Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: peDmmNun4PTbFXnVzUy1AfqKDeqiEqey7hWmORzdWKQ=
Subject key identifier: C3:35:F5:48:09:5B:19:AB:31:E3:88:E2:8A:D4:E7:D8:2C:D2:DE:72
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 0196BE5C4737A563E0C98FB9A5D5459F8E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 10EF
Signing time: Sun 11 May 2025 08:00:40 +0000
Manifest this update: Sun 11 May 2025 08:00:40 +0000
Manifest next update: Mon 12 May 2025 08:00:40 +0000
Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=)
2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: CH6I//ioxiqR8B2zRbi+wciIS6MQet0d4/YMZduL5WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:47:37:a5:63:e0:c9:8f:b9:a5:d5:45:9f:8e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: May 11 08:00:40 2025 GMT
Not After : May 12 08:00:40 2025 GMT
Subject: CN=c335f548095b19ab31e388e28ad4e7d82cd2de72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e7:8d:3d:c9:12:1a:42:ee:32:88:31:d4:8e:
a6:cd:52:5c:69:88:f2:29:93:99:66:15:f8:a4:ad:
8b:8c:4c:a3:35:be:fe:7c:34:8a:cd:f8:29:2c:42:
11:c5:24:b5:7d:16:bc:71:80:ea:50:c3:af:94:08:
06:c2:c2:b7:71:21:63:24:d0:c5:ea:3f:c5:5d:5b:
3e:79:22:59:7d:ed:21:b6:58:a5:4f:cb:36:e6:4b:
73:c4:ef:48:2a:8e:89:ce:df:df:7a:07:2d:67:20:
50:c2:46:0b:b5:71:52:23:30:1c:5f:2a:4a:71:bc:
76:45:8d:49:5b:82:c8:9f:21:74:3c:9a:b7:a3:fb:
13:14:44:ca:00:e3:b2:4e:00:a3:cb:31:d3:fd:b6:
e5:59:b1:ef:33:86:78:4e:8f:40:93:41:53:7e:51:
7c:ce:ef:3e:f1:e4:63:d0:d6:19:d1:13:7e:66:76:
48:13:92:bf:f9:c8:e9:56:53:1d:7e:ac:5b:2e:9c:
0f:4a:be:f9:16:3c:90:7a:f6:cf:58:d6:88:f8:14:
95:23:45:fc:7a:25:ac:2a:1d:61:72:6b:26:8e:cf:
db:ad:21:ca:4e:94:f9:5e:a4:f3:c0:43:c1:29:fa:
85:8f:61:b1:15:d4:a3:ce:b6:1a:77:98:e9:6b:7f:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:35:F5:48:09:5B:19:AB:31:E3:88:E2:8A:D4:E7:D8:2C:D2:DE:72
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ee:3e:c1:0b:87:d0:fd:0e:4f:d7:4f:b0:15:0b:2a:2a:42:
bc:4f:4d:81:31:4d:07:c8:ed:7c:63:b8:17:c9:be:9a:16:cc:
44:22:6b:46:6d:67:21:67:18:89:b8:d9:c6:a2:ad:87:4c:8e:
a2:3c:7b:d0:5b:fe:b1:20:4a:61:a6:79:ec:7a:cf:e5:8c:f6:
25:a7:fb:ab:76:70:58:86:34:5e:2a:f6:ca:0f:5e:72:28:2b:
3b:31:de:30:4b:f6:92:a0:c5:21:ff:19:8d:33:4c:f2:e6:ad:
61:f8:1c:30:e4:97:fa:bf:ee:79:9a:a1:ba:2f:75:28:e3:70:
31:85:3b:68:6c:54:a6:55:f6:f4:f2:e1:5a:d9:80:a1:76:86:
85:63:7c:9c:5c:54:b6:7f:4a:8e:ec:92:d9:68:12:3e:ab:d5:
0a:fa:c2:cc:b6:80:82:0c:e3:70:4a:d9:85:80:5a:db:4c:6c:
a5:5f:4d:33:4d:5d:6c:7c:66:83:39:3e:a5:fb:ad:6d:20:eb:
55:ef:bf:a1:01:3a:48:99:c4:90:79:dc:ad:9d:6b:02:ec:73:
c8:32:14:67:95:36:0f:31:d7:67:33:fe:c5:f7:b8:33:f5:d1:
41:c0:03:62:20:42:cb:e8:6c:d6:b5:74:8d:1f:ef:dc:93:06:
d0:cc:13:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:43:52 2025 by rpki-client