Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: WfloDjWJZ0HLG6rXxSvO3MGVbb2BLAyJ1Oh8/0Vdru4=
Subject key identifier: 22:32:25:63:40:D4:72:8E:E8:0C:AA:B4:89:AE:48:7C:5F:F7:43:FB
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 0196764358B5CF4E682F674DDCA879934AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 01ED
Signing time: Sun 27 Apr 2025 08:00:47 +0000
Manifest this update: Sun 27 Apr 2025 08:00:47 +0000
Manifest next update: Mon 28 Apr 2025 08:00:47 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: g4qqDzfJCBTCgKMfzGM+18xCCaxEkaXJ0WNA453J5Q8=)
2: Np4SGefOBCZiVQwVOhlw43OZIsc.roa (hash: 4LHgzyDtN1tlOUmbwRr7JMfVVPaWldi7uvsqlFbuzcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:58:b5:cf:4e:68:2f:67:4d:dc:a8:79:93:4a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Apr 27 08:00:47 2025 GMT
Not After : Apr 28 08:00:47 2025 GMT
Subject: CN=2232256340d4728ee80caab489ae487c5ff743fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:9b:a2:91:d8:bc:17:00:09:c5:cb:7b:73:
8a:90:64:8c:96:46:35:73:c9:c7:7b:f2:21:86:6d:
fb:9f:3f:ab:aa:6e:15:17:3b:5c:8b:d8:3e:75:ba:
f5:74:1e:18:29:16:4f:97:9e:22:1b:cf:53:01:b8:
7e:89:b9:6a:0a:4b:e5:59:b1:69:24:43:0f:8d:dd:
8f:75:ac:a6:b9:d3:8f:0d:a9:20:c3:3d:cf:b3:d5:
d4:3b:76:78:9c:8f:d6:0d:7c:e5:41:68:f3:bf:55:
74:93:62:c0:00:5c:0d:2b:c4:a4:52:0d:a9:54:3f:
ea:75:0a:d2:00:a0:54:95:7c:cc:88:5a:61:8b:ad:
2a:70:c9:2c:51:b6:8e:3b:1c:3e:4b:b5:be:26:a1:
ef:16:24:fd:28:93:6a:47:00:1e:41:08:3d:d6:a7:
59:1d:96:67:b0:49:92:dd:36:e0:94:00:bd:a4:70:
85:34:ae:40:39:a0:a3:f6:79:40:9a:88:0d:d2:86:
c0:69:c0:f4:33:5f:f9:d6:73:54:fd:a3:c4:84:d3:
a0:94:19:94:b0:13:7d:bd:8c:75:8b:0b:ea:77:61:
44:ad:09:3b:ab:bd:6c:75:4b:d6:56:a9:b2:4f:74:
12:30:e1:95:db:ee:35:f2:84:a5:9a:d9:02:a7:9c:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:32:25:63:40:D4:72:8E:E8:0C:AA:B4:89:AE:48:7C:5F:F7:43:FB
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d3:a7:29:48:30:c1:c4:d3:6b:6d:c1:32:a7:6b:64:6f:d7:
ff:c4:c1:20:07:f4:52:7c:b1:17:9d:d0:08:97:2b:25:df:0d:
45:60:dd:a2:16:54:63:9a:ad:89:a9:ae:0c:b6:08:ff:1d:b6:
84:ae:a3:22:7d:e4:d5:75:41:b6:0c:18:f1:aa:fb:34:1d:9c:
c3:c3:a9:3d:d7:07:b2:a9:44:99:ff:53:df:a7:dc:f6:69:07:
6e:c9:d0:ff:19:1a:37:bc:1c:dc:70:98:f6:e6:82:f8:1d:0e:
23:19:ad:d8:9a:9c:24:a8:f3:4d:00:7f:f3:74:e7:de:c0:57:
53:86:31:84:03:bd:93:38:f6:7c:3e:88:d4:a9:eb:38:7c:0b:
7b:dc:e6:8d:77:b1:25:1f:7b:e1:a3:60:f1:6f:5b:4f:4b:87:
47:d1:59:e2:77:3b:e6:8e:01:8a:94:b7:4d:f7:5f:df:d4:18:
b2:7d:08:ec:bc:97:6c:02:07:53:f8:24:9c:dd:e0:d4:e5:25:
9c:e0:1c:cc:4d:19:45:19:5d:b5:bb:0d:b4:b4:c4:02:30:27:
01:ed:60:37:26:62:a8:22:9c:a7:b3:cd:59:a4:47:8e:8b:98:
c5:2d:6d:4d:5a:8b:f6:df:f9:d3:d6:96:e2:23:ee:07:cf:58:
a0:bc:f2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:06:01 2025 by rpki-client