Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: HveJCPNi5PGKWq0RDSdavUakIw84b1naFXTWVkVZUAk=
Subject key identifier: 71:AE:76:3B:A7:5F:F1:9E:62:D6:10:B4:B3:01:3B:22:E4:C7:1E:43
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 0196BB5B48623640E343F41863CD05578713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 07BE
Signing time: Sat 10 May 2025 18:00:43 +0000
Manifest this update: Sat 10 May 2025 18:00:43 +0000
Manifest next update: Sun 11 May 2025 18:00:43 +0000
Files and hashes: 1: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: 7S7ZRCMyAZnUh9ow7dWf5unL0BVwYT26ctCxDOqm684=)
2: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (hash: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=)
3: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (hash: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:48:62:36:40:e3:43:f4:18:63:cd:05:57:87:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: May 10 18:00:43 2025 GMT
Not After : May 11 18:00:43 2025 GMT
Subject: CN=71ae763ba75ff19e62d610b4b3013b22e4c71e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:86:74:c5:83:38:fc:d9:bb:93:7c:74:f2:
1f:90:06:32:b2:7e:51:6f:fd:3c:7a:fc:47:a9:69:
0b:70:92:05:54:ac:27:fe:14:74:23:0b:01:45:b9:
c1:6c:92:1a:07:df:75:6e:1b:cd:4f:e4:f1:6d:06:
35:0b:25:f8:d0:d5:47:c8:eb:47:8f:ca:70:0b:10:
e0:b9:9e:cd:af:c5:0b:28:43:b4:57:49:49:8e:f1:
18:71:c9:43:01:92:f0:fb:3f:17:05:c3:a2:15:fb:
29:7f:f5:d0:6a:76:c4:09:03:13:7d:46:49:c7:cd:
65:20:b5:82:7e:41:07:52:0a:a1:a4:a7:08:ea:d6:
8e:de:a5:c5:14:d6:28:d6:cb:02:e5:b6:2f:63:29:
5c:62:1d:1b:a2:27:17:e9:78:ca:d3:a4:2a:0e:fe:
24:47:51:c7:a2:af:0a:c9:5c:a5:35:aa:04:0a:39:
be:f1:20:27:56:03:88:1f:92:16:db:80:e8:10:88:
55:f7:51:fa:6f:32:94:21:c4:ad:8d:db:89:f6:e6:
65:98:91:04:15:65:0f:d1:07:8e:10:25:47:b7:06:
ce:8c:3c:59:91:36:d6:39:0a:a5:6e:40:50:9d:2d:
a5:39:9a:e0:d9:4e:0b:9a:b7:1d:eb:3c:90:65:b4:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AE:76:3B:A7:5F:F1:9E:62:D6:10:B4:B3:01:3B:22:E4:C7:1E:43
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:39:e4:02:36:41:e9:1d:3f:a4:35:b5:a1:0a:53:d9:a8:3d:
d4:bb:e6:46:df:f9:4c:11:62:d2:76:22:ad:01:d9:51:e8:2d:
69:ae:28:c7:d9:32:98:cb:e0:21:cb:79:10:44:37:da:d9:6d:
09:02:3a:60:b5:de:fa:f9:53:7c:6b:9c:fe:cd:11:1c:5a:c9:
bf:7e:cc:d5:03:ca:8d:3b:af:da:ad:73:dc:30:37:16:f8:7c:
70:30:1b:f7:2c:ef:23:56:ed:5a:8d:ac:6b:94:57:29:c8:d5:
c6:b2:e0:aa:03:01:ce:65:43:d9:59:23:8c:c5:4f:46:d0:83:
c6:89:8a:41:59:ce:00:f0:35:9f:ed:ea:b9:0d:7d:17:c4:62:
6b:b4:bc:21:f5:f7:d5:e8:f0:b2:9e:28:42:b4:73:22:1b:83:
36:e9:f1:72:74:d1:79:69:d1:0b:83:70:ba:69:77:7f:4d:f2:
37:2b:d8:10:45:f0:e3:0d:00:0a:db:b3:76:dd:40:1e:00:98:
77:5b:8f:35:41:14:17:cf:89:b2:2e:90:d5:60:18:13:b3:dc:
fa:b9:d5:4a:8d:86:a1:82:d9:bd:e8:28:f3:b7:23:4a:24:f2:
18:9b:6e:46:e5:d9:29:6f:b3:16:2e:6e:44:0c:7e:a0:b9:ba:
fa:16:2f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:15:11 2025 by rpki-client