Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File: JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier: evTr7sEm8oBXya5xpNotTjYLpt3cjomFCooNOsYszkc=
Subject key identifier: 04:0C:62:28:9E:06:E2:DA:CA:BB:D0:9E:ED:A3:3F:51:23:0E:71:28
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 0196CB732157903017EDCC4CDE2A0E082911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number: 0615
Signing time: Tue 13 May 2025 21:00:42 +0000
Manifest this update: Tue 13 May 2025 21:00:42 +0000
Manifest next update: Wed 14 May 2025 21:00:42 +0000
Files and hashes: 1: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: z7aYrPnSqhCU5WJb4Wv2q9AkkixW2knQ7KbCSljOcZA=)
2: fLXiRPdHI-7ZXM738GnPEvoiyOc.roa (hash: mxOqTfa0/eUKhzvYGP8+UstSP5NK5/GLU01oehfJvC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:21:57:90:30:17:ed:cc:4c:de:2a:0e:08:29:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: May 13 21:00:42 2025 GMT
Not After : May 14 21:00:42 2025 GMT
Subject: CN=040c62289e06e2dacabbd09eeda33f51230e7128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:ad:9f:fb:1e:a3:ef:ac:90:5a:f6:21:0b:
85:61:44:23:ba:d7:57:bd:28:e3:1c:2c:62:01:4f:
d6:b7:9e:89:cb:cd:d0:a5:9b:b3:a2:f4:f5:b8:de:
1d:47:e6:09:7c:6f:96:ab:72:29:83:b7:2e:40:a8:
a1:aa:00:f1:aa:3f:5f:b6:5f:0a:45:93:f8:d5:4f:
c5:07:71:16:1a:cb:3f:38:69:b2:14:d6:b1:2e:c8:
76:1e:4e:52:73:de:de:14:40:68:da:98:51:ef:99:
b0:df:ef:87:61:6d:e6:31:fd:dd:47:0c:8a:60:4b:
ca:6d:6a:8b:c5:68:a4:82:ef:ed:64:02:78:63:43:
33:b3:be:5f:11:ac:df:b3:0b:93:88:6b:51:6e:8c:
b5:05:a3:c9:41:b4:39:af:50:36:88:38:6e:6a:bd:
5f:b5:2c:ae:1c:d7:91:ec:21:e4:a4:2f:26:e7:36:
13:b5:62:e9:3d:c3:72:98:27:ac:32:21:6a:d0:d4:
c2:1b:7e:73:93:e0:ee:b8:d5:97:72:bc:f9:e9:33:
86:7e:80:38:b2:ec:cd:f8:12:8a:ff:44:cb:49:49:
62:b4:b5:39:9f:25:00:59:fc:bd:80:c4:d2:fd:85:
1c:62:f0:09:7b:46:16:8c:48:42:7e:12:b4:5e:2a:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0C:62:28:9E:06:E2:DA:CA:BB:D0:9E:ED:A3:3F:51:23:0E:71:28
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ff:91:59:90:39:e6:e5:6e:28:6b:15:7f:83:fa:e9:fa:89:
77:3a:95:59:b1:ac:0a:11:83:89:b7:81:36:14:11:e2:5c:33:
9e:82:5f:d5:eb:e1:5f:8c:a3:f6:de:27:ce:00:02:7d:02:f1:
45:93:df:0b:d8:42:cb:cc:af:68:77:81:92:88:85:d4:66:1b:
07:d3:69:47:13:79:57:cb:ce:7c:a6:cf:1c:7c:1b:a4:0d:1f:
24:62:da:8c:b8:b5:b2:cf:43:93:1a:79:bd:5d:cb:4b:eb:9c:
b1:d7:b5:44:00:aa:54:dc:5c:45:c0:e6:35:f2:fd:67:81:dd:
1c:05:f9:4c:5f:8f:08:94:76:a3:67:8e:57:52:1e:54:39:27:
0c:03:cc:be:3f:d1:b8:36:77:fc:6b:18:fd:cc:12:c2:b1:78:
7b:f8:4a:80:ae:8c:b5:9a:37:b3:2c:a9:9f:6d:ed:c7:8f:98:
89:d4:63:8f:31:da:08:e5:f7:70:e1:68:ed:c2:d8:22:a8:e6:
6f:8d:bd:c5:c6:b5:38:16:8d:37:b2:dc:8c:a7:ca:b1:d8:c6:
30:02:25:e3:11:fe:dc:c2:89:47:ff:61:93:e9:68:3e:f8:21:
2f:d5:1e:67:f1:f3:c0:b8:9b:a6:27:47:d6:22:22:6d:67:ed:
ee:8e:66:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:08:55 2025 by rpki-client