Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: Yes1WAwdayS6/2UnkL8otGxG3ct6XNpgFnBYEzCkaKk=
Subject key identifier: 14:E8:B1:20:CC:AA:A6:23:B4:16:33:56:27:FD:BC:6B:5B:77:38:6A
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 01963EB02EE967DEB30EAA148ECC555A0BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 1483
Signing time: Wed 16 Apr 2025 13:00:55 +0000
Manifest this update: Wed 16 Apr 2025 13:00:55 +0000
Manifest next update: Thu 17 Apr 2025 13:00:55 +0000
Files and hashes: 1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: W0X771qKlwRKHEp3pecbKbGC3mrTElDBNyONaJohO6k=)
2: LkSjEtNw7y8FvIXezhAzO7bql6w.roa (hash: XWnh2LDRuVnV3zQSeTuxulNsHgB6C0TJ9AfUsOOpruk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:b0:2e:e9:67:de:b3:0e:aa:14:8e:cc:55:5a:0b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Apr 16 13:00:55 2025 GMT
Not After : Apr 17 13:00:55 2025 GMT
Subject: CN=14e8b120ccaaa623b416335627fdbc6b5b77386a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:5b:f3:83:a5:ba:e1:61:8f:ad:1f:a0:35:
eb:7f:6a:bd:21:c7:85:1f:ca:8c:e5:f4:68:61:be:
b7:35:27:75:9d:a1:88:18:10:8e:bb:fe:1d:2b:67:
7c:d1:50:fd:ee:2a:e6:c9:a1:28:00:99:c4:c6:e0:
67:b0:a5:b8:89:22:2c:0e:93:6b:22:01:11:f3:9f:
62:51:94:d5:e8:9c:fe:e7:6a:10:39:8b:be:be:0d:
22:22:ab:60:8b:d4:0f:64:22:2c:09:00:73:66:14:
3a:b4:7b:1c:e1:0b:f3:03:97:58:bf:21:ae:61:23:
19:ca:dc:60:54:9d:0e:b9:bd:d0:15:c8:5d:bf:64:
56:c4:61:86:44:1d:89:85:ed:a9:d2:49:63:81:ca:
e1:cf:5a:8a:e4:e6:37:c1:ef:76:46:5d:d6:e0:2e:
0e:37:68:74:1e:b4:b3:ca:22:c2:3a:07:6c:0b:df:
c3:fa:1b:4e:f5:e5:62:a5:db:07:12:c4:6b:73:fd:
7e:4b:6b:f9:37:29:ad:fe:0e:54:b4:92:ec:ad:32:
8a:d6:50:eb:9a:23:1c:70:7b:57:16:27:9b:96:be:
09:b6:ad:ca:c7:cc:29:b4:9a:f4:aa:df:ac:a7:38:
36:48:05:32:84:5c:02:f6:f5:9a:bc:70:71:1e:63:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E8:B1:20:CC:AA:A6:23:B4:16:33:56:27:FD:BC:6B:5B:77:38:6A
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:db:57:ef:24:3a:56:12:c5:21:00:c8:72:eb:4a:b8:55:5a:
b0:67:c3:d3:b0:44:11:08:fd:9b:c2:ab:fa:75:de:99:62:51:
33:d1:c9:28:a8:fa:f1:d6:fa:69:c7:9f:fc:e0:ff:7a:38:30:
9b:82:34:58:c8:ea:cc:b7:7d:38:05:1d:2a:5b:b2:c3:92:bf:
ed:d5:dc:65:7e:21:ff:fe:f5:d5:6f:df:39:c0:00:a1:b6:32:
11:84:8b:f5:5e:f6:3d:a5:f9:b4:ac:dc:c3:e9:ff:fa:f5:e5:
d1:7d:66:73:a9:06:7f:8f:0c:cf:c8:81:02:50:4f:be:75:5c:
35:ae:02:be:8f:97:b9:5a:3d:bb:11:5c:31:d0:9e:89:53:5a:
5c:50:27:76:3a:96:a2:2e:b1:40:de:a9:94:a0:ea:4f:a7:1b:
af:df:7c:53:e7:18:fa:a4:82:d0:df:b4:6c:15:15:c5:3a:55:
70:38:ed:ae:9d:fa:b0:44:be:18:fd:b3:1e:50:ac:89:2b:84:
27:fe:1a:8e:a5:67:ea:3f:ab:97:8e:5c:1d:34:23:d5:4e:10:
7e:03:9b:92:8d:92:d0:79:92:74:f4:91:a6:ed:57:e0:98:fb:
55:f9:a3:90:5a:ec:5e:91:54:70:c4:37:a0:8f:c2:76:b3:27:
b1:d3:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:21:02 2025 by rpki-client