Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: QRs1HnCtp8vXt0dq8NlZripafAbrozJ8oL9SQ1EFcUQ=
Subject key identifier: D5:48:27:35:F7:0C:AF:3C:24:4F:28:E7:3C:83:25:8C:22:D2:A6:22
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 0196545C12A160CAB7AC9ECF5D7498078ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 144F
Signing time: Sun 20 Apr 2025 18:00:42 +0000
Manifest this update: Sun 20 Apr 2025 18:00:42 +0000
Manifest next update: Mon 21 Apr 2025 18:00:42 +0000
Files and hashes: 1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: MET4jsdCfuv38GULPo1Yug8vJBw1L1zJZGlIyNtUKV0=)
2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:12:a1:60:ca:b7:ac:9e:cf:5d:74:98:07:8a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Apr 20 18:00:42 2025 GMT
Not After : Apr 21 18:00:42 2025 GMT
Subject: CN=d5482735f70caf3c244f28e73c83258c22d2a622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:27:6f:e4:eb:b5:2b:0b:d0:f1:af:80:a8:2f:
8a:f0:55:9b:4f:16:71:ae:d4:81:a9:67:51:fe:17:
8c:ec:c4:fc:bb:72:31:4c:e9:53:f7:23:e4:2d:ec:
ba:49:f3:f6:fe:97:3d:01:82:97:c2:f7:e0:ea:cb:
a7:37:45:bb:af:d6:6a:f9:32:fc:64:a6:81:8f:6f:
38:74:00:05:c1:ad:56:ee:ee:b1:6d:cd:9d:b4:29:
db:c7:8c:62:f9:d2:ea:b2:67:d8:96:e5:d2:13:46:
fc:9c:e7:e4:d2:ea:c0:5a:0a:50:38:13:93:ba:b1:
b3:da:ff:40:0a:47:80:6e:94:af:b9:99:d3:fe:57:
95:ad:2f:3b:ad:0e:1c:4f:60:c7:ae:40:9c:df:af:
29:d3:76:af:f6:09:95:52:1f:40:d6:92:d7:ab:1b:
b3:61:9f:9c:6b:ae:51:56:f5:05:e7:e9:ab:21:81:
08:63:0b:a1:18:a4:a3:9f:f9:c8:b5:37:92:20:d9:
63:55:df:ad:5b:43:06:7d:e6:41:52:0b:b6:7b:ad:
c3:b2:76:b3:99:af:5c:08:da:27:b5:73:4a:fb:25:
9f:02:40:a4:a2:1b:f4:9c:89:7c:05:71:b0:15:53:
91:a7:2f:39:fa:d1:df:af:a8:b9:ee:43:e8:01:e9:
32:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:48:27:35:F7:0C:AF:3C:24:4F:28:E7:3C:83:25:8C:22:D2:A6:22
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b7:2b:27:85:a1:eb:75:7f:33:62:0b:13:c3:8c:0a:5c:33:
e1:bc:bb:41:a5:c9:80:38:69:b7:22:59:4a:a0:72:f0:15:ed:
2b:77:8f:4d:87:06:50:6a:7a:19:62:d0:61:b9:b2:20:c8:08:
ce:98:d3:61:f9:4e:cb:10:b3:4a:77:a7:62:95:d7:b8:74:c1:
34:7a:4b:71:b5:a6:7b:f3:df:a8:f1:7a:e7:d5:8f:25:3b:3d:
b0:cd:8b:f3:20:36:6e:37:8c:22:15:8d:e6:17:29:8d:6f:4f:
f2:f9:08:00:33:22:5d:8c:1b:e8:b9:f7:8e:db:94:de:2a:29:
14:73:2e:89:ee:12:3d:65:8d:02:82:b3:f5:0e:45:5c:d6:29:
91:2f:57:bd:d2:e3:95:9b:13:49:54:db:8f:2b:e4:1d:e9:8f:
c3:78:6f:45:7a:a4:14:13:1b:ef:3c:fe:e8:b8:6e:d1:cb:ca:
08:54:7a:0b:24:eb:7e:89:09:c4:a9:e8:de:50:e1:28:6c:c1:
f5:28:16:b0:d3:3f:84:c1:12:17:04:60:f8:f4:1c:1f:fb:da:
a7:a4:ab:59:bc:c3:74:4b:4d:92:2d:e2:d7:3e:68:40:e2:e8:
8f:85:d1:99:e9:d5:14:32:8c:50:99:dc:cb:7e:d5:ee:cd:f3:
54:3b:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:56 2025 by rpki-client