Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: 6+e0Owv0aUKaSo4rL/gxDpCRjcJnANutbVRQGBvUsa4=
Subject key identifier: 40:98:66:FD:8B:0A:42:57:1D:B0:3F:DE:62:DA:5D:B5:EC:37:A7:B3
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 0196BE25988AC2DDA20F15EFCEDFDF2FCB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 14C5
Signing time: Sun 11 May 2025 07:00:57 +0000
Manifest this update: Sun 11 May 2025 07:00:57 +0000
Manifest next update: Mon 12 May 2025 07:00:57 +0000
Files and hashes: 1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: EwN3/5ymTGGpVbgwTfTRaRitgwLNTPMogUWUI8D9KoM=)
2: LkSjEtNw7y8FvIXezhAzO7bql6w.roa (hash: XWnh2LDRuVnV3zQSeTuxulNsHgB6C0TJ9AfUsOOpruk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:98:8a:c2:dd:a2:0f:15:ef:ce:df:df:2f:cb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: May 11 07:00:57 2025 GMT
Not After : May 12 07:00:57 2025 GMT
Subject: CN=409866fd8b0a42571db03fde62da5db5ec37a7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:8b:23:63:d6:8a:59:32:b8:6b:50:a7:63:
9f:d0:43:ca:4e:79:2b:10:53:09:7c:15:c4:50:6d:
af:9e:dd:0a:c7:13:cd:5d:36:63:06:41:cd:18:d7:
87:b9:df:7e:13:38:23:45:a9:19:36:dc:17:16:b7:
04:e8:20:c5:06:37:71:7c:8c:64:a0:c8:c4:ca:3e:
98:26:28:e9:33:49:7f:d0:26:e5:33:cf:ed:dd:0d:
0d:b3:56:b5:b4:86:54:67:a7:50:cf:8a:00:bd:80:
b7:f1:b7:14:cf:dc:a7:c6:6f:ca:31:c6:df:af:a6:
e1:e4:86:c3:d0:f5:a4:e7:66:7a:a4:15:ec:d6:5f:
a9:4d:d3:b2:91:09:be:0a:82:74:89:36:de:4e:0c:
72:b4:4e:91:76:91:29:ce:77:ed:ab:e2:8b:91:b0:
49:9e:ab:7a:13:23:c3:22:d7:d9:5d:21:a9:3c:94:
ac:12:30:9c:b7:01:2d:9f:ea:1a:24:51:e6:a2:3c:
a0:c1:20:81:76:1b:03:10:b5:59:b9:47:38:bf:1d:
2f:bc:1a:e4:20:6e:68:64:d4:c2:cb:5c:cf:46:83:
47:e4:1b:46:c2:d7:e2:2e:3e:de:a2:a0:eb:2f:d8:
86:ee:41:31:b9:4e:1f:54:5d:f1:28:d6:8d:b6:45:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:98:66:FD:8B:0A:42:57:1D:B0:3F:DE:62:DA:5D:B5:EC:37:A7:B3
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:11:27:c0:22:e5:53:f1:22:f7:0f:7a:e4:c0:6d:8d:fd:ae:
28:b9:95:d4:df:39:18:2b:c3:e5:5a:28:7b:05:76:67:df:4e:
00:82:ea:2b:64:b6:84:d4:04:65:59:18:ab:fa:c7:6e:04:6f:
e1:90:bd:6e:3f:5b:3f:f4:d4:5c:e5:88:16:e6:0d:43:0c:4a:
07:1b:c2:a4:41:92:46:da:4b:cc:ec:1a:ba:6d:cb:f7:0e:fe:
f9:a9:fd:c3:27:7a:0a:5d:d1:49:cc:85:87:db:f1:0a:82:4c:
7d:6a:13:86:e4:2e:fe:0e:85:4e:7b:00:2a:d6:a7:6c:e8:5e:
7f:88:e5:0f:d8:4b:81:72:7c:a7:a0:b4:45:8b:d9:a5:90:84:
61:cf:67:77:f7:58:1b:9a:23:bd:85:75:88:98:20:9a:11:37:
f5:dd:1a:94:74:ff:51:b9:15:00:8c:48:24:d7:97:e9:6b:40:
24:3f:97:72:50:cd:57:d1:82:3d:bc:9c:28:de:a2:de:6b:bf:
3a:b4:55:dc:0c:82:f2:2f:03:b5:f8:39:1e:c2:87:79:22:bb:
0d:b6:a9:65:fa:68:72:87:33:11:55:08:ed:6a:17:e1:f4:e7:
00:61:4e:ce:66:ed:e4:54:82:8d:9e:9e:dd:20:85:dd:3a:de:
72:de:0d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:49:04 2025 by rpki-client