Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier: o5wgSf4gpevRDqk1idy/frU5Ou+4FCFfhzuX2CJZ9ic=
Subject key identifier: DE:80:6D:46:39:95:60:61:45:3F:8D:FA:38:DE:A5:CA:B1:EB:D0:30
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 0196BAED5BF96A64626D32CEC25C8F060983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number: 0D18
Signing time: Sat 10 May 2025 16:00:39 +0000
Manifest this update: Sat 10 May 2025 16:00:39 +0000
Manifest next update: Sun 11 May 2025 16:00:39 +0000
Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: BJ2mo7VwqzdkZ75SQtaWiBDVfCsYbyPM7MSqLupuy/Y=)
2: NxEFYabQ1De2D9MRDvZOgIu0R4g.roa (hash: lAojMYDzIDb75W7SBnvnLzGQZua9BCv398UHDwqthXo=)
3: uBhMU8FaL6yzEgI8KXo0amRkPt0.roa (hash: rZaJZ+vs9poyZNeTB4YM94eOiwwWluQ2wWx8JrMOGHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:5b:f9:6a:64:62:6d:32:ce:c2:5c:8f:06:09:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: May 10 16:00:39 2025 GMT
Not After : May 11 16:00:39 2025 GMT
Subject: CN=de806d4639956061453f8dfa38dea5cab1ebd030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:18:e7:f2:c9:b3:e2:19:b0:e2:50:88:15:
79:d9:78:8d:06:41:30:f5:e6:0b:0d:36:cc:9d:31:
2e:18:17:dc:e6:35:73:1c:ea:0b:e1:95:4f:83:f7:
eb:ca:da:58:f2:53:ca:15:94:12:58:68:d0:48:2c:
6c:dd:9f:3c:e7:df:ee:f2:72:30:f3:97:f3:c0:5f:
00:d5:97:1b:0e:ba:f4:64:c2:1f:9f:f3:d0:49:0d:
23:6d:f5:5c:e5:df:ac:a2:74:e4:24:b9:25:cf:bc:
8b:16:3b:8f:65:e7:89:16:24:6b:60:ec:1e:61:f5:
fa:10:49:2b:b2:84:f1:5d:08:f1:a6:71:5a:69:c0:
8e:b8:76:db:3d:33:8b:a3:a5:6d:44:5d:7f:ba:13:
38:f2:13:59:91:86:d4:c0:3d:bd:94:6c:fc:a7:be:
e3:3f:56:c6:03:3e:b8:4d:72:30:3f:7e:a8:92:0f:
80:d8:dc:6a:ff:24:47:d6:6a:30:0a:81:d6:06:b2:
57:65:d6:b4:7c:9e:e0:26:15:e3:31:bd:b4:44:ed:
50:0b:43:33:cb:f1:f7:ff:26:91:4e:7c:b1:dd:e2:
f6:5d:1b:b2:95:26:e8:ad:0c:b0:2f:6b:9d:6d:8d:
4d:4f:0f:0e:69:73:47:3f:3e:b4:8f:15:00:7b:2e:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:80:6D:46:39:95:60:61:45:3F:8D:FA:38:DE:A5:CA:B1:EB:D0:30
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:75:77:0e:02:bd:3b:fe:29:fa:aa:53:5e:1a:29:c1:d2:78:
24:08:11:91:d4:a7:8c:ac:fd:3a:1c:72:d2:b0:d6:e4:47:f4:
e9:57:50:c9:d1:7c:f2:8e:56:b3:c6:66:e4:48:f8:bd:f9:e9:
4a:52:ef:b8:df:da:80:6d:a2:e7:e0:ec:02:8a:18:4f:19:18:
d8:14:d5:fe:d7:d6:73:b8:b4:4f:0c:b7:47:5a:39:dd:e8:6c:
15:c9:14:22:f8:90:58:df:bc:f8:f1:44:52:6c:11:82:93:a5:
40:14:ab:db:4f:0b:28:9e:9f:ea:7b:74:c8:4e:ef:bb:12:ee:
67:8b:88:1e:fb:2b:97:44:8c:41:3a:c4:e8:cb:28:e3:b2:35:
7f:03:02:a9:a4:87:d9:04:3b:0d:a0:cf:a3:c9:c2:11:13:db:
e3:71:54:67:5f:01:36:e3:2d:62:f5:c3:36:7c:d6:e6:b2:2e:
5c:05:70:1c:75:87:b8:5d:2b:1d:57:7e:d7:a9:eb:e4:c0:ec:
79:b9:f4:97:8c:40:34:a2:c2:be:03:44:d2:2e:3a:98:13:46:
ec:18:6b:f9:2a:c7:77:88:90:80:b6:9e:83:38:e2:79:c6:44:
e6:d9:05:df:9d:c1:7d:e3:ab:b6:ca:fe:60:51:14:a7:a1:da:
2d:1a:10:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:32:21 2025 by rpki-client