Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: pCLxP/RXgcuvrTmwDtckbfMVQTmCmZpcr/bxVFnwGuk=
Subject key identifier: AF:9B:0A:F9:50:17:00:04:07:61:BF:F8:00:F4:75:7C:D0:81:A5:CE
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 01964B58C944447C9C32C20A8CC2EADF7FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 00:00:31 +0000
Manifest this update: Sat 19 Apr 2025 00:00:31 +0000
Manifest next update: Sun 20 Apr 2025 00:00:31 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: zcEc31q8tRXwC5U0NN5+OBrkkMmxPKyWuC7Rw7aVXOA=)
2: __QM0Y00A8o9_wWPyDLaVQsYZls.roa (hash: Tt5jgaPYYhPlmRSiaLMYS5DQDbnj5Cw5Zwmf+6k+kyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:58:c9:44:44:7c:9c:32:c2:0a:8c:c2:ea:df:7f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Apr 19 00:00:31 2025 GMT
Not After : Apr 20 00:00:31 2025 GMT
Subject: CN=af9b0af9501700040761bff800f4757cd081a5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:3c:59:ed:c4:25:f0:77:d2:e7:e4:3f:e3:
18:56:7a:4b:b1:b9:da:b1:58:52:26:f0:ed:a9:41:
fe:8f:54:f0:b0:a0:61:27:b1:55:1c:6a:54:dc:e8:
82:5d:e6:eb:72:d3:77:8a:6a:7d:fb:4c:a8:5e:e4:
a7:28:09:94:02:a2:3f:84:61:5a:8e:cb:87:9c:62:
81:15:e8:bd:a3:8f:2d:b3:77:83:b4:e0:1e:ac:90:
fc:1b:b6:6f:03:1f:71:03:ea:90:77:99:c5:59:c9:
57:f8:c2:84:3f:60:a7:ec:aa:43:2d:5b:9d:86:7a:
4e:46:da:90:73:a8:28:71:0f:87:8f:31:f7:17:70:
8b:d9:d3:10:60:97:b9:34:62:b1:a8:a8:bc:ae:72:
44:cb:e9:f0:02:7b:df:56:48:cf:9f:50:d4:90:f5:
f3:17:24:74:c4:40:b8:ab:f1:8d:2e:24:82:8c:ff:
e5:d3:15:a0:0e:34:4a:e7:08:93:26:d0:98:23:5d:
c6:17:6c:94:fe:40:02:34:58:97:53:3e:88:9e:86:
96:dc:e0:10:04:17:c4:33:e1:73:96:e5:91:d8:8b:
1e:26:a0:a0:db:be:d7:a7:01:eb:8f:da:92:64:6a:
d9:87:db:22:ef:bf:81:42:83:c0:eb:ad:89:68:55:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9B:0A:F9:50:17:00:04:07:61:BF:F8:00:F4:75:7C:D0:81:A5:CE
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:30:2e:39:aa:b2:61:0b:fb:d8:c4:16:86:3c:26:24:69:0c:
f8:42:bd:b4:d0:44:ed:cb:4f:ac:e4:8d:d7:04:47:ea:aa:d4:
9d:b0:ca:78:3e:15:a8:a6:4f:a8:31:d4:11:25:19:db:70:79:
d0:2f:fe:46:e8:6f:f1:04:ad:2b:10:3a:b0:05:ec:8e:00:ce:
39:84:0f:31:b4:04:c8:ce:68:f1:4a:7d:d6:57:d7:7a:3e:0d:
fc:bb:99:9b:2f:a8:c9:b1:f9:27:e4:8b:27:94:00:4b:56:56:
dc:93:29:c2:9c:d0:d6:c3:20:6a:fc:5c:06:7d:63:2e:1b:d7:
36:a8:86:07:84:a1:87:e9:92:19:de:d5:8c:1b:9f:f3:53:1e:
f9:03:82:8b:82:95:98:5a:a8:99:cc:8f:2b:dd:fb:37:7b:b0:
fa:84:2c:6b:c5:11:a8:74:53:9c:44:0e:b8:fe:ba:6e:91:0c:
53:cd:b5:2a:86:18:a7:03:1d:28:06:26:91:ee:ed:69:86:45:
48:b6:82:94:56:be:84:6d:9d:05:62:c4:37:a1:c9:f7:b4:96:
71:7f:a8:15:96:cd:93:27:d2:85:2b:71:f8:55:c1:2c:4c:67:
83:fa:6d:8f:9d:27:eb:e7:36:f0:c0:4b:0a:f3:a7:d5:c5:d1:
2b:0d:2f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:41 2025 by rpki-client