Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier: PI6wZ7Uu5+IG4Y/P59nRiaCYYoMfMHY3Q3ZqpkfYpKg=
Subject key identifier: 72:59:72:F9:65:36:76:47:E7:70:79:76:BA:E7:D5:86:2D:71:18:5A
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial: 0196B36A7BC8AFB884DBD4341F653795917B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number: 0D59
Signing time: Fri 09 May 2025 05:00:22 +0000
Manifest this update: Fri 09 May 2025 05:00:22 +0000
Manifest next update: Sat 10 May 2025 05:00:22 +0000
Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: DixBIcsXR06sc3Uud77YnGfO4gug+Bz89ETRPFnDHfk=)
2: zZ4Hlb2x-3mX0RpLcIDR2DBRVWM.roa (hash: rtcchc9xlTzl7W167gpB0l7rHLuWsqswJuQgbOgsw/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6a:7b:c8:af:b8:84:db:d4:34:1f:65:37:95:91:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Validity
Not Before: May 9 05:00:22 2025 GMT
Not After : May 10 05:00:22 2025 GMT
Subject: CN=725972f965367647e7707976bae7d5862d71185a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:8d:2d:41:a8:3d:ad:41:3b:39:1c:4a:60:
0b:82:d6:78:9a:5c:25:60:f6:f6:91:ea:bc:b1:ce:
0d:8b:2f:37:1a:17:94:9a:25:b1:22:f3:6c:10:b3:
cc:fa:c2:db:1e:a7:4f:33:31:fb:14:70:32:07:c9:
22:2f:1d:bc:62:5c:7f:34:46:8b:a1:43:06:ab:de:
9c:5b:f1:55:d8:79:67:24:5e:a3:ee:a3:bc:7d:e3:
69:7d:bc:56:bc:ad:0a:f7:1c:a2:a1:14:76:45:0b:
72:91:8d:0e:93:bf:25:fe:38:30:72:e5:a3:3c:06:
cd:af:f1:87:8f:42:f6:94:c2:de:c7:5f:e8:4c:85:
5d:45:de:e1:a1:2c:db:82:56:35:eb:d5:4f:70:ee:
2f:a8:3a:26:fa:e3:82:f7:89:5a:c0:e9:5e:c6:b9:
0c:ab:2c:01:3e:f0:16:9e:7d:d9:80:71:3a:9c:0a:
3f:7a:2d:b3:d0:02:d4:73:13:ee:69:93:69:e2:8f:
67:1b:1b:c6:d5:25:00:1d:d5:71:53:78:1c:f8:80:
99:ae:48:33:9d:87:02:e9:16:d6:8b:37:c2:6b:03:
ad:65:d2:4c:9d:a0:91:6a:d1:39:e6:5a:f5:7a:31:
e4:6b:a6:ef:b7:df:1c:fe:03:1b:b0:a1:bc:3d:91:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:59:72:F9:65:36:76:47:E7:70:79:76:BA:E7:D5:86:2D:71:18:5A
X509v3 Authority Key Identifier:
keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1e:f6:9e:79:e3:26:4e:5d:6a:40:39:fe:24:39:67:58:d0:
f7:29:b5:9b:45:05:26:5d:c1:f9:6f:b2:0a:df:42:d3:1b:c0:
63:34:02:69:00:a6:20:04:47:b8:0d:a7:5f:ed:7e:60:11:53:
4b:41:b7:eb:cf:6f:2e:06:ee:fd:61:e2:3f:56:63:2d:19:27:
b1:94:6e:38:63:77:51:da:96:0f:d1:05:53:b9:f8:d3:cd:2a:
19:c6:0c:5e:c6:89:41:19:a7:fd:de:19:d3:88:3f:3e:61:aa:
d9:20:13:d0:ae:7f:0e:37:54:8a:2c:2f:b8:94:b4:38:3b:a9:
e8:9d:97:44:5d:2e:0f:fb:c7:bb:f6:a1:7d:95:68:60:0c:6f:
c4:98:82:66:77:ea:78:fd:cb:46:b7:f6:22:aa:ba:10:c1:ff:
df:87:65:cf:9b:8b:71:42:6f:c2:c8:24:dd:70:78:1b:da:79:
d6:24:17:f4:01:92:27:27:95:0b:2f:ca:1f:4b:79:6b:69:b0:
c7:76:ec:31:30:38:db:e9:62:1d:85:6a:14:ba:88:c8:e1:76:
86:05:eb:a9:ba:e1:09:9c:8b:ca:88:26:71:30:83:a9:c9:16:
da:bd:f4:eb:41:57:e5:99:6b:74:8a:a8:52:47:8d:ab:24:c8:
76:33:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:02:27 2025 by rpki-client