Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
File: J24TUlJErw0uZAq6KbD4I2vGHiA.mft (raw, json)
Hash identifier: 5/sPc2Pbiv76wdrwnohX8f9O718aZ4fpAM1Ob5PbVBE=
Subject key identifier: CE:89:F3:1E:8B:10:E3:E2:61:BC:F2:E8:D7:DB:EA:86:A6:FD:61:CD
Authority key identifier: 27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
Certificate issuer: /CN=276e13525244af0d2e640aba29b0f8236bc61e20
Certificate serial: 0196BDB71D8F126566E6D9FE65C80EAA72E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
Manifest number: 01C5
Signing time: Sun 11 May 2025 05:00:16 +0000
Manifest this update: Sun 11 May 2025 05:00:16 +0000
Manifest next update: Mon 12 May 2025 05:00:16 +0000
Files and hashes: 1: 8EWOooLiQ6us4fENFVrBmODvGtQ.roa (hash: FtJlQkbOynrL0gMJhRO31RjYSiNA8vkfsMUi3PW0gdU=)
2: J24TUlJErw0uZAq6KbD4I2vGHiA.crl (hash: 3mCOpDf2fiTTE96+28uINYbpfwYIGGzfekjBbbSscuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:1d:8f:12:65:66:e6:d9:fe:65:c8:0e:aa:72:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276e13525244af0d2e640aba29b0f8236bc61e20
Validity
Not Before: May 11 05:00:16 2025 GMT
Not After : May 12 05:00:16 2025 GMT
Subject: CN=ce89f31e8b10e3e261bcf2e8d7dbea86a6fd61cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:7b:0e:25:4b:6b:c8:01:1d:30:c4:25:58:
21:af:95:28:ca:ae:9b:41:b9:01:90:65:15:60:73:
99:12:5a:cd:da:06:b5:de:d0:c8:eb:32:b5:8c:76:
92:be:8d:2d:be:7c:07:c1:a2:b0:0e:66:2d:35:73:
74:e2:e7:26:d7:ff:3a:cf:1b:f2:8f:4b:1a:fe:00:
f3:33:85:79:a3:f8:c3:3f:f7:60:cf:d1:a3:c5:0c:
15:97:cc:6f:3a:90:25:1c:43:94:86:e1:c3:93:fa:
1c:0b:d1:18:db:66:5c:0c:c0:57:24:25:03:a3:54:
0b:ea:4d:d5:69:1c:7b:4b:07:d1:8b:2c:15:a0:0e:
db:48:63:13:15:80:53:2d:b4:1b:19:07:52:97:93:
20:fb:55:2f:ad:13:f7:ec:57:49:d5:8e:d2:46:65:
77:44:ff:f4:9c:aa:d0:68:7e:c1:66:0a:0c:e0:ec:
1a:ce:29:a7:1f:fc:c7:17:64:29:91:b7:c6:17:e9:
f8:4a:9e:59:be:fa:3e:4d:c9:77:b9:f1:fe:b2:7b:
f4:97:6e:4c:62:af:00:b9:43:9c:42:74:b7:f3:21:
c9:d8:ef:c7:95:17:b2:27:2e:8b:8d:05:49:3b:07:
7b:80:2e:8b:45:5f:99:e5:7a:e3:f9:44:28:b9:89:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:89:F3:1E:8B:10:E3:E2:61:BC:F2:E8:D7:DB:EA:86:A6:FD:61:CD
X509v3 Authority Key Identifier:
keyid:27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:86:5e:b2:5d:ce:8a:c4:95:97:26:e9:50:62:2e:4f:88:70:
6e:00:ec:1f:ab:2b:ad:26:20:72:8f:65:0c:5a:81:ae:f6:b9:
a0:c4:2c:55:19:91:48:f3:33:b4:27:37:d6:05:b0:51:e7:d4:
e6:e0:cd:2d:f7:92:8a:71:a5:d2:1e:fe:f6:d7:59:fa:f5:03:
49:09:b9:3e:ae:cb:38:5f:6d:b6:0e:a1:b4:91:80:0e:9c:5d:
c4:a9:a5:66:ed:fa:06:db:be:69:5b:c7:6d:7b:08:9b:01:3a:
68:dc:f7:1f:ff:ea:1c:eb:5c:de:67:e1:2b:a6:00:68:2b:21:
57:27:c9:5e:bd:9e:6f:33:fa:77:bf:1d:a3:87:50:37:4f:6b:
28:b9:a8:c2:86:70:3b:1d:2d:4d:32:c9:73:c4:aa:2f:7d:49:
a0:14:d6:1e:f7:21:bf:b5:b8:0f:41:7f:bf:e8:0e:1e:6a:e8:
27:01:6f:af:1d:fe:ec:c0:8e:fb:83:91:51:34:b6:d5:01:64:
3e:2d:0d:ea:b1:70:4e:78:c1:b5:cc:ce:d6:38:47:2f:3f:c6:
22:52:9f:09:60:a9:3f:ab:d7:e7:ed:4d:e9:ad:4e:33:36:23:
37:fd:cc:dd:29:71:cf:4e:83:c0:30:ea:fa:aa:ac:7b:40:cc:
e5:64:32:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:31:14 2025 by rpki-client