Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
File: JCH_to6rl-JKkGJtkEmL5-1wZvA.mft (raw, json)
Hash identifier: 4L0ZlwYwIOgpvOXWsGkcOt931lPgCgc8LPmjfd+9Zkg=
Subject key identifier: 5A:45:30:1F:5D:2D:B8:33:96:14:E3:EB:8C:46:5F:B4:4D:12:23:6B
Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Certificate serial: 0196759E85B3F02D23833675360CCCD4610D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 05:00:45 +0000
Manifest this update: Sun 27 Apr 2025 05:00:45 +0000
Manifest next update: Mon 28 Apr 2025 05:00:45 +0000
Files and hashes: 1: JCH_to6rl-JKkGJtkEmL5-1wZvA.crl (hash: aHnq4N/6FDNih0MfvTYCXQ7w288xA70Y/LPe/OThbq0=)
2: N0X6xiVzqXxKq1FAQhtD_X-LptY.roa (hash: /exbdfoldwGhZ8sHg6pfpGAkHOc1ALsLXny1F95l6KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:85:b3:f0:2d:23:83:36:75:36:0c:cc:d4:61:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Validity
Not Before: Apr 27 05:00:45 2025 GMT
Not After : Apr 28 05:00:45 2025 GMT
Subject: CN=5a45301f5d2db8339614e3eb8c465fb44d12236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:86:3c:0d:95:74:4a:51:ed:d6:7b:2e:2b:f2:
98:77:d3:8e:17:84:ef:d2:49:85:80:8a:47:dc:db:
50:70:3c:ce:f2:70:cd:bd:0a:73:3b:3b:7a:12:03:
68:e2:45:38:76:c4:c0:18:ee:8c:8b:3f:27:3b:a4:
43:54:c8:26:06:14:dd:cb:b8:ab:87:e0:c0:20:1b:
4c:01:b3:b7:58:12:09:e2:42:d6:2d:f5:13:af:b2:
0c:b8:8f:5b:d5:47:3f:11:93:4b:31:47:bf:0c:08:
92:aa:bd:0c:c1:23:50:91:63:0f:8a:6d:9b:ba:36:
56:c9:55:fd:b9:7f:e9:e7:64:69:44:75:91:ca:b6:
d4:3c:ef:af:a8:54:9f:6c:41:0a:78:04:37:7a:e7:
16:8b:ef:ce:b2:74:82:d9:96:61:a8:e3:81:a5:ce:
ef:f3:49:ad:a3:c8:74:29:4e:7e:9e:e3:2b:97:13:
2c:58:13:b3:ef:25:21:17:ff:46:71:a6:bf:db:e4:
80:ab:f3:09:25:c0:1a:da:4f:02:07:ce:69:54:26:
e6:7d:0e:8e:e9:17:2e:53:e8:e8:f5:73:44:c3:8b:
5e:b0:1e:8f:cb:b7:6f:fa:8d:c4:30:60:22:6c:31:
32:bf:24:12:cf:4c:fe:76:42:60:8b:17:d7:bb:f8:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:45:30:1F:5D:2D:B8:33:96:14:E3:EB:8C:46:5F:B4:4D:12:23:6B
X509v3 Authority Key Identifier:
keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e6:6b:4c:ea:1e:64:e9:f6:4d:88:ab:8d:69:61:5d:71:2d:
29:0e:dd:df:c0:c6:f6:e2:ef:95:1e:75:94:e9:57:64:72:cf:
fb:2c:3a:4d:88:7a:e4:6b:a8:f6:68:26:d9:d2:0a:c0:16:c9:
68:29:1a:07:a6:00:64:9b:bf:63:35:8c:3f:f1:2f:0f:15:f9:
0d:97:53:89:c4:a9:f9:16:69:c1:0c:49:bf:2f:6e:f5:8e:03:
36:8a:7d:f0:cd:1e:b2:cf:62:55:cb:72:6a:bb:fd:e9:cb:39:
f5:6d:06:67:b9:95:86:a1:36:15:26:5c:82:ad:89:d0:eb:cb:
12:e5:34:cc:74:8b:0b:d9:d5:25:e3:2c:42:dd:56:13:13:e0:
6e:39:1b:f0:19:84:84:2b:c1:0d:e6:1c:99:6b:3c:51:59:3c:
15:a1:0a:86:29:3b:94:1f:2a:ad:16:19:4f:10:e1:e0:e0:27:
59:95:56:9c:30:e4:01:ef:a1:49:95:2d:f3:c3:68:ea:92:9b:
6b:d5:24:1b:c6:09:85:dc:b9:15:4e:64:be:ae:98:c5:68:09:
4e:75:27:2c:76:38:7b:85:18:b0:a1:36:f5:49:56:53:dd:c6:
be:64:f5:07:20:ac:8a:59:e4:de:9b:fa:03:14:0b:c5:a5:4c:
cd:26:66:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:40:09 2025 by rpki-client