Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: 3XAzBKVEQ4lme1eJmlYBE4RpuFyhGLds+TN/n2olXO8=
Subject key identifier: 66:8E:B0:2E:E0:24:9D:9A:93:FE:0E:3F:6B:3E:49:31:BE:5F:CD:8E
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 019745F95CD9C0BE2A819C81DE4868162BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 1132
Signing time: Fri 06 Jun 2025 16:00:59 +0000
Manifest this update: Fri 06 Jun 2025 16:00:59 +0000
Manifest next update: Sat 07 Jun 2025 16:00:59 +0000
Files and hashes: 1: 2f42Ui-pru7wNiS6tvX-43aKjFs.roa (hash: mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: imbCIqgYeh6rPJJXhXsySyifHI+espsAKR/I+9AigBc=)
3: Xhs8fAc0SGAyN4KDD0cOKWAqtow.roa (hash: 0rR/+YP0FGlnVR+donPj6Q3O2XueDV+VyXKsGyjN1KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:5c:d9:c0:be:2a:81:9c:81:de:48:68:16:2b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Jun 6 16:00:59 2025 GMT
Not After : Jun 7 16:00:59 2025 GMT
Subject: CN=668eb02ee0249d9a93fe0e3f6b3e4931be5fcd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:37:63:1e:ec:df:c1:30:dc:19:6f:51:db:
f9:50:cc:53:fc:0a:07:29:bc:c5:06:cf:35:21:9f:
79:c7:56:27:c2:6b:3d:b8:34:d7:8f:81:55:78:92:
1e:ee:8e:4c:49:54:41:80:0c:a6:0a:ad:b3:1f:ef:
5a:69:c3:23:26:9a:e3:16:3b:4a:45:7c:bd:3c:cc:
28:73:2c:3d:2e:1c:34:45:4c:84:f8:34:c2:a3:4d:
2a:e7:32:96:60:27:95:83:5d:6f:9c:c4:1d:61:c3:
02:fa:f7:87:ce:5b:f6:eb:75:7f:92:b3:32:4c:35:
96:e4:0f:71:6b:3b:d9:1e:8b:c5:24:5b:fe:16:e1:
83:cb:0d:42:5e:58:37:df:ae:4a:46:4a:bf:7d:a8:
85:fe:ef:91:aa:89:df:a9:07:b9:19:82:1b:38:71:
a0:c1:7d:37:35:db:00:67:be:ed:16:5e:a6:0c:30:
94:44:3f:a2:ed:38:e5:79:a2:f2:49:48:a9:a1:3a:
22:a6:7a:4f:76:de:d8:fa:72:d3:16:54:a3:0c:51:
a2:6f:d1:54:b2:43:5a:45:11:2a:fa:20:14:e1:20:
40:ff:84:d1:51:ac:f8:4f:06:14:f5:08:1b:0b:d6:
99:69:29:29:f9:25:df:1a:49:65:69:83:21:c4:76:
80:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8E:B0:2E:E0:24:9D:9A:93:FE:0E:3F:6B:3E:49:31:BE:5F:CD:8E
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5b:68:52:6d:6d:f6:e4:dd:9b:7e:7b:a6:af:9d:b6:be:e6:
9a:09:8c:a8:20:11:c5:e8:f3:d5:11:e5:5b:73:a1:26:45:a3:
3d:e5:e3:4c:96:51:71:4a:b5:8f:e5:49:ec:28:d8:36:3e:ab:
f2:b0:da:f5:50:ff:9d:44:82:f9:f8:05:70:26:73:1a:5d:15:
34:5a:e9:20:f7:6f:a8:03:08:a2:4f:82:3b:3b:5b:4e:d6:74:
7c:38:7f:23:63:37:ec:2a:08:11:6b:f0:6b:e9:37:3c:32:d4:
fb:73:f8:22:dd:e8:41:45:26:f0:0a:e5:a2:95:cc:b7:d5:71:
9c:c6:17:b6:ad:f3:5d:15:7d:2e:14:73:70:a5:49:c3:16:12:
2d:fd:a8:05:8c:ca:d9:f3:ae:70:1d:ae:6d:d7:a7:38:c7:47:
6a:15:ce:2a:e8:b7:9c:b5:d5:6d:e0:80:c4:23:a8:f6:48:6b:
99:bb:4f:b3:3d:47:13:9c:87:7f:4b:ba:82:1e:55:f8:0b:2a:
ce:14:74:d9:d8:36:45:fa:e1:6c:35:92:c1:77:50:3a:a9:a0:
71:43:31:ca:60:08:8f:96:17:84:6a:d2:ee:3e:93:d4:62:8d:
7a:9d:00:c4:97:17:b7:86:48:ea:b1:f1:e1:d9:3b:6f:4d:e9:
4b:a0:dd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:52:58 2025 by rpki-client