Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
File: JGDLdNAZgkw0siOu1McJqFeyxgY.mft (raw, json)
Hash identifier: hz6tzHzIb+ZL38y+FJY7PJBqBu2NFH7DQDu9m3pa/ck=
Subject key identifier: B2:B8:C2:FC:C9:F5:59:03:68:EF:41:90:E4:46:0C:06:C2:C4:CE:E5
Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
Certificate issuer: /CN=2460cb74d019824c34b223aed4c709a857b2c606
Certificate serial: 0196507F25D1C897803A5DF440483205B099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
Manifest number: 0379
Signing time: Sun 20 Apr 2025 00:00:32 +0000
Manifest this update: Sun 20 Apr 2025 00:00:32 +0000
Manifest next update: Mon 21 Apr 2025 00:00:32 +0000
Files and hashes: 1: JGDLdNAZgkw0siOu1McJqFeyxgY.crl (hash: Ef8A6hzaL3+6EUZNeuqd6429qqwWB9NvEF038brhnW4=)
2: Po9Kd95ItrzwaoslHVQ8GkKDEsg.roa (hash: TRai4O+tEgZgd6yxFrk6Ul1AehRTWxDzlup3pEvU2bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:25:d1:c8:97:80:3a:5d:f4:40:48:32:05:b0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606
Validity
Not Before: Apr 20 00:00:32 2025 GMT
Not After : Apr 21 00:00:32 2025 GMT
Subject: CN=b2b8c2fcc9f5590368ef4190e4460c06c2c4cee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:78:80:3c:40:b0:ea:59:79:80:a1:cc:21:1f:
2b:48:98:fd:1a:e1:82:31:ed:5e:29:ed:d0:bf:47:
2f:f0:18:22:83:de:90:71:43:ee:61:22:83:71:2b:
24:14:fb:64:df:0f:0e:eb:2b:57:72:85:45:42:3b:
db:35:44:c9:79:0b:cc:c5:17:d4:11:51:39:88:67:
cc:39:bb:66:91:9b:2a:4f:d9:37:47:61:76:77:7c:
91:1e:c2:e3:30:3f:53:1d:8b:f1:ce:b6:21:3a:4e:
39:ce:2e:63:7c:23:09:c9:2d:6e:3d:5b:fe:47:98:
31:1d:77:0a:b2:f5:0f:f3:5e:db:41:df:18:b2:4f:
c7:c0:08:28:c6:99:b0:38:48:13:af:5f:93:6c:4e:
70:e6:dd:5c:fe:7e:09:1a:a3:b9:91:c8:dd:38:bf:
a3:47:a9:2e:04:69:55:48:ec:5d:6b:f4:79:d1:4b:
f4:f4:a8:ec:67:26:0d:f4:ce:e0:53:b8:0e:62:33:
b0:92:b2:9c:08:ec:ed:c5:82:f7:62:8a:91:96:01:
3e:db:58:ec:4d:98:e3:a6:bc:49:ca:2d:f1:13:56:
32:ef:15:27:8b:06:70:2d:1d:31:2e:d5:73:89:10:
af:03:0a:f5:82:de:f7:57:9d:eb:1d:fd:3f:9b:73:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B8:C2:FC:C9:F5:59:03:68:EF:41:90:E4:46:0C:06:C2:C4:CE:E5
X509v3 Authority Key Identifier:
keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a3:e0:bf:89:3f:03:de:37:b2:45:c7:a5:e6:93:a8:2d:de:
6f:f1:56:8b:f5:44:7b:25:18:0e:e1:39:b4:44:7a:4a:c1:6b:
b6:b4:5c:97:20:ef:22:c3:16:b5:6c:2f:76:93:f6:87:9a:4b:
cf:6f:6b:d9:85:e0:98:2d:04:1d:9e:d7:22:f9:79:64:3f:31:
87:47:6e:73:a3:7a:1d:d5:b4:2a:29:e4:e7:91:7b:ae:6d:15:
80:7a:1c:74:75:9d:47:b6:80:74:99:c0:e3:9d:f7:58:24:7c:
0a:3d:cd:a6:9c:36:ed:4e:e7:3e:2b:46:94:89:9d:72:63:7a:
64:f6:5a:bd:77:18:e4:ab:f6:a2:23:44:ca:dd:65:8a:9a:6f:
2c:9c:76:ca:80:ae:84:09:a5:be:7d:4c:d7:8e:43:29:5f:80:
88:12:9a:8e:59:1c:b2:91:76:25:09:da:9b:01:a5:59:74:10:
1a:2f:f1:c9:23:5d:6a:c1:0a:2c:c0:ee:f6:b2:27:44:ce:c1:
da:9d:58:37:60:bd:8c:0a:16:e2:11:2e:0c:18:ee:8a:b7:06:
f1:ba:bb:3d:ee:01:c2:0a:f9:e3:4a:0f:c6:a6:d6:f2:eb:8d:
6d:fd:c3:67:bc:d6:50:f4:31:e4:b5:88:23:79:a4:cb:9a:c0:
2d:1d:d6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:10 2025 by rpki-client