Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
File: JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft (raw, json)
Hash identifier: Cwan+PE5/BOBdtKOLxiEokwp9iZXFlp1tbVYAkReSyw=
Subject key identifier: C5:84:46:67:0D:46:95:AE:C1:4A:04:AD:7C:A5:43:68:93:1B:68:52
Authority key identifier: 25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
Certificate issuer: /CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Certificate serial: 0196D99C428FDF0C7D4F8B61B4FE998511FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
Manifest number: 0553
Signing time: Fri 16 May 2025 15:00:18 +0000
Manifest this update: Fri 16 May 2025 15:00:18 +0000
Manifest next update: Sat 17 May 2025 15:00:18 +0000
Files and hashes: 1: JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl (hash: pI7/4K2uUK95ts4oqFD7zwOTgNd1tqLqD6dXQbsz5Ek=)
2: sP-bFJ2GmNkHBQJTvI6gfR-P34M.roa (hash: YAE1riF3M5+gJzUwR1Sf1tDjF0W3/xjSiT+4/+dNn0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:9c:42:8f:df:0c:7d:4f:8b:61:b4:fe:99:85:11:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Validity
Not Before: May 16 15:00:18 2025 GMT
Not After : May 17 15:00:18 2025 GMT
Subject: CN=c58446670d4695aec14a04ad7ca54368931b6852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:01:c6:2a:26:18:93:6d:fc:38:e1:dc:7f:
21:a3:4e:31:d1:8e:a8:f4:c3:b8:c1:bd:d4:6c:8a:
1b:5f:41:8f:73:ff:21:d6:32:04:ee:88:de:81:3b:
89:43:b4:46:5c:8e:bf:bb:08:7a:d7:a5:3b:69:85:
0c:25:c9:96:68:43:b1:d4:0e:18:0b:d7:62:f7:b6:
94:24:2e:f1:84:6a:9b:f7:6c:40:d3:14:f5:42:2b:
2c:a5:d0:5c:37:9e:9b:5c:ee:ef:b0:1c:0c:91:44:
24:bb:bb:89:84:75:57:a8:f1:94:9a:6d:22:7b:15:
0b:8c:b0:fe:76:8d:f1:21:88:5f:34:72:a4:7c:53:
b5:e9:40:ec:e7:cc:cd:3e:25:a2:9f:ea:6f:1b:4b:
35:c0:06:67:47:19:3a:42:7e:19:a9:75:18:8d:04:
2f:05:b8:5e:73:77:7f:05:83:7e:51:65:19:a4:d8:
3e:01:8f:6a:b7:ad:a2:a2:45:f8:79:1d:69:39:91:
5c:7c:5e:67:ab:94:b9:19:92:c5:7e:44:54:1c:31:
37:3a:0e:c3:cd:bf:6b:da:6b:cc:7d:8b:82:9a:43:
e6:65:86:6e:ac:00:6e:4f:ab:a2:9c:79:b2:f3:34:
de:64:7b:8f:c1:32:f2:ad:8b:ba:a4:b4:a6:3f:7d:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:84:46:67:0D:46:95:AE:C1:4A:04:AD:7C:A5:43:68:93:1B:68:52
X509v3 Authority Key Identifier:
keyid:25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d6:df:1a:05:8e:58:89:3b:16:15:b7:f9:ba:6c:4d:73:e0:
54:e6:e8:99:05:de:a1:e8:6a:a3:ae:40:1a:f5:7e:88:63:30:
da:94:16:c3:91:d5:f8:96:ad:14:a9:4a:96:5e:05:3f:9d:cd:
98:d6:f5:47:a0:6e:55:6c:f4:0a:3b:eb:4a:a8:22:25:f3:08:
45:32:04:8b:23:fc:59:27:ae:16:62:93:17:e9:2b:18:95:6e:
1f:21:d8:d0:5a:e9:87:ca:9b:c6:e0:33:1d:c0:ed:24:83:68:
61:15:f0:e5:42:df:b9:e3:bc:9f:a2:7b:df:95:6b:9f:7a:2c:
78:e0:47:e9:f2:56:46:07:f1:dc:64:db:f5:42:8b:18:59:91:
65:ec:74:9d:17:bd:98:6e:f4:75:96:c8:b3:36:5e:54:51:9a:
e7:8c:92:39:21:e2:79:49:f4:39:e9:28:6b:52:58:0b:70:7b:
0a:73:ec:b0:b4:f7:13:2c:1b:77:53:5f:18:8b:22:74:cc:5d:
53:88:e2:5b:f6:08:82:c6:b7:6a:0f:1e:3c:f0:0f:ad:05:29:
25:b6:ab:da:c0:25:68:bc:f4:7e:e2:fe:20:4f:31:d2:ec:27:
9e:56:77:ec:8b:76:12:01:66:4f:ee:fa:db:c2:18:cc:ab:de:
e5:b0:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:23:40 2025 by rpki-client