Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
File: JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft (raw, json)
Hash identifier: j41qrSwFiVqLyo6UYC2JFGViUTzqo+z3TB48ZI5K6Dk=
Subject key identifier: 1B:6B:F5:F6:AE:CA:A9:F0:12:82:CA:0F:26:8C:AF:50:D6:ED:EB:E1
Authority key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
Certificate issuer: /CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Certificate serial: 019579EBC67D3687DD151D8B54A58CF2A485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
Manifest number: 01D5
Signing time: Sun 09 Mar 2025 08:00:49 +0000
Manifest this update: Sun 09 Mar 2025 08:00:49 +0000
Manifest next update: Mon 10 Mar 2025 08:00:49 +0000
Files and hashes: 1: JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl (hash: B+VUh7YkWH7sVQBn/eCCIzyPxwCrbJGKGh5Ic9FPYXw=)
2: iqsUTfguaYVXgXe8Vuc2DqYtis4.roa (hash: 7sUhJ+4DrqI1GXlkga4LbUKQ6fX31R18iQCPmLz2YM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:eb:c6:7d:36:87:dd:15:1d:8b:54:a5:8c:f2:a4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Validity
Not Before: Mar 9 08:00:49 2025 GMT
Not After : Mar 10 08:00:49 2025 GMT
Subject: CN=1b6bf5f6aecaa9f01282ca0f268caf50d6edebe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:24:58:c5:f5:a2:bf:d9:8f:5f:30:98:29:
7f:9f:b9:43:62:2a:43:41:a0:ee:2c:0d:81:0f:ae:
f8:a0:6a:4c:e8:88:53:af:05:c5:02:23:48:0f:05:
47:bb:c9:15:59:5f:e1:30:ac:91:7c:57:74:8b:57:
8f:9b:9e:10:27:ee:7a:6d:db:bc:34:2e:c3:50:81:
24:c0:55:f4:1f:db:f2:c8:44:2f:cd:59:f6:48:76:
58:d2:93:9c:bf:5e:3e:be:84:30:4f:80:ba:74:fb:
18:00:4a:42:ef:14:d8:34:03:46:5f:df:dc:f9:9c:
dc:b1:0c:5e:75:34:d8:43:fd:c1:c0:6d:29:f2:01:
87:96:7d:68:8d:3c:fc:4a:f9:ea:99:87:40:52:41:
a8:3d:05:47:b4:48:dc:8d:d7:a2:5f:b4:03:23:d4:
9d:9d:d6:f4:84:49:e9:2f:fe:c3:34:27:dc:72:43:
00:ee:fc:d3:96:c1:b5:fd:a3:c6:a6:6a:e8:bf:22:
74:78:67:3f:bb:f5:2f:12:66:00:99:9e:7b:0f:d0:
18:f9:8c:c5:9d:3d:bb:d2:fd:d2:53:04:c9:2a:0c:
6a:99:23:44:a6:68:75:cb:5f:2f:b9:bd:5e:d0:10:
d1:44:1c:51:e8:84:c5:4c:1f:c7:be:db:dd:0f:ed:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6B:F5:F6:AE:CA:A9:F0:12:82:CA:0F:26:8C:AF:50:D6:ED:EB:E1
X509v3 Authority Key Identifier:
keyid:26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c5:18:8b:22:7c:67:5a:2d:26:26:34:5d:24:6b:a6:f1:2a:
97:07:05:67:39:a7:62:12:db:3a:26:7c:c9:d0:76:17:8a:7b:
50:52:97:74:0a:6e:fa:19:07:57:6b:37:75:ae:e9:09:8f:c6:
7e:cf:fe:9d:ee:0b:a7:cb:da:45:7d:8e:4b:b2:f1:0b:89:6c:
1b:9f:d3:bb:d1:e4:bb:c5:8c:fb:d6:0b:3b:84:be:a3:61:6c:
3c:33:b4:04:8d:93:73:39:c0:6e:60:93:55:bd:62:ee:4a:09:
d9:2e:76:00:05:0c:9c:b4:06:11:bc:0e:8f:e9:a6:3e:92:da:
f6:45:38:97:86:39:7b:42:f1:8b:9a:13:ca:11:00:2d:32:3d:
df:8b:78:1d:63:18:05:65:f8:e6:33:6e:e1:3b:2e:1f:45:95:
34:0f:d3:ae:5c:7d:34:d5:6e:fc:c5:fd:2e:22:a4:d7:1d:76:
1c:d5:b2:26:39:8f:28:9a:aa:9f:e3:89:cf:d4:65:58:7a:17:
52:21:69:20:e6:32:4c:bd:97:24:97:eb:d9:e4:74:be:e5:25:
9d:1f:46:a4:f2:ac:af:00:6f:34:29:1d:63:c3:f0:75:a1:27:
98:dd:5c:8a:64:cd:ef:1a:22:64:93:45:01:48:f7:bb:b3:88:
4c:08:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:13:42 2025 by rpki-client