Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: bXh2k7aRL4Ox9BQ4p1BI3LL7337f9vT4qLwUWoEToB0=
Subject key identifier: 0C:51:23:DF:B2:AE:34:98:35:E1:28:21:B4:4F:F6:BA:CE:B6:DD:1A
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 0196A19B9BB6969C554FE8FCE56B93E49C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0840
Signing time: Mon 05 May 2025 18:00:51 +0000
Manifest this update: Mon 05 May 2025 18:00:51 +0000
Manifest next update: Tue 06 May 2025 18:00:51 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: lVNRWCcbQLgUOekykHyXmbO+b0bxgNfY/COFfKN9NVM=)
2: YRQ4mvsGwzil4hFVAUOAk6dNVCU.roa (hash: X5eaS1qa/k5JOAN5WxaVK8Rkr/iQxPqJC1ctHVNkj8M=)
3: clLzc_fPy2OSfEJhnvCxw-gzmJg.roa (hash: QOQMhVAiztAASS43Dph/mctPcwas/jY/zxydrARjdnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:9b:b6:96:9c:55:4f:e8:fc:e5:6b:93:e4:9c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: May 5 18:00:51 2025 GMT
Not After : May 6 18:00:51 2025 GMT
Subject: CN=0c5123dfb2ae349835e12821b44ff6baceb6dd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:6a:c0:dd:f1:53:35:e0:0e:58:1e:18:cd:
1b:08:cd:a8:65:2b:e9:47:01:82:25:c7:e0:84:89:
c4:2b:ff:60:c3:3c:79:42:76:44:44:a4:ef:15:91:
58:51:2f:59:18:48:23:97:e3:41:e4:16:c3:a9:b0:
8f:e6:81:4a:03:c2:ce:1c:21:ce:06:db:7d:1e:11:
f7:67:8b:84:bd:9b:4a:02:af:4b:4a:87:cb:21:a5:
c0:db:3f:00:51:c9:65:99:39:83:01:33:f0:47:68:
70:85:66:d3:6b:c7:60:a8:52:db:4d:d6:24:3e:16:
d7:b9:41:8a:f7:ad:84:ae:21:16:3c:90:f9:dd:bf:
9f:8b:72:e3:ab:d3:41:33:c5:e7:96:26:58:b4:bb:
7f:8b:84:12:3c:9f:c3:eb:05:7c:ae:1d:4a:53:1e:
b1:6d:2f:9b:d5:01:65:0d:05:ca:9d:14:b6:8e:02:
b2:c6:ab:98:ff:04:05:87:6a:f9:47:1f:36:04:ea:
6d:68:d8:af:b8:c3:82:36:66:1b:54:36:aa:df:bf:
58:d7:fe:9e:29:2e:0b:31:d2:cb:e2:2d:3a:d5:ff:
19:d0:a7:73:f0:d5:16:39:4a:88:d7:2d:e5:30:2f:
04:e8:fb:66:f5:bc:6d:67:1a:0a:f4:36:23:82:18:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:51:23:DF:B2:AE:34:98:35:E1:28:21:B4:4F:F6:BA:CE:B6:DD:1A
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cd:86:d8:a5:18:20:63:99:dc:a5:05:5a:ab:8e:47:c5:0d:
e8:4d:ff:e3:8e:7b:be:90:55:de:a8:e6:dd:0a:35:de:0e:9a:
f3:05:12:38:43:76:ce:0f:54:08:c4:6a:59:9c:82:60:79:ae:
3f:66:b5:75:74:9a:93:80:83:84:41:44:57:4a:09:5b:20:7d:
d5:61:14:27:90:55:1f:8c:0e:c3:f2:0f:76:b8:8a:07:3d:ac:
0a:04:d7:31:52:65:1d:2f:71:03:1e:18:3c:7d:f7:b2:c8:7e:
a5:fc:72:dd:8d:30:3d:63:81:41:85:31:61:dc:73:c4:8f:0c:
71:e5:e1:63:44:ab:23:bb:70:b3:9b:e8:92:95:5c:ea:20:31:
ed:cc:86:57:23:7a:eb:f1:1c:85:a6:b5:38:f1:3b:af:62:f4:
b5:04:51:c8:18:b3:3c:ab:60:50:ea:49:5c:84:b6:4a:3b:a8:
80:80:b4:ec:b0:32:77:d4:c5:e6:9d:ea:5d:c9:08:2f:b7:38:
9d:62:c6:69:61:5e:b4:ac:b3:0e:09:f7:44:5e:bb:32:5b:41:
21:76:d1:86:aa:0a:2d:36:3e:b0:a9:4f:31:ef:df:d1:87:0a:
c6:4f:67:a6:ee:c3:5f:ec:ea:4d:9a:a1:da:d0:74:04:9c:72:
e8:a1:be:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:58:59 2025 by rpki-client