Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: NyrFBc29K5a5Zgqy0EJ+q2lHmd3SIK4TbicHdyj5wkk=
Subject key identifier: 67:82:4E:41:3E:85:AC:80:31:43:CE:91:AB:E9:B3:22:AA:42:91:CE
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 01964556C11D822DDB6DFC3B3CCF395076CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 0DEC
Signing time: Thu 17 Apr 2025 20:00:35 +0000
Manifest this update: Thu 17 Apr 2025 20:00:35 +0000
Manifest next update: Fri 18 Apr 2025 20:00:35 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: qSg87iJMVRuB0UvMe1kJOfVQ5PqUxdvCY2ziDU2VLxo=)
2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:c1:1d:82:2d:db:6d:fc:3b:3c:cf:39:50:76:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Apr 17 20:00:35 2025 GMT
Not After : Apr 18 20:00:35 2025 GMT
Subject: CN=67824e413e85ac803143ce91abe9b322aa4291ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:76:af:d4:26:47:6f:2a:6d:7d:df:ac:7f:58:
db:59:90:74:bc:84:91:7a:5e:92:9e:f7:12:97:88:
9b:31:77:67:88:57:29:76:a3:ed:b2:c7:5f:eb:2c:
1e:2a:81:83:80:5d:9d:74:85:c4:2d:bd:1a:59:d5:
38:c5:71:a5:c6:ca:99:ab:7d:8b:11:d4:7a:d2:89:
a8:ec:fe:d9:fb:a5:c3:fc:f8:32:3c:51:22:45:b4:
e1:ee:13:9f:3d:f4:78:62:c4:e5:2f:eb:9a:9b:23:
23:bb:1b:3b:39:08:84:46:3a:05:f2:2f:46:ff:fc:
11:b5:c1:23:eb:43:56:b1:68:fd:f4:fa:f7:10:12:
33:1c:14:de:6b:64:56:7d:c6:e4:bc:f1:bf:0c:61:
95:99:14:ec:32:96:65:2d:73:ee:9c:41:e2:50:68:
97:70:14:7b:c2:b3:cc:f7:45:64:86:10:ca:18:2a:
26:a3:c3:d9:ad:4e:a4:6a:6f:2a:1c:13:7b:94:b0:
3d:95:5e:10:6a:cf:8c:20:74:3e:d2:dd:4a:17:b9:
05:56:48:66:dc:1f:cf:a8:bb:e8:6c:f1:0a:cc:77:
94:1a:19:00:1e:c8:cf:61:5e:c7:0c:0b:8c:64:3a:
46:2f:f7:5f:35:c5:2a:c3:94:3b:89:c7:eb:e5:14:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:82:4E:41:3E:85:AC:80:31:43:CE:91:AB:E9:B3:22:AA:42:91:CE
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ca:cc:e0:f0:32:12:d4:32:09:e9:8c:a8:a4:91:04:1f:e4:
32:82:8e:3d:48:8e:d0:ca:5c:46:65:cb:ae:81:41:5f:bc:6d:
8e:54:b1:26:61:92:9e:56:df:00:eb:b4:fe:2e:43:fd:ea:69:
53:a6:5d:38:51:44:36:bd:c8:c2:99:ed:4a:5d:0f:64:ea:fb:
8a:cf:26:4d:dd:93:38:12:ca:bb:03:16:45:6a:72:d4:58:c7:
75:b4:1f:05:22:3f:de:b7:9b:cc:15:56:3e:ed:a1:03:09:30:
40:c5:32:a6:33:bc:92:99:48:f5:da:54:ba:a0:46:21:1e:b0:
4c:cf:7a:a2:da:a3:19:84:1a:ac:79:cd:d4:32:6d:e3:a1:ed:
22:29:7e:53:4e:de:a3:ad:eb:6c:d1:61:3f:b0:3f:79:4c:33:
28:47:95:de:ca:04:4e:90:4a:39:57:7c:ea:c8:47:5d:c1:30:
b9:ea:20:3f:99:4e:9e:0f:f7:4b:79:38:f2:72:a4:a3:bb:3f:
b3:e7:19:ed:9a:21:46:93:ce:20:b6:2c:16:e3:1c:8e:39:02:
79:69:c9:e1:a1:6b:cf:2b:b0:e1:9e:8e:5d:73:71:6d:2e:ec:
f5:26:27:05:df:bb:26:85:d5:82:0a:8a:f3:7c:7c:7f:19:ed:
2e:4f:9b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:35:40 2025 by rpki-client