Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: 5CRi+nNW3wbX1Y+vqQh6oMGFRoTiyW5lLtNmEvP5d+E=
Subject key identifier: 02:32:05:2E:04:5E:A2:D1:14:EB:67:4E:B4:06:A1:65:26:11:FB:29
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 0196AC8D2FCB6E64F37B983B0EFEE18DA8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 21:00:56 +0000
Manifest this update: Wed 07 May 2025 21:00:56 +0000
Manifest next update: Thu 08 May 2025 21:00:56 +0000
Files and hashes: 1: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: 6FsFKagCd1K/Ks0sGX1XWXv+FiMrF+gKYZXWSKPGpr0=)
2: TPZkecYVgQWkeVAGvO4nYBYabeU.roa (hash: feVX1nzAeUU2PUv28J5bnSiD1IXG8sT2Z4xCADvwWfo=)
3: iaj7CuNicQ0T6SQ8o74SQIY9VuQ.roa (hash: OoqdlG2QCLim3GZ0mF7OJKrB+NTJ6UDVTxUydioBYjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8d:2f:cb:6e:64:f3:7b:98:3b:0e:fe:e1:8d:a8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: May 7 21:00:56 2025 GMT
Not After : May 8 21:00:56 2025 GMT
Subject: CN=0232052e045ea2d114eb674eb406a1652611fb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:b1:f1:1e:8a:30:e1:52:23:e1:28:4a:a9:
6d:2d:9f:f9:a5:99:a4:af:73:06:40:b4:5b:49:70:
a7:4d:29:e2:b8:29:24:9a:2d:f2:d0:6c:f4:85:1c:
16:ae:18:7f:83:36:2e:77:c9:f8:11:2b:fd:8a:de:
5e:23:cc:fc:9a:36:b6:9c:b4:a8:36:fa:c9:fb:c6:
9f:9d:be:69:5d:21:68:21:9e:db:b1:56:02:e1:15:
e4:b8:8d:85:d4:96:94:59:7e:9f:fe:30:5b:4f:0c:
18:71:4d:9b:93:52:a4:b5:08:42:e1:3e:aa:bf:57:
a6:35:ca:e8:92:35:28:b5:10:ef:62:23:ae:a2:97:
be:27:b5:31:33:99:6c:21:25:21:1e:68:8c:e4:bc:
2e:a9:8b:01:0a:5c:48:2e:f0:c1:57:13:ad:0a:9b:
71:45:45:6d:e6:a8:04:c3:46:f6:8f:0b:5a:04:0b:
0e:f5:3a:3b:d5:aa:df:96:52:b3:e5:23:57:19:51:
f9:24:5b:82:69:83:c0:fc:26:96:57:98:31:67:15:
e1:10:36:b7:28:18:12:4c:90:d5:0e:53:ff:d0:9f:
87:2c:e4:33:87:f7:8a:b4:bf:cc:d5:71:5d:00:55:
80:63:e4:4b:28:43:9b:61:0f:9a:75:7a:6e:9e:a0:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:32:05:2E:04:5E:A2:D1:14:EB:67:4E:B4:06:A1:65:26:11:FB:29
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ca:ac:0d:b9:d5:b8:55:7a:07:fa:a1:e3:0a:0b:f3:b9:18:
93:d5:9c:f6:ea:61:18:c8:32:54:97:39:ef:e8:53:f2:71:3a:
ed:8b:f3:46:91:73:93:5f:fa:f6:29:79:56:ae:f3:8e:1a:bb:
5f:04:4e:3e:cc:53:32:56:13:1c:52:3a:57:b6:55:6b:ef:e7:
5a:c2:3e:b8:7b:b9:b5:6c:6f:92:5d:1a:0e:2d:cf:43:2f:0e:
15:4d:9a:f6:10:94:92:db:8b:4f:79:1a:7e:28:49:b6:bf:10:
66:d2:de:32:08:f9:80:ea:e4:2d:c6:8b:4e:90:18:42:b5:a8:
2b:ab:83:82:b5:a2:62:8d:ba:53:9a:01:f9:fd:42:27:10:df:
a8:54:80:6f:85:4e:19:27:d8:17:0e:56:8e:0c:bc:3e:11:d1:
0e:1a:60:3d:a0:de:e9:36:26:17:bb:b7:ff:dc:30:63:b3:f9:
a4:c0:c0:de:74:bf:c2:13:6a:58:a8:26:04:25:2f:34:1f:32:
24:e8:1e:f3:ab:0e:99:7e:bc:e0:30:ee:b2:2e:85:ab:8c:b4:
c5:aa:13:d2:22:ad:45:47:bb:af:b7:97:4f:8a:7c:fa:b3:ea:
3c:b4:4e:0a:1a:67:1a:2a:ee:15:91:29:18:9e:55:fc:f2:a5:
cf:92:6f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:10:27 2025 by rpki-client