Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier: Sfh+YoCLoqRvQDbn7XowpZA3Qf3PLuKV4E+AW42Gmt4=
Subject key identifier: DE:A5:B5:5B:DA:41:64:39:B7:FF:71:DA:AB:CC:29:DE:AB:21:75:8F
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 019644E917BCB506957D72B4C9C4C94E9AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number: 0B8A
Signing time: Thu 17 Apr 2025 18:00:48 +0000
Manifest this update: Thu 17 Apr 2025 18:00:48 +0000
Manifest next update: Fri 18 Apr 2025 18:00:48 +0000
Files and hashes: 1: DdP_Bqbhgl16gdJsvkBhi1YcDjQ.roa (hash: I6Jh8sH5S9Q2lg3Ub1gkdbdEGtUo1NZqfvOrCbSIvmc=)
2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: nUPRzIEjgaeOQeND5xDOCcc1X1lMzCNT6w5AhZ/b1L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e9:17:bc:b5:06:95:7d:72:b4:c9:c4:c9:4e:9a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Apr 17 18:00:48 2025 GMT
Not After : Apr 18 18:00:48 2025 GMT
Subject: CN=dea5b55bda416439b7ff71daabcc29deab21758f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:47:4c:0b:01:d1:62:0b:ec:0d:3f:11:dc:
52:2b:4b:38:9f:a5:40:5d:5a:86:af:fd:68:47:3d:
cc:c3:e6:ae:f7:e1:ea:4b:89:42:83:65:00:0d:0a:
11:fd:03:e5:b8:bb:30:47:1a:fa:ec:82:86:b9:c9:
b4:b6:08:a6:56:31:bc:2e:4a:75:71:22:c4:33:d1:
0b:e1:c1:cd:20:01:21:7d:a9:c6:3c:6b:3b:ab:33:
c3:35:e3:fe:5f:60:c2:a8:c2:c0:3a:64:36:c8:70:
99:f7:21:74:4c:c2:4f:3a:e4:5f:99:ab:1d:e1:b8:
cd:53:0f:31:88:14:5d:a8:ab:bf:f3:43:48:b7:d8:
0b:41:eb:5f:8f:84:da:5f:83:e2:8b:25:30:b5:af:
e8:8c:c6:ab:fc:86:44:c1:4a:9e:c5:cc:62:6c:5b:
a7:02:72:61:ed:2a:97:60:8f:6c:b8:40:aa:d6:17:
2f:d0:7a:4f:2f:b0:11:0c:ce:a8:c8:9e:31:24:7b:
29:61:9d:b4:ba:01:04:88:47:d1:fc:80:38:26:ff:
a1:c2:d4:38:9a:ea:7c:45:92:29:4a:bf:bd:37:5e:
4c:bb:1d:32:a3:d8:b8:8d:df:8e:ef:07:60:5f:c2:
5f:60:7f:2f:65:4b:a7:c6:d8:fb:4b:5b:7a:74:e3:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A5:B5:5B:DA:41:64:39:B7:FF:71:DA:AB:CC:29:DE:AB:21:75:8F
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:34:70:29:a1:ba:c3:38:71:2d:ab:27:14:c9:ae:3f:0b:57:
f4:09:46:e9:50:1e:92:e6:43:f3:d5:2b:f9:1b:8a:a9:34:06:
25:2b:ff:ad:1a:a2:ad:b5:ce:e1:d0:34:7c:19:1b:3f:2f:27:
83:03:1f:b8:94:55:80:c4:6d:1f:f4:65:7d:2d:50:1e:48:a5:
f5:a8:c2:2e:2e:10:b6:f1:ca:77:63:bb:26:0d:2d:6f:ad:47:
a8:96:eb:63:a7:5a:bc:36:5b:3f:87:0b:f9:d0:9d:a8:bb:aa:
07:c3:7e:c8:26:b3:88:68:d8:74:ad:64:59:38:b0:17:cb:ec:
0e:4b:12:27:4f:59:95:27:88:57:e7:8b:fc:5a:43:7a:8b:ec:
0b:df:51:24:e1:0e:55:af:d1:5c:20:95:97:35:a8:25:46:4b:
6b:f7:47:e2:fa:ed:54:0f:2e:31:80:29:bb:9f:7f:fc:af:a5:
f8:e7:5b:37:5a:54:ea:5e:f7:cb:6d:a6:a4:5d:f0:9f:21:ec:
d2:6a:1f:4d:16:aa:15:30:bd:31:a7:43:b1:07:7d:31:90:f5:
f9:e3:6f:c5:7a:1c:9b:b0:10:f5:31:f7:a4:8b:3e:09:39:1e:
a1:83:c8:17:ae:54:98:21:e0:ea:38:11:50:52:ec:01:5a:2a:
f0:ea:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:38:45 2025 by rpki-client