Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json)
Hash identifier: MwqAw6cT9E5Bf4kquuIQdnGMeGbEfWb3KJB2tgkC02w=
Subject key identifier: 25:E8:B4:01:50:AA:94:AE:2E:34:BF:C4:76:3C:3B:CC:CF:68:AB:CA
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 01965914D65427744DF7D591BCA496F14734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
Manifest number: 02D4
Signing time: Mon 21 Apr 2025 16:00:59 +0000
Manifest this update: Mon 21 Apr 2025 16:00:59 +0000
Manifest next update: Tue 22 Apr 2025 16:00:59 +0000
Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: zDuC7PEv0MtWIqlV8urvTYwsTI6rQyMD9cdlOTx7Y20=)
2: K6bM5601EY4aWoYwlB_yWaSAYWg.roa (hash: q1/+kZ6yqPL4e9VCBVnSxVBfdHwsRb33uiurUpP8SWw=)
3: Qp56EhXo02rtbXG9bpMugv8X2n0.roa (hash: TyqFIVR8sVZ/spucHhOleEaJbMKaFD4U+qZbekh1SEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:d6:54:27:74:4d:f7:d5:91:bc:a4:96:f1:47:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Apr 21 16:00:59 2025 GMT
Not After : Apr 22 16:00:59 2025 GMT
Subject: CN=25e8b40150aa94ae2e34bfc4763c3bcccf68abca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:99:c3:6d:43:13:f6:20:a2:f1:38:82:db:ff:
8c:f4:8d:75:04:22:dc:d1:04:88:55:26:cf:63:63:
ce:b3:68:25:c1:d5:ec:3b:73:8c:78:a2:36:52:0c:
96:16:3a:0c:7c:7d:4a:a5:df:5d:49:2e:fa:5d:01:
2d:36:0b:73:88:74:c9:fe:b3:13:30:95:ee:0c:46:
57:e2:f8:20:30:f2:55:96:c5:cf:8c:f7:94:65:22:
38:6d:47:39:9e:4a:93:2d:ad:97:62:07:b5:b4:30:
2c:ba:cf:70:eb:ff:7d:0f:42:2a:0e:09:f9:b8:ad:
4d:e0:d5:88:87:27:fd:f2:4f:9c:75:a9:61:79:15:
96:9f:5d:b2:58:d8:6f:e8:5a:e3:7c:89:b9:4f:8c:
a2:c5:2a:da:39:68:ba:4a:e7:87:5f:ec:83:73:99:
21:9d:5f:9b:6e:04:96:2d:b6:e0:92:b7:81:b8:f6:
5b:67:a9:6e:bd:16:3f:6f:0a:21:db:e5:64:d4:18:
b1:63:0f:7f:c0:9b:ea:b7:f9:6e:92:79:3a:10:52:
e4:f2:75:da:cf:c3:7a:79:7d:d5:83:20:00:f5:bc:
d1:81:fb:c8:27:d0:d0:1e:6a:4f:12:9c:14:da:30:
92:64:d7:25:46:1d:07:2c:08:81:74:ac:83:08:df:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E8:B4:01:50:AA:94:AE:2E:34:BF:C4:76:3C:3B:CC:CF:68:AB:CA
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:27:1c:71:b1:17:9b:42:30:8c:fa:83:2e:b0:29:20:70:c8:
c5:54:cc:61:a0:4c:4e:5b:da:14:cb:96:32:6d:3f:ec:1c:00:
bb:9c:12:e8:75:75:6b:77:ab:f0:f8:4e:6d:36:1b:4a:4c:af:
da:54:8d:02:48:99:b9:00:54:b8:fc:c3:0d:20:06:45:e6:21:
cf:86:57:72:5c:93:b9:e7:d8:bf:3f:e8:6b:db:1d:d4:47:80:
88:7e:f5:bd:bd:7c:c9:7f:21:3b:dc:79:d2:7c:7c:2d:69:54:
8c:c0:84:6d:01:aa:c8:e5:d1:27:6a:f8:5a:ea:16:51:b4:00:
ae:3e:31:af:94:3a:aa:32:2f:c5:a9:7f:e2:28:78:8f:1b:e6:
f8:cf:e6:d9:15:9c:a2:a2:ac:26:b7:83:2d:40:f6:ce:5e:80:
fc:96:11:64:80:e1:47:1c:cf:87:52:c8:f1:81:73:ba:18:2a:
c6:c4:3e:df:ac:02:51:c6:78:70:7b:69:b7:c2:cd:f3:30:c7:
7f:ef:ba:27:3e:60:68:36:5f:e1:b4:c9:4d:67:29:5f:98:b1:
ea:83:4f:c7:35:a4:1e:4f:38:e1:ed:8e:b2:48:b5:70:1e:e7:
cb:6b:5f:b5:bf:2f:b3:09:e3:48:41:c0:5c:5e:ad:5d:ad:31:
bf:42:11:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:28 2025 by rpki-client