Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
File: JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft (raw, json)
Hash identifier: ejbqmPcHEEMn/eBM3UCGqhxc9BS9xXf+/O7GDy3q61U=
Subject key identifier: BE:30:C0:36:08:C2:59:9C:34:18:D1:08:11:13:23:0A:3A:F4:28:13
Authority key identifier: 24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
Certificate issuer: /CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Certificate serial: 01969F0880465D419DFEF173C72C42FCBEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
Manifest number: 0868
Signing time: Mon 05 May 2025 06:00:56 +0000
Manifest this update: Mon 05 May 2025 06:00:56 +0000
Manifest next update: Tue 06 May 2025 06:00:56 +0000
Files and hashes: 1: JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl (hash: 9ejzyqPft44dfQjo/OoM+FEO2YOp8O3YAdlSYuIhei8=)
2: a4Rgp8ho7PzxQQPKwdBZtuvECRY.roa (hash: RsAUUp6bEgrlBTHA6hUkPwZnwkAi94Oxg46FrwXwg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:80:46:5d:41:9d:fe:f1:73:c7:2c:42:fc:be:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Validity
Not Before: May 5 06:00:56 2025 GMT
Not After : May 6 06:00:56 2025 GMT
Subject: CN=be30c03608c2599c3418d1081113230a3af42813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:14:51:b0:61:9e:2a:13:ab:c8:c4:2b:bf:
cd:b6:a7:2d:c3:3e:0e:72:51:0e:d4:e9:4f:4a:07:
a2:11:d4:df:88:9a:8b:8d:41:1e:59:a3:df:db:f4:
df:bc:ff:05:90:3e:17:28:ad:2d:2d:e2:53:e8:eb:
de:76:21:66:05:cd:b4:f9:cf:b7:70:71:a2:6b:4f:
12:48:6a:bd:d9:97:b4:50:85:df:4c:21:49:03:ac:
6c:11:5f:ac:51:d6:43:d9:fb:db:bb:a5:30:34:6f:
93:2e:fe:fa:d3:46:6f:0b:63:8a:0b:51:be:28:18:
e6:14:0f:d4:74:e3:75:0b:d3:ce:54:f6:ed:7a:91:
de:da:56:b8:0a:fa:46:12:73:2d:70:ba:3b:03:65:
06:57:72:6d:cb:f6:77:9d:1a:e1:56:db:e0:2a:a5:
22:5b:9d:66:78:f2:09:2a:38:4a:cf:8f:58:80:02:
a3:f0:36:f4:a1:30:ec:63:90:4d:57:bc:5d:17:0f:
d7:47:89:ff:5d:58:ae:12:27:c9:69:72:67:f6:15:
a1:25:0c:0e:50:79:8a:d5:93:a1:09:a0:7f:b6:7e:
b7:52:f9:c0:00:88:3b:a5:d5:55:51:cf:c8:ab:04:
3f:6d:de:23:ba:a5:46:09:a9:63:7d:21:4d:07:d1:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:30:C0:36:08:C2:59:9C:34:18:D1:08:11:13:23:0A:3A:F4:28:13
X509v3 Authority Key Identifier:
keyid:24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:71:f9:6a:ac:5d:64:29:f4:a5:30:1a:f4:fb:30:f1:72:6a:
29:c9:df:bc:53:de:21:90:b0:ff:18:81:85:9c:0f:14:82:84:
aa:94:1d:1c:19:68:a8:c5:4f:49:3a:c2:58:c1:b9:35:ce:fb:
cf:d3:ca:3a:35:04:00:f2:6e:8c:b0:7e:d9:47:1c:a2:30:39:
7a:17:80:5e:5b:74:3c:56:ee:9b:11:f4:f4:c6:32:68:d9:81:
a6:c4:e5:b0:fb:cf:fe:22:32:97:b7:38:49:81:b7:fd:ae:f1:
da:e1:95:6a:e9:ba:d3:cc:aa:0f:34:51:84:99:5b:a7:b0:1a:
56:b8:bd:bd:c7:98:ec:23:40:f3:f3:06:7a:5b:4a:08:56:ea:
b2:7d:3d:99:eb:9f:7f:7b:9d:f2:a6:0c:3e:a4:a3:fe:8f:1f:
1e:df:14:ba:5b:94:68:50:c1:35:2a:ea:04:e1:b9:a8:4f:16:
1d:c6:9a:22:37:c4:a7:e6:e8:b2:24:bb:ac:13:7c:31:89:b4:
ca:c8:b0:5f:f6:8e:95:e9:19:37:de:bb:6b:1b:44:af:81:d7:
a5:e8:a8:41:ad:27:e5:16:b1:87:55:51:50:87:61:28:c4:8c:
81:66:71:31:f0:3f:c4:5e:af:5e:7d:22:c4:34:a8:c8:a8:9e:
4e:fd:91:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:55:56 2025 by rpki-client