Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
File: JJkvMtdIbftKMsLngQhUrGpmjjQ.mft (raw, json)
Hash identifier: sHzmBRfEV0eQ9OCjOPmVTVgd8UDV5j7rQNjpjgG58Kg=
Subject key identifier: 3E:19:00:5F:E2:21:2D:73:C4:62:D1:70:23:59:EB:0D:34:63:F9:A7
Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
Certificate issuer: /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Certificate serial: 0196CE3CD287535170314686A2D5F89C66C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
Manifest number: 0832
Signing time: Wed 14 May 2025 10:00:14 +0000
Manifest this update: Wed 14 May 2025 10:00:14 +0000
Manifest next update: Thu 15 May 2025 10:00:14 +0000
Files and hashes: 1: JJkvMtdIbftKMsLngQhUrGpmjjQ.crl (hash: DzefUaA+CqfN9RF4GRYO3JpW8xdPoin0YUjTEL4vdV4=)
2: SvgtOmag1Ed_NFITsp_g8SM3OYs.roa (hash: CvglQLYhu3pHLDYJxUoGcvgzwDqOLBBqoRW5UuJHkAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:3c:d2:87:53:51:70:31:46:86:a2:d5:f8:9c:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Validity
Not Before: May 14 10:00:14 2025 GMT
Not After : May 15 10:00:14 2025 GMT
Subject: CN=3e19005fe2212d73c462d1702359eb0d3463f9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:ef:0b:95:18:42:fe:6b:a7:fe:d8:51:eb:
e1:c4:00:24:4d:8f:88:14:2e:34:5b:d3:33:0d:c3:
5a:89:bf:bb:c6:7c:92:0a:0b:b6:8a:e7:c3:48:72:
97:59:51:e3:a2:9d:9e:48:88:f9:8e:ba:c0:23:81:
48:46:da:d2:d4:2a:c4:64:93:6b:a3:15:56:b5:63:
39:f4:6c:29:00:33:ff:94:7d:47:cf:71:f6:8b:7e:
ee:35:fe:d9:57:f0:75:7a:24:3b:d9:f3:35:f8:9b:
a0:42:35:12:0b:50:94:db:82:6a:bb:0e:af:d2:c3:
e6:03:48:a5:c8:d7:a5:39:5e:43:df:7d:cf:40:21:
3e:7f:b3:ca:d8:ea:ba:28:f0:5f:b1:cc:5a:62:35:
a8:19:64:8a:86:69:3f:4d:23:26:ff:87:a1:0d:f3:
6e:cb:9a:98:fd:92:a8:29:26:46:e3:90:9c:70:7a:
3a:fb:71:5c:b7:8a:a3:81:60:e3:25:05:4d:0f:84:
d6:26:61:f0:c7:2d:ac:1f:7f:45:5e:39:80:15:24:
f2:49:2b:e9:d4:6d:dc:1e:11:45:6d:58:8b:42:5f:
cf:b8:69:71:a2:36:f0:71:dc:cc:db:14:eb:80:17:
b8:35:e1:1f:e9:03:27:63:d9:c7:b1:68:f8:d3:0c:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:19:00:5F:E2:21:2D:73:C4:62:D1:70:23:59:EB:0D:34:63:F9:A7
X509v3 Authority Key Identifier:
keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:da:b5:d7:c2:5b:c9:77:16:6f:15:e0:96:53:1c:80:76:37:
b1:79:b4:9b:d1:6d:f5:56:16:f7:f6:a4:45:62:59:60:9a:e1:
ae:ec:ac:a4:37:04:db:03:a5:b0:ac:14:4a:1c:b0:f9:ee:73:
29:ef:4e:ab:0b:d8:9e:0e:7a:e0:09:20:5c:c4:d6:11:99:b5:
d6:93:0e:50:98:41:eb:53:49:7f:26:63:86:e4:af:d3:e8:48:
26:10:35:ac:25:39:35:b3:2a:6b:0e:e0:c7:0f:f6:64:d5:d3:
64:da:d3:36:1c:28:3d:ed:12:54:82:f7:cd:4d:b6:7f:ca:66:
93:56:59:47:d8:4e:f3:a8:3c:4c:44:b1:fa:25:dc:c6:eb:64:
10:1a:12:0d:07:09:96:33:a7:b1:11:9a:65:b9:b3:d7:d7:ef:
68:df:17:c3:9d:9e:de:f3:d4:a5:4a:82:e9:8c:d8:61:2c:e1:
52:70:0d:93:90:08:90:a0:45:d7:7e:4c:d6:57:5f:4a:a0:95:
07:d9:61:42:02:f2:6d:6d:96:ea:16:c8:d3:da:86:d5:1a:38:
36:dd:8f:80:3c:f2:2b:94:36:f8:44:59:e7:7d:17:34:ac:42:
31:db:97:2d:04:09:00:b6:7c:1a:18:fe:3f:cf:dc:66:00:88:
76:6f:2f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:23:55 2025 by rpki-client