Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
File: jc5N9oBEmFoXezAy8A_G_iJK2LM.mft (raw, json)
Hash identifier: JCa2J700epNIudYyDpY+v0MWObBwd962Rr63l6uiyE8=
Subject key identifier: D8:44:1E:07:F1:0B:6C:47:3C:74:C8:2E:B0:9D:D8:EC:1F:F5:36:8F
Authority key identifier: 8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
Certificate issuer: /CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Certificate serial: 0196515AD5B2D7C987F87DDF5EB88306043D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 04:00:29 +0000
Manifest this update: Sun 20 Apr 2025 04:00:29 +0000
Manifest next update: Mon 21 Apr 2025 04:00:29 +0000
Files and hashes: 1: QH9tbxKSp0iUql0lb1UYZe-9C60.roa (hash: j+EJALijkJNAty5MEqMWdkPqVKhawk2tfizWedc8Uwc=)
2: jc5N9oBEmFoXezAy8A_G_iJK2LM.crl (hash: 8kFrDcHve6jaBpykiJvu+wOrKYHCABWNdJuZViz/4gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:d5:b2:d7:c9:87:f8:7d:df:5e:b8:83:06:04:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Validity
Not Before: Apr 20 04:00:29 2025 GMT
Not After : Apr 21 04:00:29 2025 GMT
Subject: CN=d8441e07f10b6c473c74c82eb09dd8ec1ff5368f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:b9:09:4f:34:79:5a:02:eb:b4:54:e0:32:
48:f1:9c:13:1a:35:86:81:87:7d:ad:d4:64:9c:0c:
a3:1b:52:11:cd:74:06:1a:d1:6b:45:dd:4a:bd:42:
66:d2:59:64:fe:ec:d9:c1:20:9d:ee:c4:ff:8e:ed:
0c:04:4f:2f:ed:7f:45:98:68:a2:bd:7c:d4:03:cb:
04:c2:28:e5:f9:06:47:14:42:ce:1a:01:6f:f1:88:
ba:b0:52:1e:ea:1d:55:00:76:b5:72:54:0b:b4:d6:
9a:3a:8f:fe:f3:9e:50:2e:08:95:ff:7d:66:c3:78:
d4:2b:d6:80:b4:54:0b:d0:77:0e:09:3b:08:59:cb:
0c:d2:4b:ad:78:f4:9d:76:83:e2:36:12:54:32:db:
42:79:28:21:b3:ed:74:76:3b:77:4b:0e:6f:8a:b1:
19:46:59:8a:1e:22:76:e8:f3:67:20:f4:90:5f:c4:
c0:75:a0:4e:09:71:ed:69:69:e3:2d:6f:16:c7:e8:
c9:f4:ad:c0:c2:44:cc:3b:63:90:37:3d:4c:5f:58:
57:80:40:d9:81:c5:cf:4f:40:92:73:4d:c9:a7:cc:
1d:51:7e:c5:b0:11:53:79:e8:6e:4d:1f:63:cc:80:
a9:38:7e:38:ea:f8:ca:49:f9:15:bf:0a:7e:09:6a:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:44:1E:07:F1:0B:6C:47:3C:74:C8:2E:B0:9D:D8:EC:1F:F5:36:8F
X509v3 Authority Key Identifier:
keyid:8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a2:70:8d:55:07:36:03:a8:f4:da:8e:61:b4:69:f0:f9:7d:
90:98:87:83:0d:6a:16:bf:97:e0:16:9e:50:28:eb:8a:02:2d:
57:c8:7a:f8:aa:bb:a8:c6:7b:95:7f:60:d9:87:aa:5f:d7:5f:
5e:86:9f:46:50:81:74:23:ca:a4:9d:11:47:27:73:6e:f3:1a:
93:23:66:d5:be:0d:1f:18:08:16:90:58:63:86:ad:e9:fc:a0:
ba:a7:5d:50:be:7f:82:fd:3b:5b:53:ce:3f:03:ff:24:28:e0:
ca:c0:e5:ee:e1:d6:1a:64:95:ea:0c:05:21:bc:6d:ea:ba:0f:
62:c7:f8:1b:0e:01:45:06:e6:bd:13:41:ab:54:06:e2:00:c1:
40:11:1a:9d:ff:b1:d3:cb:99:2f:aa:96:22:f3:09:59:83:9e:
4f:59:39:77:a7:3c:9f:dc:e8:10:f4:df:8a:08:ad:57:39:fc:
88:b8:15:35:44:f5:3f:a2:54:44:94:ba:04:a2:21:52:d6:0a:
2d:2d:49:64:88:bf:f0:b4:97:1e:c6:dd:98:12:61:33:28:14:
b9:03:03:de:28:0a:cb:06:3b:03:40:c3:fb:a2:ba:ad:64:6b:
18:bf:20:46:0f:e9:93:2c:d5:7b:16:b2:a3:da:f0:1b:f3:45:
41:0b:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:23 2025 by rpki-client