Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: 5ctSInM9PdwDiCzg5bTjw5T6preLKFF3YcisqHBIdVk=
Subject key identifier: 4A:9E:AB:A2:B4:A3:01:1D:72:66:14:DA:A3:56:C7:0E:0F:A4:F0:C1
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019687367F004FC6DC5C337C719ED14E7901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 15:00:17 +0000
Manifest this update: Wed 30 Apr 2025 15:00:17 +0000
Manifest next update: Thu 01 May 2025 15:00:17 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: EbIaZt8QKtHTrcLQI6J8qXWtoAuiiqPZ0DjZ4mtxBHw=)
2: __QM0Y00A8o9_wWPyDLaVQsYZls.roa (hash: Tt5jgaPYYhPlmRSiaLMYS5DQDbnj5Cw5Zwmf+6k+kyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:7f:00:4f:c6:dc:5c:33:7c:71:9e:d1:4e:79:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Apr 30 15:00:17 2025 GMT
Not After : May 1 15:00:17 2025 GMT
Subject: CN=4a9eaba2b4a3011d726614daa356c70e0fa4f0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:d2:68:08:ec:4b:89:35:86:cf:18:03:94:
39:f2:8d:8e:42:b7:6d:bd:cb:1d:81:70:25:d1:97:
1e:43:d9:2d:3a:2f:86:38:21:93:3b:2e:cf:cd:e3:
ac:5e:7a:fe:c0:fa:58:67:8f:e5:e6:fe:9e:68:b0:
9e:da:a5:ff:49:72:ba:3b:16:c0:a6:83:74:94:68:
f1:a5:fe:65:77:4d:16:a3:cb:b1:5c:13:7a:99:f7:
58:ca:e9:9e:05:3c:d4:eb:e9:5e:ba:55:93:4b:48:
1b:2a:0c:98:0a:9f:66:bf:ad:d5:3e:38:5a:5f:a7:
9f:52:4b:dd:3e:bc:2a:8d:e9:37:b3:96:04:70:13:
8e:73:a1:04:1d:ee:20:98:75:44:a9:62:30:0f:ff:
cd:c3:2f:ef:51:70:2b:32:33:9c:ce:97:13:1b:98:
29:44:41:77:d2:3a:14:c5:17:2c:5f:59:0a:28:3f:
9c:e3:17:2e:3b:d8:c5:f4:ca:c6:46:85:29:86:69:
27:74:df:cd:99:84:cc:79:1a:be:39:dd:5c:b4:50:
78:c9:57:19:4a:d4:87:98:de:48:5c:bf:71:4d:68:
e6:28:6c:14:5b:ea:4a:f3:99:20:a2:04:cf:86:1c:
6b:7b:34:47:1a:aa:2f:f6:92:2f:f6:66:4a:0b:e7:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9E:AB:A2:B4:A3:01:1D:72:66:14:DA:A3:56:C7:0E:0F:A4:F0:C1
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:da:5b:8a:a9:a2:43:f3:72:0e:42:b3:85:fe:59:cd:2d:3d:
fb:7c:f2:67:93:d6:22:6b:f5:d2:cf:d2:ea:76:e1:7e:5a:0a:
cb:da:42:a5:e9:12:89:3a:93:53:0f:22:3d:69:44:94:26:8d:
59:4e:04:2c:e9:c6:5f:13:bf:6b:47:a5:02:7e:83:41:94:17:
32:f0:5b:47:6c:31:22:6a:23:5b:94:82:b0:b2:d5:ee:20:22:
5f:4a:10:d6:55:76:35:55:ff:1f:54:77:ba:cf:87:05:ff:6e:
63:f8:61:07:ee:f9:87:1d:b7:d7:48:03:23:b9:de:f5:f1:97:
21:5a:fa:c8:ff:82:61:65:64:fe:ce:4c:64:65:32:4e:2b:c7:
72:ad:cf:c4:89:2f:55:ef:34:b9:e0:c8:17:55:16:f1:e1:0d:
95:0d:db:10:fa:d5:1c:c3:dd:e9:33:e3:ef:46:ad:e7:be:7d:
cc:1d:b0:b1:ce:1b:c2:f6:0b:fe:33:9f:97:0a:82:d2:70:a8:
2f:c9:7e:41:86:2c:3a:5a:04:b6:83:bf:2b:d6:81:bf:47:4e:
0e:e4:01:6b:06:98:37:cf:07:61:29:d4:1e:28:44:ca:b5:d8:
0a:4c:fa:1a:2d:e8:09:cc:9f:b1:4c:fb:aa:5c:77:39:46:86:
9f:81:e2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:52 2025 by rpki-client