Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
File: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json)
Hash identifier: YUAcxCDmc3uEIRL8nv/Tvige4xY2rxwQ9Rk9VasNR6Y=
Subject key identifier: D5:9F:4C:AA:A3:4A:B4:C6:49:1D:28:E3:51:ED:0A:0C:88:95:4C:37
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 0196BD813AC3C71E99083CBD8BD5F1946A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
Manifest number: 1090
Signing time: Sun 11 May 2025 04:01:25 +0000
Manifest this update: Sun 11 May 2025 04:01:25 +0000
Manifest next update: Mon 12 May 2025 04:01:25 +0000
Files and hashes: 1: 1JuBh8lEOH4Gv_TiAGmh3QPTdd8.roa (hash: 9L83yVwb1Uhqks9DMbgSsnxXYkHLF9CsQEa0PBHMdEI=)
2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: E+5gzTwnNWGLPMgvJxezJHtjjkwuLjcxWXUfRg7eiXQ=)
3: uLY7R20m1_heAxActPUiDlUOF_k.roa (hash: VJ9ob+iUB471t51KlgloGG8TLFxOURW4UvaYAdbWSCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:3a:c3:c7:1e:99:08:3c:bd:8b:d5:f1:94:6a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: May 11 04:01:25 2025 GMT
Not After : May 12 04:01:25 2025 GMT
Subject: CN=d59f4caaa34ab4c6491d28e351ed0a0c88954c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:85:e3:01:8e:40:b5:f0:fe:bc:49:bc:df:
a5:5e:52:72:33:b2:d0:19:f3:72:b7:28:58:53:cd:
6f:d9:d4:bd:65:e4:8f:01:8f:1e:f3:2e:73:5a:5e:
c7:c8:fd:27:0c:8e:81:84:f3:94:32:ea:14:ae:f5:
42:88:f7:ab:fc:c4:b8:0d:ee:68:54:ef:ec:da:9d:
9c:17:85:f7:b9:a7:f1:3e:9e:af:6b:ed:cf:92:11:
c7:fd:2a:18:f9:46:31:b2:43:6c:26:43:9a:7e:84:
90:b0:bc:44:4e:4e:cc:cb:30:39:19:7e:06:eb:78:
63:a4:46:5c:b4:d0:db:44:50:c7:a6:a4:0d:00:2c:
8f:3d:bd:df:c2:51:ba:8c:38:4f:ce:b6:be:27:f4:
b5:b7:25:88:14:a0:60:65:be:f6:bd:7f:76:61:67:
3a:1b:bb:3b:5e:aa:36:9d:62:63:a5:d5:73:6a:74:
6c:18:b2:d8:c1:da:7f:fa:21:92:d9:e1:38:c7:0b:
27:85:68:ed:5a:87:4b:a7:57:92:9b:03:26:76:9e:
33:34:ec:aa:fa:fc:3f:5f:3d:75:75:2a:33:15:54:
9f:99:e1:aa:67:54:0b:89:00:b8:28:e6:a6:60:d4:
cb:3b:d6:8e:ae:a6:36:14:66:f0:19:94:ff:02:e0:
ce:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9F:4C:AA:A3:4A:B4:C6:49:1D:28:E3:51:ED:0A:0C:88:95:4C:37
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f6:13:2b:fd:18:22:4f:21:d7:bb:37:1f:67:a0:d8:8d:3a:
c2:0a:90:67:a9:9a:c3:ed:7d:9f:6b:30:b7:0e:1c:ae:e4:51:
f1:53:f3:02:1a:2e:2e:ea:c3:d3:1f:04:de:9b:57:92:dc:a5:
aa:7a:19:bd:b7:8d:e0:9a:b2:99:4d:89:9a:35:c3:47:18:d0:
3d:f9:ad:da:ce:47:a0:d4:e4:c2:25:60:33:33:de:6e:94:0e:
20:1c:7f:e3:1e:43:9f:90:ad:ec:5c:6c:d4:98:0e:d8:d1:73:
66:94:d5:ea:e1:01:d6:c9:15:36:77:f3:48:ca:30:c7:05:db:
12:e9:85:29:fd:79:18:e3:69:0e:81:17:f4:25:3b:6a:22:6d:
f0:85:11:d4:2b:f1:f2:d0:ae:4e:bc:ec:e9:a8:1a:3a:b1:c6:
d4:f8:e4:01:e2:c9:4f:9f:be:d2:ac:96:8c:6e:73:eb:b4:7c:
0c:0a:3f:e4:e3:99:d1:63:e6:9f:fe:cb:ec:97:01:3a:89:31:
95:09:78:12:cd:c4:44:20:fd:aa:ac:be:8a:85:21:e0:01:a4:
18:91:42:65:ff:c4:21:1c:96:45:07:89:b7:83:54:1d:36:6d:
dd:8a:3b:0e:eb:23:2b:7f:64:8d:a0:db:41:13:c9:f2:28:03:
54:84:12:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:08:45 2025 by rpki-client