Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier: 1ngRz1lU8d9VQyUv4BS+DgmkSXwNHot7eMOfE6k5wQI=
Subject key identifier: 17:DE:08:41:10:12:6D:F6:99:8E:C4:24:A8:B4:05:36:92:C8:3C:5B
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial: 019676B0DE093D33AF88C56BDE8DB25DA709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number: 0230
Signing time: Sun 27 Apr 2025 10:00:24 +0000
Manifest this update: Sun 27 Apr 2025 10:00:24 +0000
Manifest next update: Mon 28 Apr 2025 10:00:24 +0000
Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: nNAqKwgQTg8GXplNUfX91H+UTCGi0QWTz+E0xgygVvI=)
2: W33wCNoqVtC8nnysLfc50xpdZy0.roa (hash: ojPlZl8ybzd2ray8ATJYzRb0Yn01gVHIP83ulWRE+8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:de:09:3d:33:af:88:c5:6b:de:8d:b2:5d:a7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Validity
Not Before: Apr 27 10:00:24 2025 GMT
Not After : Apr 28 10:00:24 2025 GMT
Subject: CN=17de084110126df6998ec424a8b4053692c83c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:f9:2f:52:4d:1c:84:a2:e6:0f:85:ea:b7:
84:7d:80:fe:74:f1:54:b1:92:2b:99:fa:bc:e0:23:
1c:91:36:79:d6:ed:55:83:17:f9:fc:cb:77:d8:33:
b5:29:0b:aa:6b:6b:4e:72:99:10:a7:de:06:c3:43:
ae:ab:0e:ec:28:82:1e:a6:10:2f:49:27:ee:39:48:
18:18:41:92:f5:30:20:75:99:36:81:c5:f4:a1:ed:
8f:1d:d4:23:02:6f:73:f0:b0:6b:c5:0e:6a:04:bf:
27:02:35:a1:d7:31:8a:39:48:d3:2d:1e:71:4d:b8:
81:67:de:97:8a:4c:01:cb:0b:97:04:8b:37:dc:cd:
85:c2:d3:25:0f:15:92:bd:f3:82:ba:f9:37:ad:d2:
d9:d0:8a:de:2c:9d:2a:2d:a0:f1:1d:dd:0a:ba:1f:
71:74:6a:01:8b:42:f9:10:4c:1b:a8:35:af:a2:c8:
c1:73:d9:dc:ba:ec:ba:fe:32:ec:86:7f:29:eb:65:
e3:f2:00:9c:5d:aa:9e:3f:a3:b0:12:cf:fe:b8:ff:
56:53:88:9a:1c:9e:53:a1:e4:e5:8b:ba:44:b9:d3:
bf:5e:06:ea:fb:1c:3a:11:55:ce:e9:b2:91:25:01:
6a:69:41:94:17:4d:b3:55:db:cd:f8:7d:41:8e:39:
30:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DE:08:41:10:12:6D:F6:99:8E:C4:24:A8:B4:05:36:92:C8:3C:5B
X509v3 Authority Key Identifier:
keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:06:53:b9:d4:0e:eb:69:bb:e1:87:71:ea:4f:e7:b5:ec:e8:
ff:31:d2:ee:6f:da:8c:0f:2c:24:89:44:ad:89:ef:39:bc:5d:
e0:a7:7a:13:00:1c:5f:fa:c0:3e:54:b1:2c:81:ba:8f:28:2b:
51:09:8d:3e:d7:13:ed:a8:3c:27:93:46:c4:aa:ba:e0:5d:80:
d2:32:59:ac:4b:ee:ee:1a:6e:12:72:ce:33:91:a6:1c:81:ad:
9e:17:23:ba:93:7b:44:bf:e9:48:cd:8d:f5:c2:60:c5:48:bb:
28:67:a9:df:2b:0c:60:e0:68:e7:03:f9:10:5d:d7:41:83:23:
1c:17:91:a2:50:f0:84:4f:c3:d5:88:e9:61:39:f0:24:6e:68:
26:10:8d:1b:23:71:0e:0f:ae:1d:09:4d:82:8c:0b:97:c2:c9:
e5:d5:38:df:35:78:63:0b:a7:29:51:48:5f:eb:ed:0a:7c:ef:
79:8f:8a:a9:78:dc:c4:07:64:5a:d1:9a:1c:01:50:80:d2:d1:
70:4b:6d:3b:34:3e:42:48:94:e9:49:55:cc:ec:d4:ef:44:aa:
37:c9:ad:d6:21:06:72:fb:4d:5c:7f:39:cc:c7:dd:e0:3e:c9:
b8:aa:97:7d:42:f6:38:bf:64:2f:c3:d1:c7:96:28:f8:b2:bb:
3f:1f:29:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:52 2025 by rpki-client