Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: Zik5bP1jBpve7iQ/kROFcCM7+f1rTCrsOaGl9hQKsMw=
Subject key identifier: 02:7F:01:71:57:50:DD:39:2B:28:9D:B2:AC:1A:4E:E7:1D:96:5E:18
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 0196561395FEA785678BD2BA5C9478EFB930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 10B9
Signing time: Mon 21 Apr 2025 02:00:46 +0000
Manifest this update: Mon 21 Apr 2025 02:00:46 +0000
Manifest next update: Tue 22 Apr 2025 02:00:46 +0000
Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=)
2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: kc6K6jNo/9MABj85oLMEEedd4hBp0bSw+Yhz/hCnLHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:95:fe:a7:85:67:8b:d2:ba:5c:94:78:ef:b9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Apr 21 02:00:46 2025 GMT
Not After : Apr 22 02:00:46 2025 GMT
Subject: CN=027f01715750dd392b289db2ac1a4ee71d965e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:d3:f8:c0:bf:76:85:22:93:d4:64:32:e4:
9f:41:54:5a:b3:24:ae:6f:83:e0:a5:d7:66:e5:3d:
36:e0:d7:9d:fb:00:a2:96:18:4f:81:df:b0:f4:cf:
47:1e:d8:96:09:5d:a9:33:d9:b6:de:38:6c:3c:5e:
5b:7a:c0:0c:29:4c:80:57:38:fd:d0:8a:1a:fd:6e:
7d:9c:8d:77:7b:d6:78:0b:98:71:66:cd:60:e3:de:
42:06:68:0d:58:87:68:d5:88:16:c8:28:4b:83:99:
9e:65:99:c2:66:d5:92:11:17:10:c5:2d:f7:57:59:
14:78:ae:f6:66:9b:a3:aa:fc:e6:db:91:87:59:a1:
28:be:a3:01:8e:e6:49:43:4c:95:fc:6a:62:c8:d6:
9d:97:a6:57:83:4f:86:0c:da:87:4d:92:4e:d3:f3:
1b:9f:dc:10:aa:27:9e:b5:7a:fd:2c:34:06:ee:30:
f9:ce:9b:50:c5:2e:b5:53:c7:c0:be:bc:10:21:9c:
73:62:b1:ae:eb:61:da:9b:11:ac:d9:f6:7c:0a:66:
dd:fc:16:46:95:87:db:fa:80:63:c0:69:07:53:b2:
b5:e7:f8:26:5a:71:10:6d:3d:b1:c8:af:1e:58:ee:
4f:ba:7d:e1:9e:17:b8:e8:b8:19:c3:80:fb:c4:31:
f2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7F:01:71:57:50:DD:39:2B:28:9D:B2:AC:1A:4E:E7:1D:96:5E:18
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:40:07:e2:07:8c:be:b2:04:6a:7c:94:40:54:c1:48:2a:72:
a0:ed:ca:99:f2:a8:b0:3a:af:a0:31:b4:96:3b:24:e5:6b:e6:
97:17:9d:88:c9:09:75:ca:7c:36:de:d9:4b:eb:fb:1d:90:88:
3c:95:cc:9b:72:ee:cb:96:63:34:96:88:68:a0:ff:a5:a0:b8:
f6:10:49:de:e2:63:cd:44:dd:9c:fc:21:18:2b:ee:df:63:bd:
2a:6e:db:76:49:dd:af:10:f0:86:ce:29:55:11:6f:3b:54:a6:
19:c2:b7:9a:47:a1:72:21:7e:69:ff:ff:f8:8c:cc:43:db:ec:
24:70:c0:f6:48:e5:b0:e1:9e:e1:83:3c:05:ee:9e:a7:2d:c5:
41:42:65:df:5e:eb:3d:43:cb:28:aa:0f:d6:1d:0b:78:84:51:
32:31:3d:ee:d6:bc:9c:f2:dd:e7:ab:0c:21:6e:16:eb:59:c1:
d8:12:41:4b:1f:2e:3c:53:92:c2:fc:76:49:bf:43:d9:6d:f4:
d3:6e:77:65:dc:d5:f0:0f:05:90:cd:3c:7a:24:35:18:cb:24:
7c:db:77:62:63:38:aa:b4:aa:e8:2e:e0:9e:f8:c9:1f:ee:5f:
5a:9e:e2:65:af:cd:3f:5f:07:5f:5a:f3:8e:1c:4c:44:d0:a7:
a5:4f:5a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:07 2025 by rpki-client