Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier: B5PgtPjwxmtBM/Pw500GgLlZDVF/lwrM1z9dxSpkK78=
Subject key identifier: C1:54:A8:4F:38:53:02:4B:C4:89:82:75:39:29:C6:49:0E:DB:0B:66
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 01967FEB1907563CE0288CCA3FC4EA452886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number: 0988
Signing time: Tue 29 Apr 2025 05:00:35 +0000
Manifest this update: Tue 29 Apr 2025 05:00:35 +0000
Manifest next update: Wed 30 Apr 2025 05:00:35 +0000
Files and hashes: 1: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: yehpOdl5fBqnEUrOhTtOGMR+ERQEEZIKm9JgRyzFddk=)
2: Yz6JK1p8nAWa4yvE6SKtIQJ_V1c.roa (hash: rByHn6YmBo2+AfIQ5f6f0MI7t8+wl3rDT7243r2K7f4=)
3: wyMVR4dEtlYqNcQNudWP-vZ9cs4.roa (hash: 9/Au8AXYJlANsGCX+KV4wLuBFADmhxnPsp4Mf5t4/BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:19:07:56:3c:e0:28:8c:ca:3f:c4:ea:45:28:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Apr 29 05:00:35 2025 GMT
Not After : Apr 30 05:00:35 2025 GMT
Subject: CN=c154a84f3853024bc48982753929c6490edb0b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:ef:4a:16:6c:a4:ce:fc:d5:2e:4c:67:51:
89:74:09:a3:b5:57:9e:45:c1:50:54:59:0d:25:54:
a3:69:5c:68:38:67:2c:07:ae:df:b5:97:ca:98:bf:
f9:8c:11:b3:ea:84:f0:83:53:39:a8:47:a4:63:33:
cb:e0:1a:ae:aa:99:05:23:4f:c5:4a:92:8d:aa:0c:
13:d9:1f:d0:d2:c2:f5:20:28:fb:f5:e3:9a:ed:3a:
38:63:75:63:21:de:6f:45:8e:ae:0a:f0:7e:94:ae:
5f:36:cc:28:bd:46:b7:79:db:60:d1:f5:34:65:20:
57:83:ca:8d:fb:8b:b8:94:b1:11:e2:bc:ce:b0:e7:
af:dd:2e:e7:5b:c2:04:66:e6:bd:aa:72:96:a8:d7:
76:bb:35:e3:38:98:55:6b:97:37:e0:13:63:ba:c8:
32:e1:89:0f:ab:b5:9d:19:a0:ef:e5:a1:7e:79:49:
c6:84:5c:5c:d3:c7:11:84:ad:9c:66:f2:fc:68:d6:
a5:2b:ef:81:10:5b:2f:bd:69:47:d0:5c:fa:31:0b:
9d:cc:bb:ed:de:c2:2c:48:6c:3f:5a:3f:b7:18:e7:
02:14:4b:48:05:13:0f:6a:4f:24:b4:ca:85:c6:61:
69:ba:0f:d6:08:a8:7d:dc:f6:5e:b1:51:44:ee:35:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:54:A8:4F:38:53:02:4B:C4:89:82:75:39:29:C6:49:0E:DB:0B:66
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2d:57:fd:75:43:6d:d7:e6:1d:7b:ee:23:05:d3:8c:a9:62:
5f:00:be:ef:09:3a:76:a4:6e:4c:0e:13:70:9c:83:20:3d:fa:
39:11:ec:d7:7a:dc:36:3a:27:79:8e:de:c2:c6:9d:45:31:f6:
e9:8d:5c:a8:91:bb:53:07:ad:97:42:5a:dd:0e:aa:31:1d:0a:
3a:fc:1e:5c:8f:c7:df:50:33:0b:43:5a:62:7d:d2:43:0d:77:
d4:1c:5e:e4:fb:e9:df:53:07:fe:f0:eb:d6:b9:bf:cf:29:9a:
a6:72:d3:1c:68:ee:57:ab:4b:b6:10:9f:52:5f:18:c8:38:cb:
89:d3:0b:9a:10:55:cb:5d:09:2a:f7:65:7e:3e:99:39:f8:50:
8e:6f:3b:ce:7b:9d:36:7b:5f:76:6e:c3:6a:d5:dc:77:4e:67:
08:4f:e5:6a:9f:0a:a1:59:87:fe:fb:3a:01:42:19:84:9e:cf:
53:8e:2d:a0:5e:17:fb:54:6b:90:50:bd:9e:71:1c:67:82:09:
74:20:21:bd:70:e8:fe:6d:06:12:35:3a:1a:03:47:57:02:30:
50:57:e2:b4:07:7d:3b:c9:f7:bc:85:44:d5:f3:ce:76:03:b2:
93:50:6c:db:1c:e9:08:4c:aa:4e:56:af:b3:57:f3:09:03:8c:
0a:dc:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:21:56 2025 by rpki-client