Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier: nl8DsO7b/PaxyLbHK5S4CFFvFaeoAF5drr/0c4Da9fc=
Subject key identifier: 5D:49:25:AD:C8:F2:DC:82:BE:5F:69:DB:33:71:3E:B4:C9:23:E7:D1
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 0196718A62187C0B271D8B1508E18B0C7D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number: 0CF2
Signing time: Sat 26 Apr 2025 10:00:16 +0000
Manifest this update: Sat 26 Apr 2025 10:00:16 +0000
Manifest next update: Sun 27 Apr 2025 10:00:16 +0000
Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: QsD221stYTTRssg7d9mPLpFBslJUFZIJ/5Mq/3SSCdU=)
2: NxEFYabQ1De2D9MRDvZOgIu0R4g.roa (hash: lAojMYDzIDb75W7SBnvnLzGQZua9BCv398UHDwqthXo=)
3: uBhMU8FaL6yzEgI8KXo0amRkPt0.roa (hash: rZaJZ+vs9poyZNeTB4YM94eOiwwWluQ2wWx8JrMOGHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:8a:62:18:7c:0b:27:1d:8b:15:08:e1:8b:0c:7d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Apr 26 10:00:16 2025 GMT
Not After : Apr 27 10:00:16 2025 GMT
Subject: CN=5d4925adc8f2dc82be5f69db33713eb4c923e7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:4b:77:01:8b:10:9a:f6:67:84:86:8a:9d:
8d:36:dc:4d:0e:6c:76:51:c9:07:3e:ca:f3:0b:2c:
49:2c:44:25:dd:ff:be:53:2e:e0:2b:57:00:2f:70:
9c:b3:0d:fa:85:1e:d9:83:e5:c1:a0:52:86:ff:19:
cf:49:2d:08:ac:56:fd:8b:39:c6:82:5e:2a:ee:e6:
6a:3f:38:e0:cf:72:a6:67:77:14:04:f3:0a:4c:04:
6f:0c:33:02:47:d5:a6:f1:33:4c:3c:0a:71:d2:a9:
7a:65:2b:ed:07:44:1d:80:34:d4:aa:85:52:6e:81:
a5:bd:d1:b6:f8:49:e8:af:f9:d0:4c:99:3f:ea:64:
db:4c:f0:c4:e9:34:be:72:40:eb:42:ba:cd:e9:f8:
99:c8:88:e8:be:ba:f3:8e:08:36:7f:f8:09:0d:93:
13:92:a5:37:48:3c:cd:f4:df:77:18:fd:87:35:fc:
dd:28:73:7e:25:b8:eb:33:b1:93:43:8f:07:94:86:
42:50:b0:b2:34:2a:ce:3f:3c:52:dd:f2:df:e7:8f:
dc:83:74:c7:7b:62:a7:1e:5c:49:e5:2a:e0:f4:12:
f1:94:f0:08:71:9f:99:54:48:4e:ff:e3:9d:fd:e6:
48:6b:ac:3e:91:21:32:2d:2e:dd:77:f3:10:fb:0a:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:49:25:AD:C8:F2:DC:82:BE:5F:69:DB:33:71:3E:B4:C9:23:E7:D1
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1b:14:0a:a0:7b:8b:87:89:44:a1:2c:7e:13:c3:40:2e:8b:
03:3b:30:56:3c:27:95:89:52:c0:a2:cf:f0:51:bd:2a:f2:28:
73:91:6b:12:09:34:93:52:4b:5b:d6:a4:58:8a:61:b6:6a:dc:
8e:cd:1c:94:0d:2a:d2:3c:55:6f:c7:44:ab:c4:d9:0f:0b:13:
53:9c:c8:3c:46:c4:9f:e2:33:d7:39:01:60:f3:83:56:59:b2:
26:3c:46:cb:2a:57:b0:5b:9a:84:e9:61:c8:e3:4d:ca:a6:33:
69:14:4c:2d:93:db:e9:41:9a:56:57:2d:96:c6:ed:92:5b:1d:
24:cc:32:9b:f6:62:aa:c5:d1:ba:f7:74:ac:f5:73:0b:37:1c:
6d:9f:76:a8:6c:9f:d9:b0:8b:b4:ad:47:3a:21:42:4f:ef:bd:
23:e8:d9:79:7c:07:2e:59:9f:67:83:f6:06:52:4a:e9:48:49:
0b:5f:5a:3d:ab:88:eb:57:01:6a:6b:1d:16:2e:40:a2:31:4f:
4c:74:86:f9:a6:31:3b:92:f8:53:cb:d3:06:01:ae:cf:2a:e5:
c5:e4:65:35:d2:a8:1e:92:55:37:d8:91:fe:bc:d2:f6:31:19:
9e:a0:91:6e:f2:c4:84:b3:b8:46:82:34:2e:9a:d0:c0:1e:cc:
c6:d9:8b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:46 2025 by rpki-client