Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: QKxbKROmD96okV4SaEGhXspCwpmX4bgSl/PK2lIkF9Y=
Subject key identifier: 93:3A:50:E1:1E:83:0C:CA:8A:A8:4D:AE:A6:1F:0B:1C:F6:8C:BB:84
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 019762F0C8FDB9D38EB58CE5564F5F5CAD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 12E5
Signing time: Thu 12 Jun 2025 07:00:36 +0000
Manifest this update: Thu 12 Jun 2025 07:00:36 +0000
Manifest next update: Fri 13 Jun 2025 07:00:36 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: KWyqUGfUNnkoHQzp1bCulcl5xQZ+8+JLg/b85JMeCxA=)
2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=)
3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:f0:c8:fd:b9:d3:8e:b5:8c:e5:56:4f:5f:5c:ad:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Jun 12 07:00:36 2025 GMT
Not After : Jun 13 07:00:36 2025 GMT
Subject: CN=933a50e11e830cca8aa84daea61f0b1cf68cbb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:11:fa:97:e2:65:bc:af:42:d0:ce:e8:00:
4b:af:23:a7:d9:2c:47:0c:0f:26:64:41:0b:41:cf:
b0:c3:7c:33:10:8f:b4:65:20:16:e9:44:37:94:a6:
af:a2:d4:b7:b5:e3:30:96:ce:9c:77:cd:e3:78:d5:
cc:58:5c:ff:f8:16:cb:93:a6:8b:85:ed:68:7f:be:
5a:22:15:f9:62:09:19:39:6c:21:b7:d8:2a:74:4e:
ce:e7:cb:b7:4d:a3:3f:17:d5:22:91:1c:6a:fb:89:
e5:26:3e:37:fc:af:2f:29:68:7f:e5:f0:d4:45:6f:
d1:ce:dc:7e:ed:c8:51:d8:c1:80:7a:b4:15:93:2b:
40:9a:be:2b:ff:ce:5d:71:5e:d9:5a:11:8f:aa:93:
48:04:94:c1:0e:92:fa:bd:9e:ae:3b:99:18:05:20:
56:1d:d6:78:92:b0:50:15:99:70:e9:44:e9:4b:30:
42:ef:27:04:6c:e9:b6:4e:2f:3e:a9:9c:8b:ad:90:
50:e8:c9:40:e6:92:76:c3:da:c8:d4:b2:35:92:9b:
e1:d8:c3:f6:3f:7d:17:06:f6:85:69:3c:69:e8:c8:
d5:62:63:90:d7:49:44:af:55:a4:b4:de:c9:79:63:
98:46:3b:ae:58:17:d9:dc:f9:a1:b8:9a:9c:d5:4b:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3A:50:E1:1E:83:0C:CA:8A:A8:4D:AE:A6:1F:0B:1C:F6:8C:BB:84
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:46:46:59:f4:6b:2c:06:ad:7a:90:30:f9:e0:75:06:a3:b1:
96:23:50:44:f5:a8:10:31:61:2a:15:fd:62:ae:0e:4f:49:e6:
7c:b2:8f:7d:41:6e:6f:da:a3:f9:1e:0e:e4:4b:b8:0a:6f:ef:
7d:ba:9b:f6:0c:09:1f:7c:1f:c5:ef:34:15:95:f0:f1:07:1f:
d1:77:59:d7:25:d6:48:0b:4d:16:69:21:d2:7a:41:03:3d:93:
f1:da:df:81:49:57:84:72:60:00:b2:23:a2:db:13:cf:7f:0d:
a6:a2:d5:be:4c:f7:d4:c3:e3:46:f3:fe:a2:ef:c2:55:22:a3:
34:1a:00:87:d7:5b:c6:72:30:f9:90:77:5d:a3:02:85:4c:b9:
63:d1:cc:83:e7:ab:5e:5e:8a:38:b1:d8:be:3c:3a:77:55:31:
cd:ba:3c:4a:b3:23:fe:0c:db:ee:90:66:25:f3:8f:4c:df:b3:
6b:e5:c6:d4:ee:2c:e6:8b:f8:ca:d6:00:76:6e:04:dc:c2:07:
04:ae:23:8a:8b:4a:88:c8:90:3d:a1:ae:24:b5:cc:4d:5a:8e:
44:75:dc:a8:c4:47:f8:bf:7d:d9:e1:62:b2:74:bc:1c:e8:3a:
9c:6f:ea:52:88:8e:70:2d:a1:6e:1d:bc:76:68:b8:2a:a5:9e:
2b:0e:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:37:58 2025 by rpki-client