Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: Zxpc9NlpNuF7IfxyS15vTIZ55flbYuvKw/3mnyJ8pHY=
Subject key identifier: 5D:8F:4B:EE:16:6D:42:B5:68:02:37:05:66:07:3D:CA:0A:3E:6F:7D
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 01969039E1C60AC6A6A481166C3165751965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0CBD
Signing time: Fri 02 May 2025 09:00:34 +0000
Manifest this update: Fri 02 May 2025 09:00:34 +0000
Manifest next update: Sat 03 May 2025 09:00:34 +0000
Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=)
2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: aqkVE2tIIGqB1es7VyuUCfakkOvdq8ClY8pJH2aIxUI=)
3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:39:e1:c6:0a:c6:a6:a4:81:16:6c:31:65:75:19:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: May 2 09:00:34 2025 GMT
Not After : May 3 09:00:34 2025 GMT
Subject: CN=5d8f4bee166d42b56802370566073dca0a3e6f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:38:29:39:64:65:fc:96:85:85:66:11:ec:
db:f3:48:88:59:32:f5:9b:29:49:8c:5e:4f:29:96:
27:a9:a5:9d:76:11:64:47:e2:a8:a4:15:e6:a4:00:
62:fd:ac:e3:d8:66:79:45:fd:1d:ce:ea:d8:98:03:
02:d4:1c:20:10:de:a3:c5:b1:a5:3a:a1:ff:0b:ff:
58:c4:fd:8e:48:14:48:c7:57:82:a3:1e:97:05:06:
91:4b:79:ae:16:76:ff:e0:4c:bf:49:30:9d:c2:0d:
a7:e0:54:fd:94:a1:56:c5:fa:5b:c3:55:35:ae:21:
55:f6:9f:22:2d:90:bc:a5:41:25:84:1f:13:8e:bb:
2b:ed:4f:ac:24:6b:5d:cc:59:01:55:16:39:4f:a4:
58:e0:86:49:84:0a:ce:47:cd:aa:1b:21:4f:76:8d:
d8:24:37:17:0e:99:8c:a0:c7:52:d6:8e:44:60:47:
bc:c3:75:2a:74:14:2d:d7:5f:6b:b3:32:06:43:e7:
6d:a0:de:35:ed:ef:84:c7:ea:79:f2:16:d5:65:00:
46:fc:42:7e:86:7b:5c:31:14:13:a8:f2:d6:8b:b6:
e1:fd:59:0b:72:9c:d3:9e:24:51:34:9d:a9:f3:c9:
02:08:a1:f5:b5:3d:4c:9f:32:39:d4:dc:3a:4b:76:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8F:4B:EE:16:6D:42:B5:68:02:37:05:66:07:3D:CA:0A:3E:6F:7D
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:54:97:f4:d2:92:d3:5c:1d:6f:68:76:90:78:a6:af:80:bb:
f9:be:50:65:02:0d:89:6f:54:ac:c5:1c:c0:49:b6:cb:6c:41:
3a:f7:6a:ca:db:92:ed:c0:1e:7a:43:ea:93:b1:96:46:71:ce:
db:ef:8e:04:bc:7d:2b:12:cb:7d:bc:85:b0:0e:c7:89:b2:fc:
e4:91:dc:0e:67:e7:7b:e7:a4:1f:04:1e:57:3a:d0:55:b5:a4:
16:ab:76:d3:7d:a8:63:6b:5a:e1:55:a8:6c:5f:13:00:65:e2:
c1:cc:96:c9:ad:0d:35:db:cb:71:ae:67:0f:ce:98:c2:2a:6b:
b0:b2:b5:e1:eb:b2:9f:59:06:95:6e:15:ee:a4:f1:fa:c1:af:
07:6a:5c:3d:ad:b2:ee:4c:04:6d:0e:6a:aa:c9:dc:13:a3:59:
9b:82:ea:17:2d:9b:36:c3:ac:c3:6e:08:74:db:8a:2f:2b:fe:
9e:d7:f7:ff:38:2a:39:23:cb:12:cf:4d:ac:3c:13:55:c1:70:
ae:2c:0c:d5:02:50:22:4d:a3:b4:f7:d9:0b:40:b1:e7:32:c5:
a4:73:60:79:1c:61:77:6d:d1:8d:7a:06:bf:20:af:6c:5b:8c:
04:c8:60:64:1f:39:c4:67:81:79:27:2d:70:ba:28:65:ae:31:
e1:da:fa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:32:32 2025 by rpki-client