Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: Y0cAHB0vowJQeJB013Vo8HnFydHilpDE+rgS6hfSt84=
Subject key identifier: 8C:39:CC:61:C4:8F:0A:31:E1:FD:0E:1E:E8:31:6E:6F:CC:4E:76:49
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 01965048090DD72E80B365B7919EFBA0E678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 038A
Signing time: Sat 19 Apr 2025 23:00:20 +0000
Manifest this update: Sat 19 Apr 2025 23:00:20 +0000
Manifest next update: Sun 20 Apr 2025 23:00:20 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: 1IZGRyUNXgsbHyQsaRRlVHEsnKcGvxSOHEpw88AkAtU=)
2: gIoP5IlKCAUdNwSrZkk73xG1bak.roa (hash: L6IvKagK21CBw7cUsEmV/ioBkPrOpbbJsBKkV2YZAQM=)
3: tjlBefyTUPW2ocj52DG8SScrNVs.roa (hash: i2v8f90/aacPA+KsrniOR03Tuhb0f1sC6zK1p2LnGA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:09:0d:d7:2e:80:b3:65:b7:91:9e:fb:a0:e6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Apr 19 23:00:20 2025 GMT
Not After : Apr 20 23:00:20 2025 GMT
Subject: CN=8c39cc61c48f0a31e1fd0e1ee8316e6fcc4e7649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:44:a6:a4:4d:7d:83:03:5f:9b:c6:91:e0:
77:27:85:92:8e:07:74:d7:a5:05:5f:17:27:cc:25:
4d:64:cd:86:ad:e4:fe:4c:77:fd:cd:c1:83:51:2d:
1b:fb:e7:bf:9c:fa:f4:f3:5a:cf:b8:fd:76:5e:44:
de:5a:66:25:a0:97:df:0b:13:5b:b1:37:6b:12:7c:
48:eb:ac:85:d8:0f:8b:53:d2:3e:02:a9:d1:f1:3a:
06:69:31:6a:aa:e7:61:2f:c9:1f:11:6b:88:93:6f:
f1:1f:03:2c:39:a5:4e:1f:0c:47:81:aa:2d:d5:07:
d3:48:45:c9:13:5b:03:65:a2:24:d0:6a:29:db:42:
e7:42:18:bc:62:f0:cc:9b:00:91:ef:0d:7f:f5:d4:
bc:57:cc:17:fd:92:ff:b1:52:13:e3:2b:f1:d3:6d:
09:ed:c8:d2:8f:16:01:35:a1:88:27:72:4e:1b:bc:
0f:c0:d4:a4:ba:e9:19:b5:33:ee:f4:e2:27:1c:0b:
65:85:b9:cd:fb:c8:04:91:b7:52:b7:c2:b8:60:90:
cd:d5:6f:90:6a:ba:a9:7e:7e:18:6d:94:75:be:71:
0f:c1:11:5c:4a:77:95:b7:80:8d:dd:5f:54:8a:99:
3d:9a:5b:01:11:fe:87:84:1b:78:a6:1a:e3:9e:5e:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:39:CC:61:C4:8F:0A:31:E1:FD:0E:1E:E8:31:6E:6F:CC:4E:76:49
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b3:fb:fc:f9:ca:f5:42:0f:2d:42:66:d5:16:ba:47:ed:31:
60:85:1a:88:35:17:01:e6:69:4d:1d:7b:1a:e4:13:1e:7f:cf:
2a:42:a4:ef:17:09:4c:48:f5:f8:55:15:06:ac:f4:3f:84:91:
52:d7:6d:17:fb:63:25:e0:96:b6:57:38:17:10:52:88:c0:1e:
94:80:68:8a:45:3c:d1:b9:d6:89:44:3f:c8:77:ff:21:8f:3e:
f1:b5:6c:38:0e:56:ce:77:d4:f6:c8:00:34:04:17:59:ae:cd:
81:a9:cb:e3:68:98:15:1a:cc:4a:de:8f:ce:dd:3a:4f:86:dc:
b9:fc:75:c8:87:50:54:47:d4:58:19:1e:e0:b9:f5:56:1d:b9:
e2:06:4e:98:83:87:6a:3b:b7:8e:e0:93:93:de:e0:73:0a:d9:
bf:cd:a6:7a:c3:7c:40:07:05:a3:15:35:cc:02:b3:23:8f:c3:
36:b3:b6:69:1a:76:38:13:32:4f:e4:37:84:f8:5a:4a:e1:98:
7a:65:23:1d:16:85:90:7f:c3:09:a0:21:f0:d7:d6:67:4d:60:
58:1b:89:0c:c3:08:fc:9d:f6:2c:4c:2b:03:1f:29:1a:c9:de:
be:83:99:4e:b2:30:5f:16:14:dd:e8:80:c4:3b:7e:1a:2e:fd:
89:13:d3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:10 2025 by rpki-client