Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
File: JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json)
Hash identifier: Yru6sfWwf8FzuQHE2XuvZv1tdSEbC/cT1QXwuCeEdXc=
Subject key identifier: EE:FA:19:0E:2B:D6:C6:89:A3:51:D4:8A:39:55:FC:43:7E:1C:5A:8E
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Certificate issuer: /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial: 01974BFB50D45C35071C5F32933D0C6BD3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
Manifest number: 0356
Signing time: Sat 07 Jun 2025 20:00:50 +0000
Manifest this update: Sat 07 Jun 2025 20:00:50 +0000
Manifest next update: Sun 08 Jun 2025 20:00:50 +0000
Files and hashes: 1: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: We1rSfpJhrmRu9w0O9iXnx47jKyNHOZXub4KIVphw6U=)
2: hcERp-n1CdH9dpVt3PfnUZqY1zM.roa (hash: cu5zTSvQ8FcA7bEX+Ahl9PjJO9BlJ5Pb1ZUU2INhdXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:50:d4:5c:35:07:1c:5f:32:93:3d:0c:6b:d3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Validity
Not Before: Jun 7 20:00:50 2025 GMT
Not After : Jun 8 20:00:50 2025 GMT
Subject: CN=eefa190e2bd6c689a351d48a3955fc437e1c5a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:80:c4:b7:d7:4f:c2:a1:80:23:71:c7:cb:
8d:60:ac:81:94:87:5a:1c:44:d5:60:0c:b3:74:0b:
d8:0e:49:fa:10:01:c3:89:ef:c1:2d:9f:60:a0:41:
0a:fc:26:05:d7:e5:24:5d:65:15:3f:19:9b:a8:5f:
e5:20:5a:3b:2c:2d:75:86:b3:74:de:41:52:18:cc:
3b:00:d7:93:4f:4c:ff:85:7e:ce:92:3d:f3:71:c6:
b7:1e:7f:0e:fe:88:da:73:d1:dd:7c:8f:7c:89:c1:
d4:05:5f:8f:f8:85:ef:be:3f:ad:bf:04:cb:ce:e1:
a1:a8:61:3e:c7:a4:cd:fd:8c:3d:4d:84:a2:6b:60:
92:fd:30:f4:09:38:50:aa:38:0c:10:76:88:a3:ed:
4e:6d:89:41:55:ec:46:e7:f7:b8:1e:58:ca:d7:13:
fd:29:a6:84:f8:99:79:37:0c:e6:df:1d:ca:96:0b:
38:9d:c5:ce:b8:8f:88:a3:ac:9e:ec:eb:5b:c8:cd:
de:12:d8:54:c9:d8:a1:ab:83:ab:fa:df:9e:2e:ac:
db:32:88:fc:19:fb:56:73:c1:b1:7f:ca:c2:96:53:
53:2f:5f:75:b9:95:cc:9d:f6:53:a6:1b:31:93:45:
87:86:01:d4:c0:9c:e7:72:a4:07:09:4f:17:ef:b0:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:19:0E:2B:D6:C6:89:A3:51:D4:8A:39:55:FC:43:7E:1C:5A:8E
X509v3 Authority Key Identifier:
keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a3:08:0c:75:5f:ab:e5:24:2b:ee:a9:73:4f:89:e7:f9:2d:
5b:5b:1f:19:a7:d7:d9:16:bf:77:56:21:86:ca:64:2b:8b:6d:
28:7d:6b:4e:46:e4:00:81:83:2a:6c:91:9f:7b:45:8b:c5:b5:
4c:1f:65:d3:7c:9e:d3:68:5e:f7:aa:1e:00:ce:9a:67:25:77:
43:0b:77:7d:ce:64:f6:ba:aa:6d:33:b7:9b:75:f6:74:8c:23:
14:22:db:36:31:06:0d:69:63:5a:1e:08:e0:78:c7:4d:d5:ea:
15:4a:26:da:1f:a7:f2:96:5e:0a:dd:84:d0:2e:e7:97:96:bb:
e7:1e:d1:c4:80:82:1d:83:9c:e5:5d:ab:91:71:da:ca:4f:cd:
76:c2:b0:fe:63:6d:e8:02:31:0f:c5:1c:ae:ef:71:a5:5d:7d:
49:0d:5b:06:af:e7:d6:83:84:e6:16:3f:67:48:2d:ec:75:96:
68:b8:26:37:d4:c0:f0:94:06:fe:03:7b:57:2b:cf:27:53:c1:
0a:c5:9a:ec:18:d1:ba:d2:7a:67:14:f0:ae:88:4f:77:84:3a:
50:c2:8c:9b:b1:7e:90:b1:1a:0f:9f:9d:5b:a5:e9:28:7c:51:
25:5a:e6:73:f6:93:c9:89:cd:b9:dd:21:07:74:a5:e1:13:69:
c7:86:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:49 2025 by rpki-client