Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: gvVZfUpcIQ9nbqvcP6S3cF5P2I85sBVgUcq+rLvPgL4=
Subject key identifier: DC:47:EE:0A:DF:2C:AB:09:8A:65:55:6A:82:9C:52:BA:D6:3F:03:FC
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 01967F461990BB4CAE2E0A45DE9C2689CD63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0C0A
Signing time: Tue 29 Apr 2025 02:00:22 +0000
Manifest this update: Tue 29 Apr 2025 02:00:22 +0000
Manifest next update: Wed 30 Apr 2025 02:00:22 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: uyQCC5EuLGX2iW3fXpPWSf4JHuqz+4SxdKApfKnZAA0=)
2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=)
3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:19:90:bb:4c:ae:2e:0a:45:de:9c:26:89:cd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Apr 29 02:00:22 2025 GMT
Not After : Apr 30 02:00:22 2025 GMT
Subject: CN=dc47ee0adf2cab098a65556a829c52bad63f03fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:bd:e2:71:60:c9:59:81:50:a5:6a:21:97:
de:bd:5c:57:f4:a4:b6:88:c4:69:18:b4:f9:0b:4e:
34:be:39:c7:76:d3:5a:e2:67:33:1d:5c:c1:94:af:
17:e1:99:e1:57:59:3f:c2:d2:cd:5a:50:80:da:85:
e1:e4:57:c8:7b:1d:7a:b8:f0:f1:be:1c:db:22:81:
c2:b6:1f:f0:63:3c:4c:c6:65:e8:03:94:b3:e9:85:
c3:02:bd:6f:8c:67:63:0d:ca:30:bc:ea:1d:d4:e6:
e3:0d:b8:d9:30:b2:d3:22:ee:b2:41:ad:59:72:fb:
76:77:f9:62:97:39:f2:14:cf:0a:46:9a:66:16:ba:
88:24:02:3d:93:84:29:81:9b:4a:bd:20:af:06:1e:
ab:1d:cf:ee:53:ce:f3:92:f4:e2:b0:1d:2f:fb:47:
02:8d:ed:b0:86:f2:ab:70:5d:3e:ca:a4:ca:be:63:
b6:24:29:ac:8f:b4:80:c0:8e:6e:01:fa:c9:16:3b:
74:b4:1b:ad:c8:83:73:9d:ac:d8:7c:5e:ff:13:a0:
c8:fa:a4:04:fc:97:65:66:09:ee:d2:e0:e5:06:6d:
48:86:06:e3:12:d3:87:f5:19:ef:b9:10:44:02:7f:
08:5a:20:eb:f1:8b:2a:0c:4b:8e:93:65:19:17:da:
c6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:47:EE:0A:DF:2C:AB:09:8A:65:55:6A:82:9C:52:BA:D6:3F:03:FC
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d6:a0:6d:14:64:a4:0c:d6:0c:4d:86:8d:c6:fe:50:17:ab:
ae:53:ea:aa:03:00:53:ac:1e:c3:b1:70:51:62:33:66:72:16:
6d:41:cf:48:3d:88:97:41:69:61:27:b2:45:24:26:89:15:ad:
0c:24:19:c6:c9:25:8f:14:da:cc:ad:a4:19:cf:6e:85:de:0b:
98:7c:86:0b:3b:18:b1:28:f2:8e:d7:0f:94:f7:f7:77:da:38:
4a:bc:fb:e2:5e:96:b2:75:d5:43:cd:7d:9c:7a:14:30:43:45:
fc:0c:c9:b3:97:e7:7c:e4:0e:76:c2:ca:e9:5b:61:46:55:97:
1c:c0:d7:c0:28:15:f8:c7:68:33:2f:06:73:cc:b8:92:5b:53:
53:91:83:dc:b1:49:f4:8b:b9:ef:15:6a:b5:1b:7b:44:9c:23:
79:bb:c0:1e:46:8d:81:6e:49:7f:30:86:a4:90:0e:26:f0:78:
b0:19:43:46:70:0d:57:00:28:e6:46:5c:44:b8:74:ad:c9:cc:
4f:b1:b2:ef:85:81:a0:fa:4e:c6:7f:86:18:d9:d0:51:d2:22:
ba:b8:6f:8b:c9:21:48:aa:31:7e:32:83:e8:0c:22:02:06:4b:
e1:06:e4:b9:a7:91:67:24:79:de:aa:0d:60:32:d1:8b:b1:fc:
bc:15:4a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:41 2025 by rpki-client