Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier: +SvABlPIclDqnpX/KDjFNZdNMg4NjLzinYLnPLNL3+0=
Subject key identifier: 27:B6:68:9C:9B:53:42:FC:93:01:F6:EB:F5:50:0D:59:B9:FA:46:7A
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial: 0196767A719CF1A5C9CBBA1C4FDBF004048E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number: 05E8
Signing time: Sun 27 Apr 2025 09:00:58 +0000
Manifest this update: Sun 27 Apr 2025 09:00:58 +0000
Manifest next update: Mon 28 Apr 2025 09:00:58 +0000
Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: KCVCFOEDB6EBWkTRa7/XL4Bkbh5OsRVDCVSoopJVxBs=)
2: P05t3kiYPDkZIteTxzHkdWLEeeU.roa (hash: BIrJT8z8EjrhQoOfb8QVBhdG6eDY7ydaRNIxS8nhYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:71:9c:f1:a5:c9:cb:ba:1c:4f:db:f0:04:04:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Validity
Not Before: Apr 27 09:00:58 2025 GMT
Not After : Apr 28 09:00:58 2025 GMT
Subject: CN=27b6689c9b5342fc9301f6ebf5500d59b9fa467a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:60:90:75:47:26:a7:4d:18:83:3d:4f:ce:
a7:9f:01:7f:dc:bd:47:57:fc:5c:78:00:8b:bd:e8:
02:18:8d:f7:77:d8:63:ea:ff:82:76:3c:e3:e2:64:
23:db:57:4b:8b:24:dd:2b:2e:53:0c:4c:31:dd:bb:
fc:4c:a5:e6:e7:4a:a6:a8:7c:13:07:4b:14:50:53:
a1:dc:fb:89:90:05:cd:05:e5:60:ff:e4:40:d4:4e:
33:bc:2c:8f:a4:e5:8b:89:65:d1:80:75:14:3e:c6:
35:26:3b:40:00:88:66:ce:64:48:06:a3:69:12:e4:
f6:61:1c:b2:02:97:78:ea:c2:7a:aa:43:58:48:29:
5d:12:0e:f4:ae:73:a2:5d:17:d9:4d:59:c8:7c:64:
3f:c8:7e:f0:87:b2:f4:ee:e4:55:98:df:ad:c2:56:
65:57:ee:e2:b7:18:bc:35:82:ab:7d:7b:f5:c6:d1:
1c:2d:63:b1:27:31:7f:71:79:2b:ed:64:fb:40:e8:
51:cf:ec:c1:aa:32:3c:0f:9c:1e:eb:88:7d:01:03:
5e:bd:f4:bd:06:38:e5:d0:16:5c:45:68:04:ea:bf:
60:d3:62:fa:75:b3:63:61:08:c1:8b:91:d3:08:08:
aa:23:c1:15:c4:46:b6:76:0f:ff:1c:f6:b1:2c:e1:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B6:68:9C:9B:53:42:FC:93:01:F6:EB:F5:50:0D:59:B9:FA:46:7A
X509v3 Authority Key Identifier:
keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3d:42:6a:7f:21:b5:80:e7:26:06:9a:a5:4a:f4:b3:3c:eb:
ce:d7:18:ec:a9:47:6c:d3:94:2f:83:b3:84:e7:c1:35:f6:8c:
ec:7c:0d:53:96:54:05:54:91:1f:2a:ff:7d:8a:5f:b5:ba:ee:
fe:fe:68:17:ad:18:0b:e7:39:fd:49:bd:af:04:36:c8:c8:12:
16:be:43:83:de:2b:45:1d:d2:d1:15:5f:c7:a3:80:f1:39:e6:
a8:b5:08:f7:56:3a:6b:00:6b:2c:fe:3e:7e:0e:e4:d1:a7:ad:
01:6e:b4:13:c3:d3:ef:f2:66:28:af:62:53:25:57:34:ad:c7:
69:81:1d:95:00:81:a2:30:fd:ff:cc:54:e4:d7:62:15:e5:da:
96:a5:b3:ec:a3:3a:6c:72:0d:11:ce:17:1a:20:fb:8c:e1:d5:
c9:e7:9d:eb:d8:06:83:f3:65:f3:cf:b0:6d:cb:f4:e5:c3:fa:
4c:ba:be:25:d1:a9:f5:18:34:95:b9:4b:a1:77:be:34:e4:ac:
a4:96:05:f1:9f:b4:ff:fb:ea:f1:23:70:05:9d:4b:4a:6f:31:
f7:2a:d8:90:98:03:91:29:14:13:f9:44:59:d7:e5:19:07:2a:
cf:b5:44:35:28:3b:d2:84:ff:e3:84:29:1b:39:a8:07:69:62:
e6:23:82:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:20:56 2025 by rpki-client