Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: 8tHhXQBGcevrohHFcWT0dbSLxY8uK5i7ItWhIpHwx2U=
Subject key identifier: 68:5D:2F:D5:B6:9D:AE:55:A7:C3:73:EC:70:2A:90:62:A7:5B:A0:1C
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 01967755DBEBF20ACC2355FF4336E0EA5341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 0FC6
Signing time: Sun 27 Apr 2025 13:00:37 +0000
Manifest this update: Sun 27 Apr 2025 13:00:37 +0000
Manifest next update: Mon 28 Apr 2025 13:00:37 +0000
Files and hashes: 1: As6vwkWGZxruqh4uQQnrE0_5Wkc.roa (hash: +uKniDECqLf36Ns+Ibc2IgSroQKNM4uwIuCwreWx2Qo=)
2: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: 67tm13yrD5q4loohCxLhV8ztKX7pYEZJlzpRPvJ1rpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:db:eb:f2:0a:cc:23:55:ff:43:36:e0:ea:53:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: Apr 27 13:00:37 2025 GMT
Not After : Apr 28 13:00:37 2025 GMT
Subject: CN=685d2fd5b69dae55a7c373ec702a9062a75ba01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:c3:d1:ab:d7:43:38:93:7d:b9:b6:23:49:
62:86:02:0a:7f:3f:3e:f1:0b:8f:a6:65:6b:65:5c:
2f:0d:30:fa:b5:9d:90:a4:90:dc:d2:53:5e:7e:6f:
90:31:36:2e:8a:f2:bf:07:7d:61:77:6c:9b:eb:de:
ba:ab:e1:67:e4:11:2a:92:38:55:69:6b:7f:3e:11:
f8:9c:79:73:0b:db:be:eb:0c:2a:28:d7:ab:3b:1e:
a2:fc:43:2f:05:67:b5:43:a4:85:34:f3:a1:3b:be:
9a:f2:e8:df:0f:19:d1:03:2e:3e:2c:c3:60:bc:f9:
e2:75:94:7a:1b:86:7f:56:10:1a:e7:4d:e0:ad:df:
7a:4f:5e:bf:16:69:d3:28:59:f4:2c:d7:87:24:7d:
5c:53:8b:c2:d4:69:20:bb:40:f6:c2:8f:07:a1:9d:
7b:79:90:79:41:7e:a1:68:82:f3:44:3a:9c:1a:81:
de:c9:28:61:ae:a8:80:ed:64:1e:58:2c:74:3b:4c:
ab:3e:69:b0:87:05:dc:7e:f1:0f:9f:0b:3c:2c:52:
16:d6:cd:06:55:80:d4:3c:39:34:91:80:75:3a:00:
26:dc:e7:0e:3c:27:7b:a2:20:dd:d7:3c:22:29:bf:
9f:29:21:e4:76:ea:63:9c:88:68:82:77:34:a3:c1:
9a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5D:2F:D5:B6:9D:AE:55:A7:C3:73:EC:70:2A:90:62:A7:5B:A0:1C
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:68:b2:fd:38:99:3d:4b:cb:7d:55:b7:98:2e:c5:82:77:9a:
d4:55:46:f1:63:57:ee:5d:f2:f9:7a:6d:be:77:78:5a:59:31:
5d:66:11:5e:61:2a:e9:6f:f8:5d:eb:c2:05:aa:3f:92:ed:58:
5b:86:ca:f1:b9:24:48:ba:34:8c:81:12:a8:a0:12:c9:b5:c1:
a2:9e:ec:fa:52:d7:e7:b2:e2:f1:be:8c:4a:db:b6:ba:48:be:
bc:c8:a5:2f:29:b9:4c:e5:48:aa:57:6e:39:23:88:90:be:33:
1b:1a:54:e7:88:d2:12:b3:06:33:98:4e:0a:9f:99:ea:20:f7:
b2:02:2d:52:89:32:52:cf:62:09:48:12:14:af:d3:80:4b:41:
8f:d7:89:3a:6d:38:14:3d:91:62:cb:2c:c8:d8:31:c0:4e:94:
89:22:ad:4b:06:54:4e:e6:28:6f:a4:8d:dc:0b:1f:fe:43:f8:
34:e7:ba:92:fd:d7:32:6c:b1:01:8d:32:e1:47:04:f7:be:20:
d6:07:9a:9f:f7:60:0d:c8:2a:10:a0:3d:fa:8c:90:aa:62:41:
0d:f9:a2:da:b3:0a:da:8d:dd:b1:80:9d:c5:c6:a5:24:a5:0f:
2f:c6:81:ae:21:16:ba:ac:7f:52:a0:30:77:71:fc:a8:fc:7c:
07:bc:a7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:58:18 2025 by rpki-client