Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File: JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier: WyoMbkdo1n2szv2vNhDSgCVMBgPQxTEtqa44Sv1xUxQ=
Subject key identifier: A9:A9:97:5C:B4:76:D0:58:FC:A0:68:8D:7A:41:56:A9:15:98:BE:77
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial: 01965982C310EC272D53FD06C85DDDD8EC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number: 0AD5
Signing time: Mon 21 Apr 2025 18:01:03 +0000
Manifest this update: Mon 21 Apr 2025 18:01:03 +0000
Manifest next update: Tue 22 Apr 2025 18:01:03 +0000
Files and hashes: 1: C2ecozniAHAj0uhFfwHN_H6EGZA.roa (hash: EZUOiLLYsi9hRi0qVE5EwgylGRW0PHLtxyCT19uY13Y=)
2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: ndB/3BcByTQueNjjs2OFjOdCz20vfNtf+rp0l8i+kk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:c3:10:ec:27:2d:53:fd:06:c8:5d:dd:d8:ec:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Validity
Not Before: Apr 21 18:01:03 2025 GMT
Not After : Apr 22 18:01:03 2025 GMT
Subject: CN=a9a9975cb476d058fca0688d7a4156a91598be77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:df:1f:27:b6:2e:89:ef:0f:91:b5:91:62:
b5:fa:0c:0a:bf:9b:6e:f3:08:ed:f4:7c:ff:af:1a:
5d:de:56:3e:46:80:f0:42:01:6d:bf:ac:57:9f:91:
54:ee:ac:36:c5:ee:2c:bd:79:56:8d:fd:5a:b6:6b:
e8:2d:92:2f:6e:af:1d:9f:d8:26:88:6c:03:1a:4a:
f0:db:12:33:10:6f:1c:a0:3d:a0:4d:6e:ca:8c:8b:
8d:e8:f6:73:be:c2:93:f0:94:c2:66:04:f5:6c:30:
ef:07:4d:99:0e:f9:2d:1e:a4:da:be:38:d6:f5:17:
48:4f:36:62:28:4e:7a:af:52:9f:4c:c1:fb:e9:c7:
f2:7a:9f:71:6a:8c:ba:b1:48:e4:7e:f8:ab:fb:14:
64:fd:9f:cb:41:13:89:95:51:a7:fa:3a:40:da:1a:
e8:c2:db:c2:a3:73:cc:be:f9:f8:e7:d9:a8:34:58:
19:31:50:89:3e:68:45:65:8d:15:99:6c:05:4e:4b:
e8:dc:ef:40:54:6f:42:14:4c:74:cc:58:62:c4:92:
87:24:26:15:d3:16:47:3b:b1:18:60:66:08:2a:53:
16:5c:19:da:3f:52:4e:7c:81:05:9c:4a:34:4d:7f:
8c:42:94:b7:b9:6a:7b:39:c0:5b:a2:8e:8c:76:c9:
09:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A9:97:5C:B4:76:D0:58:FC:A0:68:8D:7A:41:56:A9:15:98:BE:77
X509v3 Authority Key Identifier:
keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3d:71:b7:76:4f:ba:20:3a:48:13:cb:93:ba:1c:19:8d:31:
c4:57:ee:43:d9:77:0e:c8:e2:38:87:b4:0c:a5:ed:34:bd:f8:
b9:34:f1:47:ad:16:a4:84:67:c4:95:59:02:cd:d1:44:df:1f:
b9:a5:ca:68:1f:63:85:07:ac:97:de:12:c9:fa:fb:83:04:26:
99:35:18:7a:31:f3:3d:c3:44:14:4f:cc:a8:05:f8:c4:8b:64:
89:55:04:41:4b:58:11:a7:3e:3b:2f:eb:3d:b4:6d:20:9c:24:
c3:6d:3d:a4:95:79:2e:b7:d1:ff:7c:9d:7b:20:71:b6:a6:b5:
d8:46:41:e9:83:e0:48:32:2f:11:cc:5b:8f:f4:db:d2:0b:97:
56:4a:b7:44:de:2a:d6:a2:2d:ba:ca:2e:20:1e:01:37:49:e7:
a2:12:45:c6:00:a1:36:a3:51:3d:ec:cf:2e:75:f7:97:56:34:
38:84:b9:e1:53:40:70:5e:06:44:2f:7c:78:c0:94:8f:22:aa:
b0:e0:1d:fa:1c:a4:b5:e7:b2:c4:5f:66:43:84:ef:fc:f0:ad:
a0:b7:f8:a0:0a:79:ec:4e:b3:b2:1a:72:5c:53:5b:d9:b0:66:
8a:21:1a:25:84:ab:b7:11:89:76:a8:54:13:58:44:5e:eb:60:
83:e9:fd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:42 2025 by rpki-client