Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: D1imqYR5vFfnawkuO7PWbTo9fMzBm+5unma6xRBO/Nc=
Subject key identifier: E3:ED:EA:51:C8:78:39:23:B3:EF:C8:AB:13:D1:58:49:12:5E:E5:7E
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 0196C2DDA090DD41EE7E419DD0BDB87CEC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 05:00:26 +0000
Manifest this update: Mon 12 May 2025 05:00:26 +0000
Manifest next update: Tue 13 May 2025 05:00:26 +0000
Files and hashes: 1: IkDVoWMCW8T1OT9ORyQk9bDyazo.roa (hash: ezW06KpxDOFFcxPPKXXfQ4CRQ3FYkfmYYJN8bIHB94g=)
2: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: wtgS0TcIesvWHK2jqBAg3xjF1jnQ09aj3M6JSos8Y2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:a0:90:dd:41:ee:7e:41:9d:d0:bd:b8:7c:ec:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: May 12 05:00:26 2025 GMT
Not After : May 13 05:00:26 2025 GMT
Subject: CN=e3edea51c8783923b3efc8ab13d15849125ee57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:4c:bb:56:30:53:3b:f4:63:4f:22:a7:c5:
54:48:93:14:1d:50:9b:af:e3:1c:cf:21:03:e8:5c:
c1:31:b2:b0:91:1e:66:9e:7b:7f:a5:8c:2b:bd:52:
0d:80:de:e3:ef:df:d1:f5:35:66:5a:5f:98:8b:8e:
52:e4:4b:f0:8a:5b:0b:dd:3f:5f:97:79:7d:c3:aa:
85:27:5a:63:86:30:65:57:56:00:dc:33:38:11:9c:
20:24:b6:86:63:b3:bb:b1:17:69:8f:37:d6:00:f4:
c6:5b:07:88:4f:5b:cc:29:51:3b:61:bc:d1:b4:00:
b9:57:33:3e:a6:e5:80:6b:93:08:20:38:b4:da:89:
2c:e0:a8:53:5b:24:45:ae:27:d4:4c:f9:42:17:0a:
a2:22:78:2d:cb:ae:6e:cd:a9:e3:32:97:b1:8a:53:
a6:9b:8d:6d:a3:b6:85:9e:12:fa:a1:5b:62:8b:c7:
03:55:d4:ad:23:98:97:b2:fc:0b:d3:21:6d:28:95:
f0:a0:a8:3b:f2:96:a8:b0:3d:08:b4:7c:87:9c:22:
b4:c9:71:d1:54:3c:db:26:fb:4e:fa:bd:42:8a:dc:
b0:9e:d3:52:16:17:62:e6:a5:5b:5e:5c:0f:ce:cd:
41:0b:90:e4:7b:5d:8a:06:d7:d0:8a:51:d7:25:d8:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:ED:EA:51:C8:78:39:23:B3:EF:C8:AB:13:D1:58:49:12:5E:E5:7E
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cc:db:32:ac:5d:10:d2:c2:9f:79:73:71:6d:14:78:6b:f0:
64:30:12:29:8c:27:58:16:3d:0d:c5:15:c5:2f:31:14:9f:d2:
22:aa:60:59:82:a9:0c:c2:c2:34:2f:9f:62:d3:9a:d1:52:d5:
c8:18:d9:06:dd:b0:6e:18:ac:6d:0f:23:8d:65:e1:2c:ab:4b:
18:8d:52:3a:ea:58:ab:a8:6b:21:95:93:61:16:bc:e9:bd:64:
e7:68:a2:f2:50:04:cf:83:35:7b:82:22:2f:6e:1e:99:8e:6f:
c4:87:24:16:5e:5e:99:a0:c7:3e:8c:68:68:a9:5b:27:1d:a1:
72:16:2c:97:a0:8a:b8:7a:56:7e:1b:8e:48:c5:c1:09:c2:ea:
20:19:3f:a5:25:7c:f7:d8:a2:30:15:ed:74:1a:f2:36:15:eb:
24:b0:3f:c6:48:95:dc:84:bb:66:92:fd:fb:c9:cc:00:68:d3:
e7:b3:ce:f5:f0:ba:90:bf:0c:7f:08:e1:21:f5:9f:36:08:f2:
98:62:bf:03:f7:8c:92:3e:a4:36:66:95:a2:e7:ac:6f:06:74:
b1:18:42:7c:3c:2a:35:ef:0c:10:52:4e:72:1c:40:b8:af:a1:
c4:48:47:73:eb:2f:0d:bc:a3:8b:af:1f:51:44:ac:91:b8:ea:
20:34:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:58:49 2025 by rpki-client