Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
File: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json)
Hash identifier: ptDid63TYJU/X5+5lWTn8UCsL0lrNmDOdlsQIn7umfw=
Subject key identifier: CE:E0:B5:2E:2E:50:77:ED:BC:3A:D9:D3:CC:CD:50:88:EB:73:C6:29
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial: 0196B5FD7D7100760BD2D677E9284BA46FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
Manifest number: 02B1
Signing time: Fri 09 May 2025 17:00:10 +0000
Manifest this update: Fri 09 May 2025 17:00:10 +0000
Manifest next update: Sat 10 May 2025 17:00:10 +0000
Files and hashes: 1: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: Y1ZuvbE6vhWHk1ZWzvc/1s3mDO9qnvuHuc02AXZF6vg=)
2: pi3_amo42v-V9gBkLtFw7VXHyt8.roa (hash: ptd1oveMAvBnjDaa3RzGQR3dUT03hcO6XNO/IHbTQeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fd:7d:71:00:76:0b:d2:d6:77:e9:28:4b:a4:6f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
Validity
Not Before: May 9 17:00:10 2025 GMT
Not After : May 10 17:00:10 2025 GMT
Subject: CN=cee0b52e2e5077edbc3ad9d3cccd5088eb73c629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:09:08:41:dd:1d:37:14:25:7f:a0:83:df:
79:fd:40:51:cb:8c:a9:a9:88:33:1a:97:a0:52:af:
1c:ed:82:99:2a:73:b8:c1:ea:b7:88:80:16:1e:65:
9f:78:f3:2d:5d:92:44:5f:d5:e4:ea:4c:24:41:a1:
d6:0e:0a:28:d9:f7:81:f9:c5:f6:06:1c:53:a9:69:
25:66:6f:18:ee:d7:e8:fd:7e:4f:ed:5a:c5:a2:23:
09:82:79:64:4d:51:49:e8:21:4a:10:d7:04:ba:66:
b9:5c:e3:f2:7f:d5:a2:29:9e:b7:79:d1:51:59:37:
a1:1f:9c:c2:a6:96:16:92:95:da:88:b2:1c:cd:ad:
f5:9d:9d:64:08:fe:21:c7:c9:7a:e3:27:aa:4c:81:
2f:11:16:51:4d:50:ff:62:d4:d3:f5:5e:aa:d4:2d:
80:10:fc:25:39:a0:33:ca:0f:48:32:de:ab:e3:b3:
50:22:97:15:eb:ec:23:e7:bc:8d:1f:b6:d9:a3:0c:
6b:69:87:81:43:f9:f7:2f:93:25:a9:dd:1f:cf:07:
f3:8a:4f:d2:50:14:d5:12:3b:b3:20:3e:10:f3:da:
38:fa:45:59:bf:24:18:d2:30:03:0d:01:e7:ba:5d:
9f:f6:65:e5:58:6e:98:8c:31:78:7c:12:4f:32:f7:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E0:B5:2E:2E:50:77:ED:BC:3A:D9:D3:CC:CD:50:88:EB:73:C6:29
X509v3 Authority Key Identifier:
keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:62:d2:18:ac:96:4f:ef:06:a2:09:05:f9:60:19:74:09:ef:
95:81:b6:a0:27:00:1b:c2:be:53:c3:1d:81:67:f7:ec:0e:19:
e9:5b:ad:81:ff:01:b9:f0:38:1b:64:8e:92:45:3b:e3:2a:19:
83:8f:9a:9c:dd:ec:c0:15:1d:db:02:23:de:98:43:e1:f2:5a:
75:46:34:b7:ba:ea:32:c8:fc:84:1b:25:3f:02:24:54:ec:59:
ed:cc:f6:59:20:27:61:60:cb:fd:b3:58:f1:82:a8:72:da:35:
bb:92:75:36:6d:66:78:13:27:af:cf:74:e8:fe:3a:91:04:c3:
8b:97:aa:e5:a4:71:76:25:b7:50:45:da:0f:85:94:e7:35:9d:
10:70:94:22:0d:9d:cb:d9:3e:c4:d4:b8:45:fb:8d:47:91:2a:
9e:31:57:01:90:6a:6a:fb:66:d9:ba:85:e7:7d:cd:1d:ab:6e:
e1:5d:e5:72:78:5e:5e:52:46:9a:33:92:71:9d:8c:bc:c7:cb:
2d:1a:fb:df:31:9f:a5:fb:b6:20:75:75:b3:1b:d1:bd:a0:4b:
b3:d5:e2:86:d3:5b:52:ab:2f:c5:8b:f4:6c:c1:d4:27:53:c7:
1c:64:e4:c6:20:44:17:a0:e4:6f:48:5a:ee:9b:be:69:a9:5a:
8e:ea:f2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:38:56 2025 by rpki-client