Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
File: JLCG9IJCZjhOB4z3dzdfIb03C3A.mft (raw, json)
Hash identifier: u00nr4q+LbNKsee6X7qmYnuIcFMGDU9REalZlHtym14=
Subject key identifier: CE:86:F0:17:BC:C8:C3:81:A0:58:29:AF:5F:83:18:DE:93:E5:E4:D3
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Certificate issuer: /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial: 0196A3C0BACEBDF9A95C3B431C4E4DD7F8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
Manifest number: 14FD
Signing time: Tue 06 May 2025 04:00:38 +0000
Manifest this update: Tue 06 May 2025 04:00:38 +0000
Manifest next update: Wed 07 May 2025 04:00:38 +0000
Files and hashes: 1: JLCG9IJCZjhOB4z3dzdfIb03C3A.crl (hash: cYBdoi4UhcsqHRurmKQqWC4z90wuZ7/WWtWXMXE4uIE=)
2: vyg3yZoDE3lDITkNoY-QCGp_Waw.roa (hash: xu1/KMb58m5rKylUKx2EbNMwZx0eL+J1SwYTzOBoPlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c0:ba:ce:bd:f9:a9:5c:3b:43:1c:4e:4d:d7:f8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
Validity
Not Before: May 6 04:00:38 2025 GMT
Not After : May 7 04:00:38 2025 GMT
Subject: CN=ce86f017bcc8c381a05829af5f8318de93e5e4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:76:c7:1c:be:70:5f:38:5b:4c:c0:e6:79:
dc:71:d2:bd:69:d0:cb:bf:26:fb:80:f2:1e:cf:95:
69:46:9e:53:2c:28:d0:28:9c:32:19:fd:dc:45:4b:
b5:ec:d2:71:af:fe:ad:11:6b:82:98:33:7a:99:08:
f1:9b:bc:fd:b2:19:5b:fc:65:0e:3c:8c:25:c5:27:
97:76:15:80:b2:f8:d1:17:b5:ea:ef:6a:a0:1a:e3:
05:69:2f:f3:f7:5f:f1:cb:9b:42:d7:24:25:bb:c5:
23:92:2b:d6:06:4c:99:f4:ae:c6:95:56:2a:11:d3:
1a:d7:1d:32:09:6b:ab:c7:de:1a:d8:92:10:88:3d:
ec:24:77:95:7f:4d:81:1f:4a:9b:5e:2f:c1:70:b5:
77:d5:7a:79:30:43:be:3e:99:84:e9:f8:98:28:bc:
5a:18:4d:e4:56:7f:73:5a:1d:5e:d8:ed:23:99:c4:
08:f7:37:d4:76:98:c1:98:1f:d4:10:08:87:d0:52:
91:49:9b:aa:bc:81:f4:9a:7a:e8:b6:07:e8:f1:e5:
b2:7a:a2:bf:73:e8:70:dd:38:d1:4e:94:59:7c:1a:
67:6b:f9:7c:4b:db:78:5d:2d:78:f9:79:f3:cd:aa:
2f:41:e6:22:da:c7:35:ec:93:a5:67:3e:24:ae:68:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:86:F0:17:BC:C8:C3:81:A0:58:29:AF:5F:83:18:DE:93:E5:E4:D3
X509v3 Authority Key Identifier:
keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:74:d0:4e:55:e6:46:76:ac:df:dc:76:59:e7:b2:e9:a0:14:
8e:96:a5:9e:71:d2:c5:e8:0b:7c:67:96:c8:43:d6:bb:0b:2a:
0f:f7:27:6e:cf:e3:f1:d7:09:ce:d7:f7:67:6f:50:98:75:a5:
34:a4:0a:0b:1d:13:57:66:25:8a:d9:33:3c:82:bd:e9:35:c7:
1c:17:59:70:a3:4f:08:03:03:6a:f9:df:7a:78:33:29:45:6c:
d7:7f:65:41:f6:3b:f9:ab:9c:3e:b3:79:23:79:21:98:23:9e:
c8:ff:a6:1c:06:64:4d:cf:60:2a:8e:07:bf:64:6d:e7:6c:5b:
f3:8e:a5:0d:86:1c:c9:8d:12:db:3f:a7:f3:31:82:6c:c1:f5:
93:86:d9:62:7b:4d:cf:92:f5:42:03:48:f3:a7:17:2d:81:f9:
0e:55:ba:3b:06:9a:9c:68:74:cc:b6:a4:cf:e8:b5:09:00:79:
87:42:48:cf:89:e9:7c:b1:28:ba:1d:ad:1f:a7:82:90:ad:e2:
86:82:3a:7b:63:04:83:d5:4e:a3:39:19:d0:d6:fa:66:20:15:
60:20:b8:78:9b:20:9d:0b:32:fe:22:42:3b:ad:f2:db:50:96:
0f:32:93:04:18:5f:76:9d:c4:7f:cc:12:f2:c4:75:3a:9b:19:
c0:ca:ae:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:00:30 2025 by rpki-client