Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
File: JLCG9IJCZjhOB4z3dzdfIb03C3A.mft (raw, json)
Hash identifier: pN0I9Awg/8VH5qcihDNFTVmwGgBo55Yl52GHTN7UqdU=
Subject key identifier: 0C:A3:A5:D1:16:FF:E8:8F:56:4C:03:68:D4:C5:C7:A5:F3:B3:02:94
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Certificate issuer: /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial: 01967B325C342D0F6E9D81109778DABB28F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
Manifest number: 14E8
Signing time: Mon 28 Apr 2025 07:00:19 +0000
Manifest this update: Mon 28 Apr 2025 07:00:19 +0000
Manifest next update: Tue 29 Apr 2025 07:00:19 +0000
Files and hashes: 1: JLCG9IJCZjhOB4z3dzdfIb03C3A.crl (hash: W8KsiZ4N1xMoH+Pqi6J4fWqSO87dFx0NK/rVDJ3LPoI=)
2: vyg3yZoDE3lDITkNoY-QCGp_Waw.roa (hash: xu1/KMb58m5rKylUKx2EbNMwZx0eL+J1SwYTzOBoPlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:5c:34:2d:0f:6e:9d:81:10:97:78:da:bb:28:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
Validity
Not Before: Apr 28 07:00:19 2025 GMT
Not After : Apr 29 07:00:19 2025 GMT
Subject: CN=0ca3a5d116ffe88f564c0368d4c5c7a5f3b30294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:cf:d4:19:55:b4:20:c0:e9:8e:03:0d:d0:
24:3e:f6:e0:d7:4a:d7:b7:8b:5b:7b:84:12:a0:95:
f8:08:44:65:db:14:7b:97:ff:41:2d:e2:10:c6:4d:
ff:4e:9f:1e:d9:76:11:bd:25:43:72:f7:d5:57:65:
f6:bf:9e:9a:27:13:a3:4e:46:9f:fa:fd:4d:6a:dd:
0b:e2:08:71:d1:97:9c:51:da:d4:d0:da:6c:d5:36:
04:d3:e3:41:34:2e:a7:c0:67:c9:b0:33:bf:da:76:
4b:ef:22:c0:05:8e:83:88:d5:d3:4d:c6:74:24:11:
14:ab:fe:eb:81:e2:fd:35:f0:b5:ca:56:1a:c9:23:
06:73:aa:35:a2:c6:e9:09:a8:7a:5a:69:cc:87:05:
2c:14:be:e5:fe:6c:e2:b5:7c:c4:4a:3c:56:d9:3a:
06:13:ec:3f:25:e1:4f:51:0c:87:16:42:74:be:3d:
2e:00:c0:ed:e8:c9:1a:5d:c3:68:b1:05:95:42:d5:
55:2c:71:20:91:e5:7f:3a:12:35:22:52:f0:6e:3d:
17:a5:fd:eb:aa:a1:fe:9d:ba:b4:eb:3c:68:fb:dd:
7a:eb:d6:6a:73:ad:63:36:12:69:1a:40:49:fa:a0:
2b:22:e8:4e:d2:7e:dd:c0:73:dc:6f:86:ea:45:ad:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A3:A5:D1:16:FF:E8:8F:56:4C:03:68:D4:C5:C7:A5:F3:B3:02:94
X509v3 Authority Key Identifier:
keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6c:78:ca:73:51:ca:67:6d:ec:1e:78:72:33:3e:ad:2e:7d:
8d:80:57:de:77:b6:a4:44:4b:d3:32:af:c4:d9:37:2b:7d:87:
f5:5e:36:ec:75:f0:0b:23:07:8b:e7:d2:61:99:f0:f2:73:37:
ca:62:1c:f3:07:c4:38:c6:6d:15:88:82:9d:fe:c5:62:bc:e8:
63:c5:6e:fc:a4:bc:56:b1:3b:46:be:d6:3e:91:b8:2c:b4:0b:
ff:fe:78:0b:6c:47:6c:31:ee:ae:d7:10:9b:0a:e5:d5:86:0d:
2c:9f:be:bc:b2:0b:b1:2b:9f:6f:e9:e6:b5:52:9f:24:94:cb:
cb:e8:67:35:ea:df:c8:0d:56:84:6f:dc:db:5d:b9:c6:52:6a:
74:e8:6b:43:b1:3e:a3:6d:4a:ad:79:8c:fa:6f:c6:ca:fe:72:
38:9f:88:81:ac:2e:10:de:21:ea:82:d8:39:2e:99:cd:ae:62:
b4:3d:a8:e8:86:0a:97:62:a3:2f:f8:ab:34:1f:3f:f6:7c:71:
60:af:0b:31:62:53:20:85:c9:ca:40:68:d5:c5:3d:59:3e:49:
63:2f:2a:18:25:7f:05:9c:e9:a1:73:99:bd:b1:80:61:36:5c:
42:0d:10:d8:c7:75:21:71:0a:4a:bb:2c:cf:f4:e1:29:a3:3f:
85:d8:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:14 2025 by rpki-client