Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: yy949qR4Z1IE96pS6LPvvZb5HzV3+e9r91XG7rsUY2U=
Subject key identifier: 0C:1C:5D:D0:48:EB:54:7E:0C:33:1F:EC:D1:B0:BC:1C:24:E0:CC:C3
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 01964D102F4ABEF8183A5B6B175EE4FCDDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0BF0
Signing time: Sat 19 Apr 2025 08:00:28 +0000
Manifest this update: Sat 19 Apr 2025 08:00:28 +0000
Manifest next update: Sun 20 Apr 2025 08:00:28 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: hnkqKK3bMUPT3HZvrUdtadVSB4MbEcTFEnh6tZzN5zc=)
2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=)
3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:2f:4a:be:f8:18:3a:5b:6b:17:5e:e4:fc:dd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Apr 19 08:00:28 2025 GMT
Not After : Apr 20 08:00:28 2025 GMT
Subject: CN=0c1c5dd048eb547e0c331fecd1b0bc1c24e0ccc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:69:14:74:fc:0a:b5:8d:4b:d1:18:0a:33:
56:3c:da:e1:e2:ce:a3:8c:23:06:6f:98:04:0b:0f:
26:cd:10:94:f0:98:66:2d:19:dd:21:4c:d4:22:9e:
5b:6e:4f:9e:6f:56:ba:bc:97:2a:c7:79:d0:01:a0:
25:b8:7e:f5:01:5f:af:53:88:98:bc:1f:2b:27:83:
1b:81:f0:c9:9e:e3:5c:5d:4a:cf:8e:05:71:fa:65:
75:77:8b:2f:9c:c4:d0:8c:93:c9:93:83:9a:a7:fd:
97:1f:97:3b:96:cb:d6:ec:61:3c:a1:1c:33:d0:3c:
8f:8b:28:3f:68:72:33:45:93:37:18:a3:ef:dc:3d:
36:47:7f:5c:b4:2d:c0:6b:5b:a9:ab:fc:a2:10:cd:
85:a4:e0:30:8e:c3:45:ef:46:99:b6:cd:9f:85:75:
fb:49:11:24:b2:b2:e5:2c:4c:b8:79:7c:49:d6:5b:
32:f4:b0:1c:1b:5d:70:65:74:a5:da:f7:15:d6:25:
3e:7f:41:79:74:36:f7:2f:1a:d0:5c:3b:4a:14:00:
c4:16:a0:2c:2c:b8:8e:d0:25:45:aa:87:3a:36:4d:
7e:94:b9:7a:b6:9c:ee:30:c1:bc:c6:90:ed:f4:66:
03:eb:d3:9f:cf:e5:fd:f3:c8:8f:a6:6f:72:51:2a:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1C:5D:D0:48:EB:54:7E:0C:33:1F:EC:D1:B0:BC:1C:24:E0:CC:C3
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a6:85:b4:dc:8b:c7:8a:e0:50:d1:10:59:06:71:0e:72:96:
fb:12:c3:8b:15:c9:6d:bc:e5:f3:47:1e:de:1d:f2:77:33:75:
ab:a6:22:48:92:d7:a3:03:43:1d:0d:15:78:6a:05:84:bc:ea:
4f:8c:67:4a:d5:c1:66:63:91:84:90:fb:09:fc:a8:d3:f4:b5:
42:4c:cb:b3:26:1c:a6:df:cb:23:f8:5c:5c:34:f0:f1:91:1a:
df:51:80:aa:9b:67:da:1c:4a:67:25:1d:17:03:5d:56:a2:e4:
d3:93:d3:04:51:bc:d7:22:7f:27:38:a9:be:8f:fb:52:f8:83:
96:fc:a1:c5:04:32:8c:59:b5:79:8f:f3:75:04:d4:ff:05:96:
e3:80:0a:e8:c3:d4:cf:d8:a3:99:4f:40:b2:d5:0f:10:f4:d1:
9a:f2:ff:10:10:f1:d5:ec:0f:d7:73:cf:96:14:73:4f:41:89:
e4:e7:66:ce:48:93:2e:88:f0:e2:de:ee:34:f5:3b:79:58:fb:
5c:2c:d9:3b:d2:45:39:a1:7b:63:9b:9e:ab:53:62:ba:65:48:
0b:ba:05:30:88:01:97:ae:d4:36:1e:df:4a:85:b2:60:41:28:
97:b9:ca:24:c6:dc:cf:01:8e:e3:c6:f3:e2:5e:f6:e8:bd:89:
e0:0a:df:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:10:24 2025 by rpki-client