Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
File: JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json)
Hash identifier: fiWNb/D6io11P1yGg62mdGIB3yHLSOK01Mq2Hf+Oyng=
Subject key identifier: 94:00:E1:8B:8A:C7:0A:94:B6:C7:E3:5A:3D:9B:B9:A0:34:4D:B2:6F
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Certificate issuer: /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial: 0196CF867893EBFB689D74EF2B575608B3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
Manifest number: 05AC
Signing time: Wed 14 May 2025 16:00:18 +0000
Manifest this update: Wed 14 May 2025 16:00:18 +0000
Manifest next update: Thu 15 May 2025 16:00:18 +0000
Files and hashes: 1: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: 0ZmHxHxG/6BumkKEOI4HYZxyo4nKjhPNwfxlmmhn+Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:86:78:93:eb:fb:68:9d:74:ef:2b:57:56:08:b3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Validity
Not Before: May 14 16:00:18 2025 GMT
Not After : May 15 16:00:18 2025 GMT
Subject: CN=9400e18b8ac70a94b6c7e35a3d9bb9a0344db26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c5:1e:f7:41:4d:72:4a:96:9d:9d:da:28:02:
0a:63:5e:b8:bd:2a:f0:3a:83:5b:1e:63:96:e1:15:
35:3a:ce:41:9a:8d:9e:5d:d2:ff:f4:b8:82:11:2c:
ae:d9:c6:f9:3c:cf:44:65:ae:e8:ca:ca:83:44:ad:
0e:37:4e:ab:e5:de:f7:e7:e6:d8:fc:0c:69:93:44:
6a:c5:b2:5c:df:c4:72:63:a7:4c:4d:02:11:cd:cf:
f5:93:86:b5:6c:31:b6:43:47:da:df:26:a7:5a:b9:
fa:e6:d0:14:1b:06:2d:82:2c:b5:68:31:a5:45:23:
bf:19:ea:4d:17:33:6e:7d:c7:50:47:71:c8:ec:c3:
2b:78:c6:0a:3c:cd:aa:8c:fa:6f:6d:1a:8e:e2:a0:
a9:fb:8a:01:c1:bc:0e:83:47:ad:37:08:a0:a5:53:
03:02:d2:f7:ea:72:0b:17:36:70:8a:91:99:fc:ff:
8d:45:28:7f:2b:b3:f1:1d:8a:3d:7e:8c:4d:00:d3:
da:26:62:a3:b3:9b:48:bd:72:b9:89:c3:5c:9b:cd:
17:95:16:e8:2d:52:db:e9:dd:91:45:49:35:20:4b:
f2:55:4c:9a:a5:a4:cb:2e:f7:84:0d:01:a6:1f:4f:
c1:4f:40:65:8c:88:a3:47:57:f3:17:2b:92:3f:0e:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:00:E1:8B:8A:C7:0A:94:B6:C7:E3:5A:3D:9B:B9:A0:34:4D:B2:6F
X509v3 Authority Key Identifier:
keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:72:c3:92:5f:93:ac:a7:78:53:f1:ab:ae:1b:6f:0d:1d:f9:
03:e2:b0:ff:ba:37:14:6b:15:9c:8f:6e:6e:c2:b4:da:3e:30:
34:21:14:2e:c0:f4:da:f1:78:0d:d0:dd:37:f4:f5:75:e3:9f:
83:20:45:ef:8c:d0:c4:49:2b:41:af:42:7e:81:8f:d1:ff:b6:
33:20:c7:bf:70:29:59:62:97:42:b6:1b:7d:0d:e4:30:a7:f8:
05:0b:05:fe:7f:c8:e0:a1:cc:b0:89:0a:e0:ef:0a:8a:6d:75:
67:4d:2a:b7:53:51:00:c9:bb:52:9c:77:09:ad:1f:7e:04:58:
fc:10:ba:3f:7b:50:ed:b7:27:f5:6f:60:bb:f1:b5:8d:c0:1a:
70:54:cb:36:b4:da:5a:0a:50:ae:a5:44:c9:21:2c:2d:c5:ce:
8f:61:6c:3b:22:90:35:e5:54:c4:4b:c5:06:43:4f:0b:8f:75:
3c:f5:20:ee:3f:a0:f1:ef:4e:f8:7e:a1:0c:d5:e6:12:5b:06:
7c:c7:d2:92:e1:b5:d2:f6:8a:4c:00:4d:c9:9b:95:c0:75:2a:
1b:5b:37:5e:9a:c2:39:e1:04:93:04:6f:44:d7:95:fb:b4:e3:
8c:e6:e4:89:63:87:38:8d:6d:69:50:89:ff:d6:26:37:14:bf:
34:7e:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:58:37 2025 by rpki-client