Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier: NLky+JRg0yC4Fb06FPlSs2ouqOPPj9rVp5v8vU+xTgM=
Subject key identifier: 50:0E:9F:6E:3C:C5:C7:8E:60:35:9C:D9:4D:28:B4:40:9A:AF:A1:55
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial: 0196B069C2299E3D568F173BC41DC705EACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number: 0606
Signing time: Thu 08 May 2025 15:00:42 +0000
Manifest this update: Thu 08 May 2025 15:00:42 +0000
Manifest next update: Fri 09 May 2025 15:00:42 +0000
Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: +AKKIRFSq3DH21F08sXmUYLlDVsyrLK4orsSpoF+qG8=)
2: P05t3kiYPDkZIteTxzHkdWLEeeU.roa (hash: BIrJT8z8EjrhQoOfb8QVBhdG6eDY7ydaRNIxS8nhYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:69:c2:29:9e:3d:56:8f:17:3b:c4:1d:c7:05:ea:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Validity
Not Before: May 8 15:00:42 2025 GMT
Not After : May 9 15:00:42 2025 GMT
Subject: CN=500e9f6e3cc5c78e60359cd94d28b4409aafa155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:9c:1d:99:05:88:35:65:c4:c6:45:e3:15:
49:54:a4:da:d5:eb:a8:73:ce:4f:39:66:97:c0:89:
a7:fb:ad:33:a9:01:bc:4f:df:dc:3a:30:bd:cf:ac:
cd:fe:76:16:03:97:14:1c:de:09:56:c7:7b:0c:18:
3b:2c:eb:2a:fd:a5:1a:08:61:0f:8c:86:7b:d9:28:
04:92:92:9b:1a:5c:4e:7d:07:84:b5:38:78:6c:d0:
d7:21:9c:21:e6:3c:73:aa:47:80:c3:b6:a4:d6:04:
63:f7:dd:6b:56:fc:22:85:e7:fd:39:34:ef:3e:17:
f9:b6:5c:55:fb:e2:32:be:bd:ce:92:98:8e:b4:6d:
df:19:0c:bc:14:17:79:82:ac:a4:99:1b:25:0e:ad:
31:5a:59:35:2f:55:08:b7:97:af:cc:00:9a:4e:90:
4b:d0:10:09:6e:a3:ad:a0:40:26:cf:ac:00:91:2a:
27:cb:e3:2c:12:00:a5:18:f2:d8:7c:c3:d5:03:be:
dd:21:ee:e8:3c:97:ae:60:9e:e4:da:4b:a1:d2:45:
b4:e4:3d:9c:fe:47:0a:54:ae:67:fe:2a:92:66:5b:
29:8e:c6:17:a9:91:b9:54:5c:1a:d0:cc:a8:65:bd:
51:44:69:5b:b1:9e:29:b7:f9:49:2b:52:59:b2:6b:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0E:9F:6E:3C:C5:C7:8E:60:35:9C:D9:4D:28:B4:40:9A:AF:A1:55
X509v3 Authority Key Identifier:
keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fc:79:f1:42:86:8e:55:ba:6b:03:03:6f:34:7d:47:8e:18:
80:7f:be:a8:09:4d:5c:98:59:3a:4f:c2:6c:57:50:38:1a:07:
bc:4b:2b:28:cb:59:8f:c5:3f:d1:11:25:f8:e3:99:1f:81:2f:
e6:29:9d:f9:f9:4c:f5:ad:ee:f5:f4:47:5e:6f:60:01:a8:a8:
3b:38:aa:60:17:9f:4a:df:3d:f8:5d:dd:d1:05:7e:97:ef:c7:
a0:d5:f6:1a:71:d7:62:7d:20:b3:37:4b:8d:ab:3b:57:14:54:
51:20:02:16:d2:e9:df:28:36:ad:29:a3:bc:ce:7d:01:81:ff:
3e:24:49:8e:61:28:92:e2:cd:89:d6:6f:31:e2:c3:59:a7:97:
b6:75:1c:ca:89:59:6e:a0:86:f7:0f:fc:79:f4:d2:ce:95:7e:
92:40:21:13:0c:97:a6:f5:35:a4:fb:e5:40:48:99:fb:3b:0b:
b3:9b:2c:bb:68:c6:a3:4a:51:e9:4e:0f:6e:6d:5a:7b:2b:86:
56:f1:48:33:10:b4:69:6a:12:59:66:21:f2:2a:3d:d2:d9:b8:
85:8e:6d:f4:98:36:4e:b9:76:39:5a:59:9a:80:cc:a6:92:4f:
43:06:c4:5d:c5:22:f3:7b:e4:f8:c8:77:3d:1a:82:7f:4f:75:
d2:64:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:57:59 2025 by rpki-client