Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier: Zc/qASPNns+tAQEZO94XCqvisy7B4uzMwUr2MOK6HDQ=
Subject key identifier: CF:2A:4A:C9:5B:61:BD:85:61:13:C3:3A:4B:EC:E9:F4:ED:8F:AD:E0
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial: 0196B0A0B8A9A3B2A7F1626BE3F80122D480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number: 024E
Signing time: Thu 08 May 2025 16:00:45 +0000
Manifest this update: Thu 08 May 2025 16:00:45 +0000
Manifest next update: Fri 09 May 2025 16:00:45 +0000
Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: kDY9JfZj6vw/3N4sqczDAa87oiFPAMeFmVbtF6H5Vs8=)
2: W33wCNoqVtC8nnysLfc50xpdZy0.roa (hash: ojPlZl8ybzd2ray8ATJYzRb0Yn01gVHIP83ulWRE+8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a0:b8:a9:a3:b2:a7:f1:62:6b:e3:f8:01:22:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Validity
Not Before: May 8 16:00:45 2025 GMT
Not After : May 9 16:00:45 2025 GMT
Subject: CN=cf2a4ac95b61bd856113c33a4bece9f4ed8fade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7b:a4:6b:bc:05:35:f3:dc:03:92:cb:33:d5:
9c:4c:d5:3d:69:be:df:6b:f7:20:88:0e:59:46:0c:
db:33:45:7e:81:7f:91:59:b4:ee:7c:fc:9b:23:09:
3a:91:08:84:a3:e8:bb:1b:6c:fd:7a:ec:2f:94:fa:
b5:b2:34:6f:64:e9:db:3a:1e:b0:90:27:40:f1:8f:
f0:c0:e8:4e:45:d2:22:dd:c1:24:cc:89:20:c3:47:
4f:b6:ee:28:29:00:94:d3:33:00:d2:82:fd:1e:b5:
85:b0:80:72:d0:e7:c1:7e:0b:c1:1a:88:48:b7:e0:
ff:ac:90:7c:33:4e:22:86:30:b2:d4:c3:ec:35:37:
c0:dd:f1:f1:26:3e:5e:8d:bc:3b:db:eb:97:87:7e:
e8:cc:83:b8:0a:87:81:2f:e5:ac:de:f5:89:d5:1d:
b6:57:e1:35:9a:96:7a:18:02:be:dc:f2:68:18:59:
df:63:00:35:d3:5a:87:77:98:b6:78:48:ba:48:70:
bd:55:a6:d0:4e:39:bb:c3:ba:df:c3:bc:25:e5:a7:
18:b5:29:4e:93:23:e5:a4:27:1a:ab:5d:b0:f3:27:
9c:83:e9:6a:5f:42:7f:37:c0:13:7b:c9:9f:01:33:
e9:74:7d:be:bb:ae:02:36:24:13:4a:5b:a6:a7:b4:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2A:4A:C9:5B:61:BD:85:61:13:C3:3A:4B:EC:E9:F4:ED:8F:AD:E0
X509v3 Authority Key Identifier:
keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:56:59:fb:5d:fb:7e:c8:d1:82:a7:fd:21:cd:df:3a:39:8d:
d9:e8:4c:00:eb:28:4a:e5:63:30:db:01:84:54:de:16:52:54:
e6:ff:65:e6:04:ec:ad:d0:66:4f:e2:1c:45:fd:b4:d0:0b:df:
ce:df:7e:52:77:35:c5:af:cf:4f:27:44:ba:8c:6b:52:e4:17:
b3:08:b4:94:5c:8b:1b:7f:3a:b2:19:ce:dc:a7:8d:8e:5a:d0:
94:b3:03:9e:fa:cd:9e:aa:cd:da:b1:0e:72:53:99:2a:4c:13:
99:bd:f2:ec:36:50:68:d2:60:a0:f6:7b:65:c4:c0:aa:ff:50:
3a:96:9d:c1:6c:28:26:54:4f:eb:94:55:f8:01:4d:77:41:d1:
24:ea:5a:d1:6a:99:a0:ef:82:04:8a:11:8c:09:25:5f:0c:e3:
ba:94:2f:3c:c1:66:95:46:94:37:d4:12:44:58:cc:d1:16:44:
d2:09:4b:97:95:20:b0:e6:e5:34:32:a7:79:67:cd:6c:a3:bb:
cd:ea:2d:7d:51:5f:46:dc:97:4d:74:63:bc:59:3a:76:f0:de:
38:7a:b5:f7:54:87:e4:9a:bb:05:be:70:c6:bc:f5:8f:e8:5d:
58:5a:b9:f8:04:ae:19:56:cd:bc:a4:c9:7a:15:a8:95:53:e9:
29:fd:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:51:26 2025 by rpki-client