Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: M8LeBj7OC5oi6AEOGSDsT5RrqVhb1a5EuPYdYRrZM4M=
Subject key identifier: 2D:44:A5:2A:D7:9D:60:9D:62:5D:6C:0F:A8:E6:FC:07:DA:80:04:41
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 01965B02E166532B19F2F47C2159B8894246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 125C
Signing time: Tue 22 Apr 2025 01:00:37 +0000
Manifest this update: Tue 22 Apr 2025 01:00:37 +0000
Manifest next update: Wed 23 Apr 2025 01:00:37 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: 9zcLAUnXDBbSAykSKBN2YPQA+WleIQjLiBDl1zNzmCw=)
2: dr_w0m7Qv5ACMERXy8HC4D9ni94.roa (hash: HJDBt0N6ByEOqOCbXR7DjS91OIQ79dZMS46KwGzNDI8=)
3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:e1:66:53:2b:19:f2:f4:7c:21:59:b8:89:42:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Apr 22 01:00:37 2025 GMT
Not After : Apr 23 01:00:37 2025 GMT
Subject: CN=2d44a52ad79d609d625d6c0fa8e6fc07da800441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:ba:72:cd:58:09:7d:b5:5b:01:12:8f:1e:
94:c8:cc:8c:8a:d4:37:2b:f3:28:bf:4b:ef:5f:5b:
c5:6d:a1:84:c6:86:e7:6a:2a:9b:b4:59:11:c2:88:
80:d4:8e:4e:af:7e:d6:88:14:a1:9b:cf:d3:cd:23:
22:ad:e7:6c:8d:01:48:29:6c:d2:94:64:d8:16:d1:
15:4d:49:af:a5:4d:28:d5:9e:a6:66:e5:59:fc:ea:
13:0b:f1:39:4b:11:11:9d:f4:dc:c0:f3:b7:f7:8b:
ce:83:03:2c:b7:3c:e6:40:f3:12:e2:68:63:f0:84:
6d:d5:24:ea:ea:be:44:5e:48:a6:2d:a7:f4:b8:23:
8f:ee:82:88:5b:7d:78:35:4d:93:f3:1a:1e:f0:51:
80:85:5f:c9:f1:e6:bc:32:da:4b:89:0e:4d:05:fa:
70:a3:e1:dd:9a:a1:4b:3d:41:39:48:6c:42:55:59:
88:d3:f9:f0:91:ad:87:e8:5e:c2:ff:7b:0f:d0:26:
3a:dc:ef:0e:df:2a:42:1f:1f:00:18:79:2a:fd:2d:
06:2e:47:f5:d8:c4:a2:55:3b:96:72:15:bf:17:81:
fe:3b:b9:a1:1d:e9:7f:c1:38:51:ab:03:51:6c:35:
58:4c:9b:37:3e:ca:97:93:32:7f:f7:de:5f:0a:0b:
5a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:44:A5:2A:D7:9D:60:9D:62:5D:6C:0F:A8:E6:FC:07:DA:80:04:41
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9b:3e:c5:ea:42:d0:d7:dd:b0:29:72:3b:ae:0c:dd:81:45:
ec:7d:19:b3:0b:0b:bb:a5:c8:13:75:dd:53:d7:44:fd:0c:16:
2c:24:2b:17:d5:7d:cf:1f:b9:16:02:b9:78:1f:ec:d0:f4:75:
44:92:61:ae:64:af:a3:be:e7:ec:bd:ee:ba:14:82:b7:36:07:
e3:0d:13:37:bc:60:2a:b9:9f:81:4a:9b:d1:21:85:2b:c4:79:
bf:30:8b:ec:6a:b5:58:ed:2d:94:dc:7e:46:57:d5:ac:37:8a:
aa:ba:35:2f:c0:6a:3c:04:34:69:59:5b:e0:ad:68:c3:9f:02:
1f:bd:a2:6d:5d:c6:96:b2:b6:4c:4b:ff:1d:7d:af:e9:82:c6:
9f:94:81:0b:75:91:e1:db:68:96:03:30:03:76:a4:6e:cd:41:
da:25:73:7e:94:d1:34:b3:b2:9d:9b:4b:1b:a6:af:ee:d1:87:
8d:25:27:24:3b:b4:9f:7c:d1:61:79:23:fe:6c:84:1b:2d:50:
99:ec:7c:b6:1e:83:8b:bc:2f:ca:de:94:4e:70:0c:cd:4a:04:
0e:01:1d:59:d6:18:d9:a0:4e:3d:af:74:1f:e8:e5:94:be:b3:
33:df:2c:c0:e0:33:d8:0b:5d:2e:da:42:66:ac:2a:71:24:15:
b1:23:7b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:31:07 2025 by rpki-client