Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: TWTYCySVJsIehZ/D8x+Afcu9BNiihLksHy+5KlyXzgQ=
Subject key identifier: D9:B9:F5:44:52:2D:11:0D:BE:19:4E:DC:6D:BE:BD:30:69:3A:8D:A3
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 01964AEAB696D93491315C72488A4EA98201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 06B3
Signing time: Fri 18 Apr 2025 22:00:17 +0000
Manifest this update: Fri 18 Apr 2025 22:00:17 +0000
Manifest next update: Sat 19 Apr 2025 22:00:17 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: YbCSjnlWOsABadp1BsFg44lrkMFQ7k6BAmbP3rhklPQ=)
2: tH5X1sIrBGaWrxtJcDhQJ2X9uHg.roa (hash: DV2Ywdf2IF4IJkXNNJ6gs2p5s2GMK9q52zFH8lpr0iI=)
3: wpydopt6VUah6RQMZrzjsU6WoPc.roa (hash: cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:ea:b6:96:d9:34:91:31:5c:72:48:8a:4e:a9:82:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Apr 18 22:00:17 2025 GMT
Not After : Apr 19 22:00:17 2025 GMT
Subject: CN=d9b9f544522d110dbe194edc6dbebd30693a8da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a8:6e:eb:55:bc:1f:d0:a0:8e:fa:44:d8:4e:
67:b4:20:2b:df:23:15:44:26:1e:43:1c:d5:b1:99:
63:b2:75:8d:2d:5d:22:30:cd:b0:4e:f5:e0:87:25:
39:44:0a:d6:bf:38:76:5f:3e:60:5b:c1:36:5f:f4:
28:ce:f6:ae:24:5d:98:aa:d2:af:47:70:8d:2d:75:
e4:34:ea:0e:eb:fa:ae:2b:8d:18:38:8e:94:ee:2f:
1a:58:8e:21:57:15:84:fd:88:72:22:1e:2e:bb:38:
8b:ba:4f:4e:3b:89:60:d2:4c:19:e7:fe:74:93:ac:
c5:d0:a8:c2:2c:42:17:15:23:3d:01:64:e3:4f:33:
9f:bb:98:3e:2d:48:60:01:e2:de:20:ef:94:a8:fe:
fa:3c:31:08:69:97:e0:c8:ab:69:72:c8:eb:de:a1:
5f:fa:f0:bd:7d:f6:60:4d:36:d8:a4:40:d0:ec:db:
68:ac:25:fd:23:d1:a8:c2:47:49:2b:e1:76:ad:86:
ae:8a:81:bf:88:24:4d:10:7d:33:df:95:1f:de:ec:
1b:28:1c:28:19:1c:dd:40:94:1d:c1:15:9b:5f:f5:
11:00:70:5a:71:b1:e2:99:b8:dc:36:58:31:c4:db:
01:98:41:d1:c3:16:a9:62:03:1d:50:c4:1e:69:28:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B9:F5:44:52:2D:11:0D:BE:19:4E:DC:6D:BE:BD:30:69:3A:8D:A3
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:db:35:e0:5f:21:c8:b8:2e:78:5b:1a:0e:b6:4d:88:ba:10:
68:e1:4e:a5:cc:32:04:49:b3:db:4e:83:4c:6e:2a:b5:16:e7:
4b:a0:8f:f8:de:28:3f:bf:63:cc:6b:c2:d9:bd:21:42:1f:5d:
99:78:aa:87:9a:18:97:72:ea:26:ae:bb:5f:b9:dd:78:d3:ed:
a0:29:96:bc:16:5a:fa:07:e7:1b:56:86:ba:e5:ed:f9:cb:6d:
ea:8e:f5:97:cb:8c:bb:5b:1a:e3:3e:be:63:ec:6d:33:f7:19:
fd:32:ea:d2:4f:63:fc:e4:d0:a1:f1:39:d9:73:f5:f9:6b:97:
58:4c:8d:1a:6e:ec:f6:51:5f:e9:1f:57:66:27:42:f8:df:f3:
c8:56:2d:3e:86:3e:4b:7e:d2:8d:1b:90:28:a8:af:13:62:95:
88:70:3a:55:df:ab:d0:2f:5a:13:0f:ea:78:12:14:f1:68:44:
2f:9a:3b:31:b2:5b:c3:c3:ac:1b:0c:30:02:ec:b5:94:a7:ad:
00:7d:c7:68:05:e7:bd:14:f6:c2:3d:46:31:a8:c1:f1:69:ec:
cc:dc:93:60:02:61:22:33:b6:a6:09:63:d0:1d:e8:b8:ad:ad:
45:23:f0:1e:3b:58:b9:83:04:1c:22:4a:95:b4:77:87:26:b2:
38:03:5e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:27:48 2025 by rpki-client