Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
File: JCH_to6rl-JKkGJtkEmL5-1wZvA.mft (raw, json)
Hash identifier: /fOwjmI96fudbYs2FXqdEkiJ/bJqq8X1y1eWn0PsR/c=
Subject key identifier: 45:82:51:5F:9B:3E:3F:0D:60:1B:02:9B:EC:F6:20:F2:BA:FF:18:06
Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Certificate serial: 01964D106BF989EB59BBC60DE1EC5BFC7D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 08:00:43 +0000
Manifest this update: Sat 19 Apr 2025 08:00:43 +0000
Manifest next update: Sun 20 Apr 2025 08:00:43 +0000
Files and hashes: 1: JCH_to6rl-JKkGJtkEmL5-1wZvA.crl (hash: KtAdBcWTKIipyZxM037hrtvwFmtGwonMeQgw3oIckKs=)
2: N0X6xiVzqXxKq1FAQhtD_X-LptY.roa (hash: /exbdfoldwGhZ8sHg6pfpGAkHOc1ALsLXny1F95l6KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:6b:f9:89:eb:59:bb:c6:0d:e1:ec:5b:fc:7d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Validity
Not Before: Apr 19 08:00:43 2025 GMT
Not After : Apr 20 08:00:43 2025 GMT
Subject: CN=4582515f9b3e3f0d601b029becf620f2baff1806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:ae:3c:23:a1:44:16:fe:7d:18:48:ab:b3:
58:4f:ff:60:89:bb:fc:74:c8:df:eb:40:89:7f:64:
19:4a:19:ff:76:7b:43:f5:90:ed:51:63:19:5a:36:
b6:f9:ed:86:9d:56:49:bb:7a:0c:af:8a:95:96:ab:
8f:50:28:65:d7:09:44:c6:e6:f0:11:d1:ad:a0:7e:
25:25:95:92:04:63:45:f5:09:e4:97:81:62:1e:b8:
1f:9a:ad:fc:02:a5:22:6a:08:c4:86:db:52:b7:01:
d6:a5:8f:32:dc:c2:df:21:01:4a:69:c2:98:e5:9f:
43:b5:fd:e2:49:18:65:ab:f0:a4:03:12:07:8e:01:
7a:77:2d:ba:87:aa:a5:22:67:aa:db:6a:f5:44:9f:
66:ba:6f:71:6b:21:bb:91:b8:25:09:b1:8f:26:ee:
78:7a:a8:d0:34:8f:f7:26:01:93:a1:80:6a:6d:f4:
41:d1:59:ee:10:06:b0:70:1e:d6:c6:ec:6b:cf:5b:
fa:d1:51:91:24:ea:0d:8b:a3:41:c0:56:9d:7c:62:
df:e0:0b:50:ad:ca:19:21:9c:c7:b4:89:39:17:c7:
3a:36:cb:d4:7c:6e:c3:92:cd:74:99:a9:c0:28:72:
1a:56:94:4b:2b:fa:a0:5b:36:24:71:fd:f5:79:38:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:82:51:5F:9B:3E:3F:0D:60:1B:02:9B:EC:F6:20:F2:BA:FF:18:06
X509v3 Authority Key Identifier:
keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6f:60:66:da:7a:46:21:f8:75:c2:41:eb:05:3c:5a:6a:8c:
83:a7:10:37:54:e7:7d:50:b5:68:74:08:80:15:e6:84:8c:c0:
2f:5b:6e:51:ef:51:03:06:22:74:9e:ae:30:5a:13:2f:77:ef:
ad:ab:af:4b:54:6a:71:40:0d:ae:6b:f0:c6:9a:51:4c:60:14:
0d:dd:ea:22:d1:da:9d:48:f7:c0:a4:ad:5c:34:35:1e:50:96:
01:7a:b9:5a:07:02:02:ad:8c:88:64:8c:75:3a:ef:61:67:5b:
28:f3:56:7d:1a:ce:9c:bb:cf:27:5b:ee:81:4c:2a:3e:04:77:
36:93:69:0c:e0:d4:42:72:52:05:03:82:5b:21:39:18:ea:c5:
0c:45:91:a0:c1:e3:2f:ee:f8:31:e8:0a:75:05:1c:b5:4d:4c:
04:7e:6a:28:ea:1d:9b:c8:3f:38:1c:5c:3b:2b:d2:79:a1:87:
e6:45:77:cb:f0:3c:24:e5:02:78:fd:ef:ba:6f:a0:ba:93:dd:
0d:f9:d8:4b:a2:55:5b:4f:b0:02:44:5b:df:51:61:39:75:a2:
a4:7a:84:fc:d4:59:2c:77:c5:11:3c:03:ff:ee:06:4c:6e:f7:
53:36:d1:ee:6c:54:c1:2a:e5:4d:dc:2d:c7:81:9c:89:29:f0:
a1:cf:be:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:46:39 2025 by rpki-client