Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
File: JGv0aYcy2l-8fCAC9jlnxo9W22w.mft (raw, json)
Hash identifier: gEbtx2Il2zX/9TylZdBiV+y7HRyjQuBjqq5d7iZ3JbY=
Subject key identifier: B5:13:5B:B9:19:51:32:A0:07:04:D2:7D:C4:C8:5F:AB:F7:1C:CB:94
Authority key identifier: 24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
Certificate issuer: /CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Certificate serial: 01963207ACB40DF85A8282FF7DC6FE366679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
Manifest number: 4A
Signing time: Mon 14 Apr 2025 02:01:25 +0000
Manifest this update: Mon 14 Apr 2025 02:01:25 +0000
Manifest next update: Tue 15 Apr 2025 02:01:25 +0000
Files and hashes: 1: JGv0aYcy2l-8fCAC9jlnxo9W22w.crl (hash: 3nZDF/Ixwep0fnRRNBmBrTOAHe4V2Jmn8QIlihgMSYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:07:ac:b4:0d:f8:5a:82:82:ff:7d:c6:fe:36:66:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Validity
Not Before: Apr 14 02:01:25 2025 GMT
Not After : Apr 15 02:01:25 2025 GMT
Subject: CN=b5135bb9195132a00704d27dc4c85fabf71ccb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:79:f1:b3:70:33:e2:c8:10:f2:26:58:65:
7e:a0:5b:b1:6a:36:4e:03:77:1e:b7:28:15:a4:d2:
55:0f:0f:69:4c:64:63:ff:38:24:5e:39:7e:56:03:
a1:ab:d9:ac:2a:78:15:14:fb:ef:8b:65:37:04:36:
e3:c7:77:70:4f:6c:dd:1b:71:f8:7a:58:bb:1a:13:
a3:5b:8a:c7:e7:78:ba:db:0e:79:2a:dd:a9:a7:3f:
4e:46:f2:b6:80:19:5a:5f:9f:c8:fb:0e:47:17:98:
93:cf:00:f7:12:95:d5:d1:23:87:75:3f:d7:25:5c:
1b:a0:c3:53:7f:98:f3:bd:8c:9e:ed:60:9d:5d:de:
7a:71:02:6a:39:4b:5b:b8:7f:0d:b9:95:d1:ea:d8:
d6:40:9c:2f:6b:7e:1f:01:11:21:9b:d7:a5:7d:be:
a8:e1:60:6d:d1:60:2f:6d:b6:8c:a7:ad:29:39:a5:
32:1b:b5:c5:32:ec:1e:08:8e:b0:c5:7b:2c:cf:37:
58:b2:49:70:8a:45:2b:be:41:90:4e:71:3a:67:aa:
27:4b:d9:42:1c:cb:3a:c6:d1:11:2f:6c:37:e7:ce:
7e:0a:0b:2d:72:64:28:1b:c0:29:fb:06:4e:1a:c5:
3c:63:4d:2b:37:06:90:f1:ad:51:26:bb:e2:54:aa:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:13:5B:B9:19:51:32:A0:07:04:D2:7D:C4:C8:5F:AB:F7:1C:CB:94
X509v3 Authority Key Identifier:
keyid:24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f0:6f:d2:57:c1:61:96:b6:1d:e6:48:d1:e8:11:25:12:83:
d4:3d:23:2a:9d:ac:35:07:5b:62:0a:1a:64:95:66:7b:8c:3b:
9a:e4:0a:44:57:b2:95:5f:60:c7:d8:b0:bf:89:5d:87:f2:69:
6f:11:4e:41:e2:00:f7:ad:95:9b:ba:62:e8:76:d9:46:26:f1:
52:cd:d8:bb:bd:2c:7d:1f:d7:21:21:8c:27:13:88:ef:8a:fb:
11:6f:e1:eb:79:63:09:2f:36:b6:ad:b2:b1:28:b8:a4:91:42:
f5:12:94:e8:e6:0d:c5:78:cf:af:29:43:b4:eb:4b:a4:53:76:
47:4a:7c:b8:07:7e:d6:ae:7c:2c:8d:08:a0:b1:da:90:57:73:
40:8b:11:2a:df:68:6e:11:ae:d4:f5:56:d1:b9:f2:4b:09:06:
3a:26:ce:67:81:b0:17:d5:d6:ec:25:5f:f1:0d:2d:54:1a:0f:
b2:6b:b3:d3:d5:3d:e2:40:3e:25:43:d2:8b:8a:b7:b8:2a:ce:
ba:81:d8:72:6d:f4:40:2a:9a:a6:1a:c3:e0:3b:b9:8a:99:5e:
59:28:5d:a6:3b:c6:b1:57:6b:09:c8:6a:f4:ff:f6:0c:4d:68:
cc:46:f9:72:49:5f:69:de:21:c6:4d:1e:c0:e8:65:7f:b0:e3:
26:05:71:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:48:38 2025 by rpki-client