7rEQN60rHGJalwfKt6VDIu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:d6:c9:72:54:42:b8:4b:34:c5:47:38:d5:46:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Apr 28 20:00:44 2025 GMT
Not After : Apr 29 20:00:44 2025 GMT
Subject: CN=c49a7b3573a615e8b622ede6ae13f60e5e8d686b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:c8:58:96:a1:62:3f:7b:ff:74:65:a5:25:
05:b0:d1:34:ae:bb:af:3e:a2:ee:99:44:7b:83:36:
d7:0e:de:28:e2:89:e3:c9:78:ad:8d:5d:1b:b6:98:
0e:ae:01:eb:f6:03:88:b8:62:e0:41:d8:e5:dd:9b:
59:c6:f7:b4:24:40:05:38:d3:e1:51:53:32:99:4b:
c2:9e:8e:fd:91:02:70:79:16:b0:d7:a5:2c:2e:00:
5b:36:35:1d:25:af:ec:de:94:0f:6c:83:63:b0:a7:
c8:9c:59:30:1b:48:e0:4c:f3:8c:92:48:8c:10:cb:
77:04:b3:1b:9d:9b:34:0e:7e:61:3b:54:e6:ed:90:
1a:da:8e:54:e5:08:68:c7:15:21:bb:23:9c:9f:cd:
c0:40:9e:f4:cf:45:ab:eb:f0:63:0f:57:60:90:e1:
80:b5:3b:2d:e1:81:32:d2:af:d6:9b:6a:09:5f:a9:
2a:d0:13:cd:bc:cd:d0:69:9b:c6:18:98:2f:9b:c6:
70:c6:d1:8f:95:64:06:2b:c7:7e:1d:21:58:97:91:
1a:cd:3d:54:13:e8:7e:1c:1f:c7:ca:b6:42:d5:7d:
61:65:88:b8:fd:57:be:ac:4b:89:36:07:4b:5e:a2:
75:0f:20:dd:4e:ae:1d:6d:54:fb:05:00:3a:44:04:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9A:7B:35:73:A6:15:E8:B6:22:ED:E6:AE:13:F6:0E:5E:8D:68:6B
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6e:79:57:59:59:83:46:67:17:ff:85:6c:e0:e2:62:73:6a:
73:7d:d6:aa:f0:75:c9:1d:fb:c2:5b:e0:d6:e0:d5:54:2a:2f:
98:c2:04:19:8a:e0:a0:fc:d6:31:47:ad:80:fb:6c:8d:70:ca:
6f:1e:af:16:f5:35:d6:54:c7:a7:10:10:63:bd:65:55:14:d3:
ea:f0:78:52:69:35:94:71:96:50:ce:04:65:73:43:aa:38:e8:
a9:6e:32:88:84:14:7f:64:f0:4c:b4:21:a3:be:21:eb:30:06:
1c:17:b4:cf:b4:7f:51:5d:ac:1b:e2:11:fe:3c:e9:2b:d5:74:
0d:48:4a:19:39:15:ad:3e:96:a3:93:19:f2:78:b6:93:08:ec:
06:c8:cd:a2:60:da:f3:2a:64:f9:25:32:4d:d3:b9:63:8f:74:
64:eb:27:5a:5d:b6:84:bf:96:bf:88:1c:36:c3:60:db:dd:8b:
05:c8:9c:21:6a:e0:a4:f4:dd:78:db:50:df:6d:ce:d4:38:26:
07:20:22:0e:5b:33:15:0f:b3:f2:21:21:ea:ae:e6:cc:ab:7b:
86:71:a6:8b:fc:ed:25:28:ee:b0:87:34:dd:64:3c:b3:d9:96:
31:0b:e0:4f:9c:8b:0e:48:e5:0b:80:2a:b7:9a:a4:35:52:93:
32:f2:b5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:36:01 2025 by rpki-client