Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: 5lxNdR8fLaDLYncqabw2TVf4QtiIgbrQ2xqXZz7bpDM=
Subject key identifier: 6A:3D:F1:B9:CA:AA:1C:78:58:FE:CD:9C:4D:D3:E1:97:5C:0F:A8:42
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 019652DB1B15832FED1623C00E5E5A5D4F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 11:00:13 +0000
Manifest this update: Sun 20 Apr 2025 11:00:13 +0000
Manifest next update: Mon 21 Apr 2025 11:00:13 +0000
Files and hashes: 1: IkDVoWMCW8T1OT9ORyQk9bDyazo.roa (hash: ezW06KpxDOFFcxPPKXXfQ4CRQ3FYkfmYYJN8bIHB94g=)
2: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: 3+iU1FPvelqGu38ddhI6ksgLePG5Xx3wf8kRnMGID1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:1b:15:83:2f:ed:16:23:c0:0e:5e:5a:5d:4f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Apr 20 11:00:13 2025 GMT
Not After : Apr 21 11:00:13 2025 GMT
Subject: CN=6a3df1b9caaa1c7858fecd9c4dd3e1975c0fa842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:2a:88:b9:8d:64:f1:9c:b4:b2:0c:29:04:
ea:f3:86:b8:bb:be:25:a6:79:c9:68:1c:e0:50:b9:
a7:44:18:16:b3:9a:a8:06:32:8c:1f:ce:4b:57:85:
e3:5f:97:6d:3f:a0:a3:4e:de:90:1e:55:38:33:84:
63:41:7d:91:26:a4:84:d8:61:a8:e5:0a:93:b1:bf:
01:a1:90:15:4a:ad:5d:bb:a9:16:3b:76:d8:a1:2c:
3a:39:97:b9:71:f8:35:aa:04:6d:11:6b:b4:58:b5:
2b:5c:76:f1:3c:32:5c:42:df:04:68:6b:d5:50:d9:
4e:5b:89:f2:5b:f5:ed:f7:61:e3:eb:00:a1:12:ce:
7a:e4:77:6c:e1:5d:35:69:e0:3c:d3:7c:07:02:98:
7b:93:f0:a7:41:e4:d7:a6:69:9c:34:5d:c3:27:6e:
b9:3f:8c:40:d8:e9:95:00:d6:07:b6:46:76:8d:a2:
c2:eb:f6:be:e2:79:36:6d:cb:87:c1:ae:59:09:db:
65:69:00:6f:65:e8:93:37:59:8d:ba:08:e9:b7:2b:
90:d7:cc:21:4b:fe:82:cf:2c:fa:14:41:c5:d0:61:
6e:7b:4c:02:2d:27:13:c5:4f:c8:57:65:6e:ad:78:
b8:f0:d4:64:20:78:21:38:34:aa:ff:91:df:15:31:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3D:F1:B9:CA:AA:1C:78:58:FE:CD:9C:4D:D3:E1:97:5C:0F:A8:42
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:9d:12:2d:6e:36:71:75:ef:56:2f:73:a6:a5:10:0f:b2:97:
a5:5f:a8:bc:a8:37:65:97:33:da:ed:da:34:d6:41:6e:d9:e9:
fe:17:15:27:62:4e:f4:4e:8a:40:a0:a8:dd:55:c6:ac:ab:03:
94:52:bc:23:ce:4e:75:e7:85:0f:89:b5:ef:45:23:8a:b7:94:
f5:89:05:f3:c3:9e:50:ec:2e:57:e8:72:b8:7f:bc:05:ac:a8:
2b:e8:6e:fe:08:2d:e2:aa:0d:80:35:c5:79:2b:c6:d4:67:16:
b0:d5:77:c8:80:79:ed:a4:05:d2:7a:79:be:a8:d5:3d:cc:5b:
28:86:3c:0c:ec:1e:59:01:65:06:1c:c5:de:77:c6:49:7c:b8:
e9:18:83:f4:86:f5:64:94:53:b8:e1:6c:e1:a2:62:c7:ce:89:
ff:36:58:51:05:59:7b:62:38:5d:0d:bd:cb:01:68:a9:82:89:
ad:e9:2a:0a:4a:d5:72:a6:01:56:3d:cc:a6:9d:29:ff:23:c6:
f5:1f:d6:82:56:21:bb:eb:92:f2:91:69:31:a9:46:3b:7c:96:
8c:15:dd:9a:85:36:15:48:05:ec:58:a7:4f:5d:c1:6f:36:d6:
79:fc:c8:93:9a:ba:e1:69:e4:37:b9:87:86:6f:24:2f:43:2c:
5e:cb:6f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:30 2025 by rpki-client