Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: C/bvDrxX7cJnUKjMUXOstj6U+cs1nMV2hv+9NNbIwno=
Subject key identifier: F2:D3:17:C1:EB:A5:4D:07:45:95:37:59:B0:D9:D0:7D:8D:58:22:CD
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 0196CACDDB30E1BCF5D26EBCC836A8D522D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 18:00:10 +0000
Manifest this update: Tue 13 May 2025 18:00:10 +0000
Manifest next update: Wed 14 May 2025 18:00:10 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: R/Kgz64Pr/Xm7iaTzBJddShCICe/wmkGTQkW4xXk0jc=)
2: __QM0Y00A8o9_wWPyDLaVQsYZls.roa (hash: Tt5jgaPYYhPlmRSiaLMYS5DQDbnj5Cw5Zwmf+6k+kyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:cd:db:30:e1:bc:f5:d2:6e:bc:c8:36:a8:d5:22:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: May 13 18:00:10 2025 GMT
Not After : May 14 18:00:10 2025 GMT
Subject: CN=f2d317c1eba54d0745953759b0d9d07d8d5822cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:ed:e7:e4:95:b1:95:eb:ea:da:ef:fb:5d:
1c:ec:82:45:0d:cd:2b:90:91:82:27:4f:68:41:55:
cc:00:c2:7c:24:29:8f:6b:03:31:aa:0a:c2:a2:bd:
57:fb:05:09:57:89:65:25:ba:02:a6:e1:49:14:68:
52:43:df:34:f4:a9:ef:1e:ac:5d:3f:3e:96:1d:d7:
d4:a9:0b:2a:ee:a5:9f:f5:b9:6b:a0:ae:f7:0e:c3:
94:2d:3e:8e:0b:9d:c0:3f:92:90:94:a1:0f:6e:44:
c0:4e:de:61:97:cf:a8:b7:b3:87:8d:a2:8c:18:9f:
cf:ff:f8:66:35:6d:b2:8d:e8:0e:f9:29:45:f5:9a:
cc:3c:40:c6:6e:58:33:94:62:9c:f3:dd:60:84:33:
80:9d:ec:a9:7d:92:8f:ba:a3:c6:92:78:ab:b0:66:
0c:23:e3:74:f4:a6:77:89:69:27:d4:5a:32:92:03:
ac:6e:3f:8c:e8:73:e4:53:ab:e8:b0:17:eb:d1:bd:
f5:33:88:ab:cd:ed:dc:f6:2d:16:ca:d8:b1:e6:ee:
69:02:26:60:13:8c:f4:7e:7b:e2:2f:9b:e2:cd:6c:
7f:58:58:4a:3f:03:c7:12:1a:62:42:c8:a3:3e:8f:
bf:3c:bc:41:aa:69:22:3b:1b:df:f5:73:0a:98:f5:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D3:17:C1:EB:A5:4D:07:45:95:37:59:B0:D9:D0:7D:8D:58:22:CD
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6f:0f:aa:84:54:4a:df:6d:fb:b7:30:7b:88:a6:35:99:31:
72:48:30:05:67:ee:ab:89:78:45:d8:81:3d:b7:86:77:09:24:
cd:e1:57:3a:95:a0:3a:39:47:56:c4:66:36:64:44:3d:f7:19:
e6:03:9f:3b:ac:b4:0e:b2:26:49:3a:83:10:f6:67:75:2d:07:
f4:86:6c:f2:f9:a8:88:2e:62:ef:98:9c:e0:bf:a3:ae:b5:4f:
ab:78:78:5c:01:3c:c4:09:61:20:b2:1f:30:ff:f7:19:19:dd:
9b:97:1c:a9:c1:d1:b7:da:c2:da:84:ab:f5:77:d7:cc:89:98:
c4:f2:5e:a2:c2:86:54:27:3e:f7:52:57:7d:8b:00:a5:f9:43:
8d:86:aa:87:5d:3e:63:30:8f:b3:6b:6b:60:3e:ba:00:b9:f5:
e3:c9:c3:08:7e:a7:be:2b:af:02:c9:10:8c:a1:36:a2:64:a2:
60:09:a9:28:b0:66:fc:9e:14:80:b0:d1:08:7b:ee:bd:2d:1e:
70:d5:20:6b:97:66:3b:2b:2e:3f:25:27:c1:3e:a6:a2:2f:3f:
1e:cc:c3:80:f8:83:18:c9:74:4b:e1:99:d2:49:40:2b:41:9c:
e1:39:ce:f9:5f:2f:5c:c8:11:56:f2:24:ec:27:9e:e7:22:53:
14:5c:83:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:41:18 2025 by rpki-client