Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: ToYYNxuj/PhplFp1uombpmxre35ajxgCKhmZwUWxEhA=
Subject key identifier: EC:64:8C:7B:FD:C3:1C:C8:6A:81:28:C3:93:10:7A:45:D8:ED:0F:B7
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 0196C04AA25B8528922C73031324E5C67C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 1539
Signing time: Sun 11 May 2025 17:00:38 +0000
Manifest this update: Sun 11 May 2025 17:00:38 +0000
Manifest next update: Mon 12 May 2025 17:00:38 +0000
Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: SqGDAeqYseKRkKWoCJINAsdwPprt+FqqtfhhMNkILeo=)
4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:a2:5b:85:28:92:2c:73:03:13:24:e5:c6:7c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: May 11 17:00:38 2025 GMT
Not After : May 12 17:00:38 2025 GMT
Subject: CN=ec648c7bfdc31cc86a8128c393107a45d8ed0fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:22:92:f2:36:4d:1e:16:75:0d:27:85:a6:
7c:ab:7a:15:d9:8c:03:cd:2c:3a:81:c5:ad:98:a7:
2e:ca:90:07:e1:d2:16:54:8c:11:4e:6e:11:6e:8e:
e6:0a:ee:16:27:f3:a1:44:2c:66:21:f9:3a:a4:d7:
12:98:b6:36:32:f6:b8:d1:9b:d2:7d:8f:b5:1e:a9:
b2:73:d4:1a:a9:2b:dd:2c:8a:3b:0e:fc:e2:06:34:
5a:9a:28:57:ab:31:26:e0:41:4b:39:b8:d0:80:d5:
8f:6e:fd:ca:18:4d:44:33:7f:68:de:ea:8f:40:8e:
6a:b4:2a:27:fe:28:92:66:d8:38:10:9d:52:7e:e6:
1d:2d:2a:d4:32:3d:92:c5:32:51:f1:b4:6b:f0:f8:
da:ba:92:cb:0d:31:fd:e6:89:b3:ae:cd:25:4c:9e:
09:c6:df:ca:b0:34:fd:8b:a0:b6:80:13:cf:4d:4c:
4a:9d:41:37:dc:3a:34:f3:4e:c2:b0:e1:d1:e2:ac:
9d:31:b3:e5:8b:73:a4:4c:5a:d9:70:bf:6f:d1:33:
8b:d8:a3:b2:17:c6:ed:56:79:ca:5f:90:d7:cf:36:
30:64:65:84:4f:f3:86:dc:e7:a9:88:40:31:de:85:
71:9b:74:b6:48:19:0d:45:b3:10:41:10:17:cc:ba:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:64:8C:7B:FD:C3:1C:C8:6A:81:28:C3:93:10:7A:45:D8:ED:0F:B7
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:55:8c:ee:b4:37:26:58:83:ff:5d:d7:9e:aa:bb:77:d2:ee:
73:d0:72:aa:c7:b1:27:ce:72:3b:4c:10:83:0c:ab:4f:8f:57:
22:08:68:9e:58:2d:c2:50:5b:41:31:17:aa:ef:29:c9:ae:65:
9a:80:05:4e:52:ed:9d:0a:38:b3:d3:c7:b2:dc:e7:7d:d7:e8:
b3:4c:42:a1:a6:16:56:69:13:30:7e:64:21:46:2e:2e:a4:ab:
70:01:b2:92:ca:dd:f5:41:f2:ff:eb:be:ee:26:1f:1d:65:ec:
b5:19:5b:28:0c:21:1f:92:bd:46:03:9c:bf:a2:31:7b:32:9b:
8e:97:b0:bd:bb:43:86:fd:68:2d:7d:43:54:3b:8e:e6:16:55:
26:79:db:aa:60:6e:07:5d:74:17:5e:b9:dd:e5:56:46:28:84:
1a:10:cc:bf:1e:25:f7:6d:9f:69:44:e3:36:15:0e:58:e9:d6:
e0:06:42:e0:c2:92:c3:d3:85:d6:aa:8c:68:5c:55:48:a0:02:
fd:0b:71:f1:8e:61:9f:02:b9:a2:a5:7f:82:a1:25:aa:30:35:
29:e8:21:58:73:d8:e0:91:a1:ed:f0:88:41:f9:1d:7e:b6:97:
d3:04:ba:49:b1:4e:05:fd:27:ae:ac:2a:ff:7a:e3:47:3d:c4:
b1:53:46:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:03:46 2025 by rpki-client