Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier: PTmxb7SlCumpOZ0x8HPxi4d0qhU9JR4r4WbF35Di4es=
Subject key identifier: 62:66:6E:DC:44:27:23:D9:01:DA:AC:A2:6E:10:4D:21:9C:1C:58:09
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial: 0196876D560EE0FAA132335D27440E74F43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number: 012C
Signing time: Wed 30 Apr 2025 16:00:11 +0000
Manifest this update: Wed 30 Apr 2025 16:00:11 +0000
Manifest next update: Thu 01 May 2025 16:00:11 +0000
Files and hashes: 1: 5mE6WJ9C1aVlmVoIkqUjqUKu6GA.roa (hash: iW1w4Z2DczRn4meCeEiq3QUgbwsTpwLpy6/um6q5LvU=)
2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: j76MCKfsZLe2prZpB9kHRnRX5xnDJNwNm3r/xBFB/Jo=)
3: UABXDisY7UIcuu729SEVeaTHi9g.roa (hash: OYLFe1eOiXjeIqPxbtFA6YEKDGNFPpOrX8ZmLcir4vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:56:0e:e0:fa:a1:32:33:5d:27:44:0e:74:f4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Validity
Not Before: Apr 30 16:00:11 2025 GMT
Not After : May 1 16:00:11 2025 GMT
Subject: CN=62666edc442723d901daaca26e104d219c1c5809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:a2:98:9f:38:c2:5d:dc:90:dd:a5:51:1b:
75:38:8c:e7:69:3e:b5:27:4b:b9:3f:4a:74:9e:74:
b5:33:bb:dc:e4:a3:70:73:05:37:46:f7:df:9c:3c:
dc:ba:ac:e1:e1:56:79:c6:ea:38:7d:5d:49:f5:97:
ec:8f:9d:59:a6:b0:6e:be:01:c6:f0:40:a1:62:4a:
2e:e9:68:74:03:f5:0b:3a:a7:e3:8a:f0:a5:42:e4:
cf:87:70:83:36:c0:76:c1:29:2c:33:18:39:42:66:
c9:5e:40:67:5b:35:bd:be:44:19:a4:36:39:77:75:
6b:e9:50:8f:32:04:2d:7e:77:0a:ee:b8:96:de:17:
ce:fb:11:2d:0b:60:a8:20:61:1b:05:46:66:08:52:
7e:76:6f:35:5e:1b:f9:39:65:2a:06:33:d7:2d:4b:
0e:53:28:33:31:80:63:94:74:e1:9a:63:a9:a2:62:
29:61:24:c8:77:91:2b:b9:14:c5:3d:42:e8:b2:eb:
02:e7:bd:8a:05:03:b2:24:cc:85:c9:cf:f2:0f:5a:
21:29:10:51:6b:34:e3:d6:32:ec:d1:9e:13:ef:95:
ef:db:7b:f6:cd:6a:e4:91:e4:d8:45:6b:92:ce:05:
65:82:97:95:73:73:87:76:9e:0f:84:01:2b:1a:d6:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:66:6E:DC:44:27:23:D9:01:DA:AC:A2:6E:10:4D:21:9C:1C:58:09
X509v3 Authority Key Identifier:
keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:46:cd:c5:92:91:eb:6c:16:cb:35:1d:63:e9:18:de:c1:e0:
c0:a9:a8:c1:af:44:08:2c:46:81:49:d9:76:31:68:e8:e1:03:
91:e0:fa:ec:00:82:4f:da:5f:da:d9:ba:12:17:d0:71:18:e9:
12:68:f8:dd:36:f8:2f:38:70:34:8b:9e:45:ed:6d:77:a8:7d:
46:15:08:ac:5c:2e:2c:2e:21:43:54:1b:b6:41:54:21:c5:8e:
d9:54:f3:b1:cd:a7:15:56:40:3b:60:0c:c0:d6:37:cb:17:fc:
c6:d1:f7:30:7a:1d:ea:a4:48:12:34:43:1a:a6:0c:9d:04:2f:
79:23:9b:f6:54:66:af:dc:d2:df:6f:1f:7c:24:b4:c0:eb:cb:
e0:c9:49:e2:b4:7f:72:df:47:68:08:18:6c:4b:72:b5:95:f5:
ff:b6:57:cf:2b:57:a6:22:4e:12:99:5a:29:2b:5b:2c:a1:22:
80:ae:70:84:3b:2a:05:d3:12:ca:62:ea:73:cd:ba:f5:35:2c:
fb:91:6c:c8:f5:e2:ee:7c:92:5d:ce:64:d5:c6:30:0c:0a:bc:
ce:0b:ed:09:be:e9:e9:37:25:bc:55:17:59:88:f1:44:df:9a:
f8:a1:10:1a:a3:77:d4:2b:d3:97:d0:80:3e:1c:09:be:0e:96:
b8:a1:76:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:32:15 2025 by rpki-client