Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier: HCc72LsWRwiq9KKCboBf1+JJV5knQUApZeIkyvo7K4k=
Subject key identifier: D5:47:ED:E6:89:51:F9:2B:57:42:23:58:BE:B7:C9:60:4C:BA:EA:CB
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 019650485731385B6D8A60D64E2DC5DCCC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number: 0282
Signing time: Sat 19 Apr 2025 23:00:40 +0000
Manifest this update: Sat 19 Apr 2025 23:00:40 +0000
Manifest next update: Sun 20 Apr 2025 23:00:40 +0000
Files and hashes: 1: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: zYxvMQFPaYjvPfzysbtBaPcsOc295veIWyMmvnewVfU=)
2: cNr_HYvpiGioRSQRxwB1USCGS48.roa (hash: +noL2GpravnsNJo9M6TMNUj+1J6YWZz/J8eJw0GPGmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:57:31:38:5b:6d:8a:60:d6:4e:2d:c5:dc:cc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: Apr 19 23:00:40 2025 GMT
Not After : Apr 20 23:00:40 2025 GMT
Subject: CN=d547ede68951f92b57422358beb7c9604cbaeacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:2e:40:d4:a7:f2:16:7a:a7:d4:03:71:2a:
2b:00:94:91:b7:fa:b3:ad:8d:f4:3a:62:18:b8:7b:
d3:47:aa:e9:e1:eb:a7:07:61:08:38:53:44:dd:78:
43:88:75:b7:48:64:4b:30:f2:4a:be:0d:b8:00:d2:
cd:84:58:64:4e:91:90:a9:18:75:b8:84:97:6d:92:
88:f6:b7:8d:44:b6:6e:05:22:f7:ae:55:01:90:3a:
f5:78:ca:40:e6:7c:8a:2f:87:9a:98:32:ad:70:80:
69:ee:50:c1:04:5b:a1:6b:7e:75:19:fe:1f:5d:56:
c2:8d:07:00:29:9b:02:79:d1:b2:7f:6d:13:c3:7e:
0a:dc:94:02:6f:20:db:6d:81:fe:40:81:66:84:e3:
07:4f:8a:50:9f:9f:79:96:50:e8:bb:8a:46:63:04:
a0:8f:04:17:fe:94:c3:4e:49:79:52:7d:3c:65:aa:
5b:e5:ba:e4:2f:15:a0:1c:7c:13:77:c3:49:1d:d8:
d9:39:72:bf:4e:d9:04:23:07:cf:ca:b9:13:a6:3c:
3e:c9:ba:64:94:ac:65:0a:7b:3e:9e:3e:b2:98:08:
cb:7b:a8:05:c8:e5:b7:18:36:bd:14:d5:0b:5b:96:
2c:fe:54:3f:9e:d8:39:12:f2:2d:7e:62:90:33:36:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:47:ED:E6:89:51:F9:2B:57:42:23:58:BE:B7:C9:60:4C:BA:EA:CB
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:24:5a:ec:77:81:dc:79:64:f8:7a:f2:63:77:fe:8d:9d:c9:
de:c0:36:d9:cd:73:54:18:fb:52:0d:aa:7d:be:f0:44:90:06:
f6:c6:2a:b1:b1:de:16:06:7d:ac:50:5c:c9:26:38:1b:4d:2b:
15:68:e7:84:d2:23:1e:72:6e:58:29:9f:84:a5:29:6c:f7:cf:
de:a8:01:a8:7c:64:dd:af:45:aa:8d:a3:46:ae:1a:4c:99:19:
47:98:28:08:59:06:6a:5f:f5:28:4e:05:d9:23:56:25:56:b2:
bf:d8:0e:21:64:54:b6:aa:2f:53:9e:18:60:bb:ba:dc:5c:0c:
77:2c:f2:3e:a5:32:7c:dc:31:f3:67:8c:7f:5d:1e:8d:eb:3c:
e3:80:31:6e:93:dc:9a:35:92:f6:ef:17:8a:53:ab:df:85:2a:
fe:08:2a:db:a5:11:53:6f:7a:ae:d5:e4:17:f4:86:74:78:97:
1f:0c:57:d0:14:f5:4e:21:26:22:03:12:93:fb:c2:ba:3f:3b:
62:e3:ae:e8:88:16:e7:51:5c:bf:7d:d7:ea:d5:2d:bd:9b:47:
95:ae:5c:cd:3e:ae:63:3d:1e:e6:e7:af:8f:08:91:dc:09:e9:
cd:a7:29:b3:41:40:3d:62:ae:b8:75:6e:e5:1c:98:a6:f3:84:
ad:27:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:04:23 2025 by rpki-client