Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
File: _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json)
Hash identifier: fOPx8RtPXRnhC8sCHykEwIMkMna2tDSxycb/o5PS8q0=
Subject key identifier: 62:68:8F:CE:64:81:D5:9A:66:DC:5D:99:FF:4A:6E:B0:35:36:3A:39
Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
Certificate issuer: /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Certificate serial: 0196B823C92038D1C15BDBE798CB3A84D6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
Manifest number: 04A4
Signing time: Sat 10 May 2025 03:01:15 +0000
Manifest this update: Sat 10 May 2025 03:01:15 +0000
Manifest next update: Sun 11 May 2025 03:01:15 +0000
Files and hashes: 1: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: pvaW3Y+QOqZt98/GSAufdb/3Wd3WrX+IZMfPEf2zNCU=)
2: kGh2ZAKJM2CfYt9swIKSZAfzB_I.roa (hash: aTLGH5HWVmrOF0Jwd8eHkKzJcYT3fAVpizSVbGt2XVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:c9:20:38:d1:c1:5b:db:e7:98:cb:3a:84:d6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Validity
Not Before: May 10 03:01:15 2025 GMT
Not After : May 11 03:01:15 2025 GMT
Subject: CN=62688fce6481d59a66dc5d99ff4a6eb035363a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:79:ea:ce:3d:96:31:71:b9:33:76:2d:1b:a9:
ba:54:11:ff:41:f1:56:9c:98:28:2f:9a:4f:9e:27:
49:17:16:3c:1a:9f:ab:1c:e2:07:0e:9d:4e:9f:4d:
61:14:4a:79:f4:40:8e:7d:fe:45:a8:cf:e5:68:4f:
f9:4b:3c:f3:33:5a:94:3a:71:a4:0f:08:7a:70:75:
12:f1:08:99:a9:95:c0:ed:08:3c:98:0b:b1:da:85:
d2:92:f0:6c:c3:38:b9:e8:84:8c:7d:9f:62:fd:59:
9b:7b:23:03:04:e6:09:70:1f:bf:92:2e:52:c9:3c:
b1:24:0f:ac:54:63:04:b5:18:be:c4:fe:6e:c8:ee:
77:1d:85:dd:29:40:b3:13:44:09:f7:c8:d4:e5:7b:
de:1d:1f:84:b1:b2:c3:40:cb:db:91:e1:d5:8b:8c:
03:be:a2:25:07:86:62:a1:bf:87:13:b6:db:b5:40:
69:80:d0:5b:5e:5c:d5:72:96:33:b6:9f:39:eb:6e:
96:cb:c9:25:18:9a:e1:ad:02:83:f2:1d:59:1a:80:
27:b0:ac:cb:68:cc:ce:f7:c0:16:a2:20:43:14:ba:
7a:10:ee:46:13:c5:e5:75:d2:06:78:50:60:bf:34:
31:44:53:a9:88:2e:42:9f:72:7e:fe:18:fc:05:32:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:68:8F:CE:64:81:D5:9A:66:DC:5D:99:FF:4A:6E:B0:35:36:3A:39
X509v3 Authority Key Identifier:
keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:73:fe:d6:f5:97:1d:36:be:6f:3e:d5:9b:17:f0:4e:81:c6:
df:fb:e3:5c:f8:e3:a6:8c:64:a5:96:b5:91:c1:77:d4:d7:ad:
97:9b:6d:ec:1d:2a:4d:c2:44:f3:a4:b8:5f:c5:9f:8a:21:6c:
47:b9:a9:d4:88:82:c3:f8:4f:c8:b5:c4:0f:4a:2f:8e:59:c6:
04:36:d9:80:26:28:5c:07:62:64:1d:6c:72:d0:15:95:e8:ed:
4e:c1:75:af:0c:83:22:e6:00:9e:58:dd:98:fd:76:6b:43:cc:
a7:6e:e4:c4:cc:76:29:f6:f8:1c:2a:8a:15:71:14:5a:b2:a1:
9f:fe:7d:4d:fa:bc:b8:9d:24:e0:17:21:e3:77:0e:8b:78:cc:
48:83:9a:71:9b:b7:1a:10:78:b4:01:86:a1:2e:3c:2f:76:c1:
d9:66:a9:1f:28:79:8e:dd:b1:4f:1f:89:90:f5:15:22:69:60:
bb:fb:08:ec:a7:29:cb:61:45:25:58:ea:9e:5b:ec:76:a9:44:
02:f5:e9:52:8a:7c:0a:71:c3:55:94:ff:14:f7:c2:09:5a:84:
92:45:86:2b:9d:2b:9b:59:d1:36:d7:cc:d8:55:8d:b0:20:c2:
6e:e9:53:22:5d:3e:58:7d:8e:11:e7:f5:91:6f:4a:3b:ce:97:
a8:af:82:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:37:41 2025 by rpki-client