Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
File: JK_wO1q_sXhyXKbpD149mMumjr8.mft (raw, json)
Hash identifier: CN2oM/8HQg2cV/8CPgVR1FCna/xOADVJXVWUTtGLleA=
Subject key identifier: A7:CA:60:42:69:D8:E5:0E:87:CA:25:9D:CF:C7:43:CA:FA:8E:19:E7
Authority key identifier: 24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
Certificate issuer: /CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
Certificate serial: 0196CA291EF306D8B5B8AB1452D912668401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
Manifest number: 063D
Signing time: Tue 13 May 2025 15:00:14 +0000
Manifest this update: Tue 13 May 2025 15:00:14 +0000
Manifest next update: Wed 14 May 2025 15:00:14 +0000
Files and hashes: 1: JK_wO1q_sXhyXKbpD149mMumjr8.crl (hash: wTA7cl4ucEsGctTWovAf+tQN1Poiog2cMY7dw6t/lio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:1e:f3:06:d8:b5:b8:ab:14:52:d9:12:66:84:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
Validity
Not Before: May 13 15:00:14 2025 GMT
Not After : May 14 15:00:14 2025 GMT
Subject: CN=a7ca604269d8e50e87ca259dcfc743cafa8e19e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:c9:bf:a5:8b:f2:1e:57:8e:be:3b:7d:2b:
e2:b2:02:6f:ce:f9:1d:a7:ae:35:2f:5a:63:54:81:
86:bf:49:29:3c:5d:49:df:81:10:65:7f:c8:2f:15:
4d:87:94:ac:0b:fd:1e:98:ba:20:06:d8:ad:f9:24:
ff:7c:71:29:38:2b:38:87:22:ff:c1:7c:f7:83:01:
2d:0a:2d:9e:10:b9:85:7a:2f:35:77:7a:dd:d4:a3:
3c:aa:42:08:ce:58:e6:0c:04:7c:f8:1f:9d:82:78:
be:52:ba:38:1f:3f:df:5d:f9:aa:c9:7d:0c:03:da:
d4:db:6b:5e:7a:43:b5:7c:44:e7:27:d2:db:a2:59:
5a:87:29:94:57:6f:87:05:92:73:56:92:40:40:4d:
06:fd:3c:63:7c:87:ac:00:15:50:73:60:e4:de:92:
7c:37:33:c7:cb:12:0a:43:17:e9:01:0e:4f:3a:0a:
1f:56:7d:3a:37:f6:cc:4e:98:b8:99:2a:4b:5c:6c:
17:0b:4f:1c:63:9b:57:84:83:7e:9a:fa:44:2e:12:
7c:f7:85:0d:0a:ed:cd:c1:67:fc:75:b5:55:5c:4f:
17:45:a9:4b:01:82:17:c7:6b:d1:80:5b:59:46:e0:
ef:22:06:d5:59:83:9f:92:13:b5:c4:44:a6:a0:81:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CA:60:42:69:D8:E5:0E:87:CA:25:9D:CF:C7:43:CA:FA:8E:19:E7
X509v3 Authority Key Identifier:
keyid:24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:82:ba:7b:e1:94:45:c8:f4:65:49:68:90:3e:75:b5:bc:d2:
29:9b:f9:86:9a:3f:b5:ae:bb:2e:52:33:04:5d:d9:1d:a1:58:
57:de:29:d3:ea:c3:3a:2a:06:9f:cf:6c:ad:fb:81:46:b7:7f:
1b:f1:3e:67:38:61:d9:eb:9b:72:42:4e:a1:e6:00:e1:c8:5c:
e2:79:07:5d:2f:e2:8c:62:5a:06:14:9f:93:2b:1a:66:34:c9:
aa:57:9b:5b:b7:0a:85:f3:55:c7:54:d9:7b:11:fb:14:e4:18:
e6:ac:a1:43:b8:87:97:f6:7b:98:5d:31:8b:50:43:9f:6c:7c:
09:0d:e2:c3:99:67:be:17:35:96:2c:35:dc:eb:e4:d9:43:bb:
60:9a:23:32:90:35:09:42:85:a2:c4:bf:95:ce:c5:ab:7b:3b:
20:e3:be:94:a5:89:86:9e:90:1f:ff:1e:97:90:77:ea:2a:a6:
61:36:82:ec:d9:af:90:6f:a2:1e:f1:5d:57:20:11:19:48:0e:
b8:a9:5d:99:b1:ed:b8:55:f9:ce:de:fd:78:f4:47:83:71:c1:
55:af:cf:2a:6c:54:db:2d:05:58:c4:06:a6:42:bc:1a:5b:24:
03:3c:8e:04:42:d2:8c:91:85:23:52:9a:8f:33:0c:0f:19:19:
07:3e:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:44:57 2025 by rpki-client