Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier: IeUzyInl1+dV4Od7HyDtn5YJ20LcuxdzEa1AJXBFsjQ=
Subject key identifier: 36:74:99:31:7F:B0:BB:2D:E9:4D:86:A5:6F:A9:37:A9:D3:7B:38:EF
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 019682B4D1FCCB99C29BD92E5684626C4672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number: 1263
Signing time: Tue 29 Apr 2025 18:00:10 +0000
Manifest this update: Tue 29 Apr 2025 18:00:10 +0000
Manifest next update: Wed 30 Apr 2025 18:00:10 +0000
Files and hashes: 1: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: MlelQAvUUr7LMJeLNzjED1qIEW7Ac4/PslnbPmZcAjE=)
2: vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa (hash: jDBhmRUhtmMAlFzmv4saGBsUFOT3KgtgZMefYA3RiUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b4:d1:fc:cb:99:c2:9b:d9:2e:56:84:62:6c:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Apr 29 18:00:10 2025 GMT
Not After : Apr 30 18:00:10 2025 GMT
Subject: CN=367499317fb0bb2de94d86a56fa937a9d37b38ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:42:3a:8e:bb:d5:24:43:03:ed:9a:ab:aa:df:
2c:2f:d0:4c:16:0f:47:9c:8d:2d:7d:07:a1:d2:65:
f1:d8:82:5e:2c:60:1b:e8:d8:dd:ca:6b:25:01:fc:
07:fe:1f:ad:d6:14:d7:60:7e:a5:6d:0c:c5:b4:22:
85:da:ac:47:a1:05:d6:8f:34:12:68:71:0c:6a:d3:
d0:0c:b8:44:ff:4f:35:24:b9:6d:88:e3:98:b0:0b:
99:05:ca:fe:16:d1:60:c0:ff:41:d7:c5:d0:87:02:
1d:18:c1:64:60:06:8a:ea:ed:b3:e0:f9:c5:37:fe:
30:f6:ba:bd:98:7d:21:39:03:4f:a8:b4:70:a1:4e:
9c:da:25:1e:5f:03:9a:88:76:8f:c3:55:0d:9a:16:
e3:24:1f:f2:2e:fb:65:a4:5d:2c:5f:7e:23:1e:93:
4c:9a:85:dd:68:8d:f5:8a:55:3f:2a:dc:18:2e:f0:
d0:11:03:67:f9:20:78:83:3d:52:57:74:2a:74:79:
50:9d:9e:cd:83:77:a3:48:61:be:39:71:d1:a5:5d:
d9:b9:dc:03:80:f4:2d:b7:b3:6e:40:67:f7:20:24:
07:ed:5e:25:ab:f6:26:bd:4e:08:55:82:cf:a3:f2:
16:39:8a:b4:dd:b1:3b:e8:6e:72:51:b3:a4:2e:7a:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:74:99:31:7F:B0:BB:2D:E9:4D:86:A5:6F:A9:37:A9:D3:7B:38:EF
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:44:f6:09:61:ab:37:a7:cc:e8:02:29:b5:ac:83:f5:bf:7e:
4a:51:e0:ac:54:1a:a5:e4:c3:54:38:69:a5:73:62:0b:48:ea:
de:a8:97:ed:73:04:4f:2c:96:c2:5b:61:4a:6c:8c:25:d2:b9:
fa:2a:ea:89:6c:39:d2:70:70:ce:a0:b2:f1:5d:54:06:c9:9d:
e7:99:3b:fc:ef:3a:a0:c0:47:8c:c7:d6:51:06:97:9f:1d:09:
c9:66:2d:45:54:77:d6:e6:27:19:46:b2:39:e4:54:d5:77:4d:
b1:ff:53:b3:b1:64:67:87:56:ec:5f:73:ce:ca:d6:20:3f:4c:
51:e8:2a:5e:20:53:c2:3e:22:19:44:f0:15:5e:72:93:ba:16:
4e:35:ef:4d:1f:e2:5a:4d:a5:3a:26:c9:79:b4:1c:6d:09:ea:
83:45:8b:28:a3:6a:c0:cb:0b:e9:24:b8:67:ae:8d:61:3e:c4:
d4:58:73:94:1f:b2:02:ee:1b:fe:ab:c8:6d:07:04:1a:6f:58:
2d:3d:f3:dd:62:16:fe:95:ed:cf:19:66:8b:2e:c6:77:03:52:
c4:3f:79:61:df:e7:d7:1d:4b:74:9e:0e:79:27:f8:07:e4:a4:
c2:ea:db:a8:cb:09:25:d7:a9:db:ec:24:e6:97:70:ce:4a:12:
a7:a2:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:32:24 2025 by rpki-client