Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier: IbgKnyhQ1SvV7UgudoiSAhPIDDWxpTChcnBiOi3r0js=
Subject key identifier: B9:FF:1B:DB:91:F6:CD:88:11:57:82:3A:32:C9:1D:EA:AB:CA:0D:E9
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 019650B63A91A38C9129C28A2C43E33E02BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number: 0CE1
Signing time: Sun 20 Apr 2025 01:00:41 +0000
Manifest this update: Sun 20 Apr 2025 01:00:41 +0000
Manifest next update: Mon 21 Apr 2025 01:00:41 +0000
Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: xdT8j4Zg5PcitOX/hMh85JdusfsZodrYPBJtuNBUM/c=)
2: NxEFYabQ1De2D9MRDvZOgIu0R4g.roa (hash: lAojMYDzIDb75W7SBnvnLzGQZua9BCv398UHDwqthXo=)
3: uBhMU8FaL6yzEgI8KXo0amRkPt0.roa (hash: rZaJZ+vs9poyZNeTB4YM94eOiwwWluQ2wWx8JrMOGHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:3a:91:a3:8c:91:29:c2:8a:2c:43:e3:3e:02:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Apr 20 01:00:41 2025 GMT
Not After : Apr 21 01:00:41 2025 GMT
Subject: CN=b9ff1bdb91f6cd881157823a32c91deaabca0de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:ab:da:c7:3f:8d:57:da:4d:58:cd:26:82:
b1:b4:64:93:4d:cf:e5:27:88:bb:e2:16:e6:5e:aa:
ab:a2:07:39:a9:ee:87:f2:7a:34:f0:0f:16:61:ec:
fc:1b:ef:a1:cf:81:72:84:b2:73:72:9a:de:54:84:
a6:c9:3a:7c:0a:3c:5e:ce:a0:d4:70:39:f4:46:78:
55:bb:48:09:37:19:22:b0:0a:ac:a4:1c:71:a9:69:
e0:4c:70:ac:62:02:07:ac:50:1a:ee:79:7e:c0:97:
9e:af:65:f8:3b:db:34:0c:8a:dd:17:08:5e:ff:dc:
93:44:61:c1:a7:d2:08:ba:7b:3e:d6:ca:8e:2c:33:
01:15:c9:db:13:4a:b4:c3:1d:ec:7b:41:f6:e7:8c:
1f:f9:75:53:99:bf:b4:bc:a7:15:f2:90:32:2b:7b:
fb:31:3a:30:26:57:a9:84:53:49:98:84:4b:bc:3e:
70:fa:11:04:f9:a3:2a:a5:84:ac:80:42:7d:4f:fa:
54:8b:ee:c4:9d:fb:d7:6c:b7:5d:99:53:a4:69:ae:
ae:02:11:ed:db:34:48:cc:20:13:be:9c:2d:e5:d4:
5f:20:1e:fa:fb:86:b7:dd:57:b8:23:3b:00:d7:75:
ec:57:82:e5:2b:36:c8:8f:6b:63:07:38:25:fd:36:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FF:1B:DB:91:F6:CD:88:11:57:82:3A:32:C9:1D:EA:AB:CA:0D:E9
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:29:89:1b:e3:7a:29:82:d3:89:ec:5f:a8:3f:3e:9a:2a:83:
34:fc:97:b7:a3:a4:db:a3:15:e8:df:b3:14:e0:2c:c5:5f:b5:
7d:60:7a:a8:24:82:97:d2:50:5a:13:2d:1e:6c:47:1a:c6:dd:
8b:49:5f:a1:34:93:dc:63:a6:d1:71:98:87:6d:ab:4e:16:18:
ce:8b:99:2a:01:a2:5b:da:f6:be:de:fb:e7:a8:d9:73:96:60:
1d:4c:e4:7a:d7:d0:93:62:f1:b5:02:73:0a:99:e5:67:d8:7a:
cd:1d:fd:e4:bf:93:2d:75:23:56:bc:37:41:64:67:9c:d9:b2:
2e:3e:a7:69:20:a5:81:f5:05:22:4c:21:d2:24:0e:b6:97:9a:
2e:66:51:0a:b8:be:42:7b:78:83:00:27:3e:3f:42:38:6b:5a:
27:35:96:12:eb:50:ca:57:e7:80:7a:3c:10:08:bd:c8:4c:48:
0c:e9:20:60:2e:94:fa:f6:d2:fb:03:eb:e5:9c:4b:7c:66:f2:
57:7a:13:f8:d3:ed:eb:c7:ee:3f:b9:05:9c:c7:99:46:7b:d6:
73:fb:46:20:8c:5d:90:89:36:6f:dd:6d:01:37:d5:aa:1d:bc:
ca:bd:fe:cd:56:0a:56:21:89:02:ea:c5:b6:a3:34:e3:ed:dd:
b1:7f:c5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:45 2025 by rpki-client