Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: OJF17naQrA0tedI0o+VFYQPAlnl47gBEofPDNG1dQeg=
Subject key identifier: ED:BE:70:20:EA:EF:B2:13:BC:D0:39:31:86:54:05:C6:CA:61:D4:A8
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 0196C4CC2B0ACF7779B3D23079B3C3BC7A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 0E2E
Signing time: Mon 12 May 2025 14:00:36 +0000
Manifest this update: Mon 12 May 2025 14:00:36 +0000
Manifest next update: Tue 13 May 2025 14:00:36 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: of4/OxRiuNo81HhhAWohc3bvrGmvyIrrIO8LowiIRYY=)
2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:2b:0a:cf:77:79:b3:d2:30:79:b3:c3:bc:7a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: May 12 14:00:36 2025 GMT
Not After : May 13 14:00:36 2025 GMT
Subject: CN=edbe7020eaefb213bcd03931865405c6ca61d4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:a9:47:73:a6:56:4d:da:e3:a5:cc:ca:1d:
8d:7f:10:f3:69:5e:2d:a8:5d:7c:d9:b2:da:69:b3:
26:50:28:9c:b1:69:88:9d:03:ca:99:1a:2b:b5:b6:
5b:6a:c7:c8:3f:70:08:c9:41:c2:14:dc:b4:8c:ef:
29:80:28:d7:c4:2c:61:b1:e0:15:61:ca:76:20:b4:
cf:c9:62:ee:14:b6:93:f0:70:92:0e:40:b3:f7:55:
57:65:48:46:4d:fd:0b:a6:ef:7d:a9:4a:53:53:64:
65:a2:6f:ad:f6:25:06:75:73:42:82:b3:39:1b:bc:
d6:46:9c:b4:7e:79:51:c9:f9:3d:92:f4:da:47:36:
39:26:5d:88:01:47:52:8f:d5:fa:34:ae:df:1b:cb:
aa:e0:38:a6:b8:f8:12:6b:18:49:5e:f0:5a:95:ca:
ba:52:c7:6b:dd:1c:33:70:39:2b:be:9f:16:2b:96:
85:28:5b:8b:7b:f0:8f:bc:19:0e:bc:64:ca:1f:cc:
0b:94:b9:70:eb:1b:e5:b2:ad:c4:76:44:10:47:b7:
78:69:12:f1:b1:76:71:0f:7f:60:97:ef:c7:59:c0:
58:32:89:33:c3:40:32:30:09:4f:eb:95:f8:99:42:
85:04:ae:10:b0:c8:81:f5:92:15:10:9b:a8:27:f7:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BE:70:20:EA:EF:B2:13:BC:D0:39:31:86:54:05:C6:CA:61:D4:A8
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9d:79:8d:bb:8c:71:92:53:13:e0:2b:69:c3:13:c9:8a:24:
59:14:b2:71:58:e4:12:0a:4c:1f:09:93:df:59:89:8a:c0:99:
56:c9:23:4e:e9:35:b2:67:1d:d8:64:59:57:9e:d3:8f:05:9a:
29:7d:87:b3:63:75:59:98:ca:f5:6c:49:79:fd:f2:42:54:11:
d3:42:5c:83:a2:32:b0:27:fc:6e:dd:69:1f:a0:9b:d6:f3:7a:
0b:ff:8d:c1:28:7b:39:1c:8d:36:94:15:9f:25:f2:b5:a5:fc:
b7:de:46:93:68:10:1e:0b:3b:48:96:c4:79:58:50:8e:a7:dc:
86:1c:d1:ef:38:0a:e9:c1:f4:f4:d0:87:74:4e:59:b6:a3:6d:
36:e7:e5:e7:dd:3c:be:0e:b7:4b:f4:e4:76:ad:4e:d7:fd:6c:
f6:61:71:cf:a0:ff:ea:d5:f1:8e:31:05:b5:65:81:78:40:6e:
80:8c:96:49:67:b9:be:7d:dc:90:0c:07:fa:04:a7:41:c5:90:
1b:16:60:58:6a:bd:b1:ab:4a:36:98:ff:e4:25:23:5d:1b:32:
c2:d2:90:b1:06:02:4a:f2:43:cd:4d:f9:10:6c:47:a5:8d:06:
df:c7:dc:25:4e:2d:b3:d0:e4:2b:ef:80:50:e5:b9:76:6d:63:
65:09:af:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:44:24 2025 by rpki-client