Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: 5xylMNGJUp3BMLyU4kMSpSCgfMdRMgv1mMRjix3V+bY=
Subject key identifier: AB:B7:D3:2E:A4:52:00:2F:45:C7:01:98:2D:A2:90:2E:12:84:61:1A
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 0196C0B87C25C031CABF433AD5A278063AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 10ED
Signing time: Sun 11 May 2025 19:00:37 +0000
Manifest this update: Sun 11 May 2025 19:00:37 +0000
Manifest next update: Mon 12 May 2025 19:00:37 +0000
Files and hashes: 1: 2f42Ui-pru7wNiS6tvX-43aKjFs.roa (hash: mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: eezi/S0nGACdbPd5nW9yYPZCYEMhHEDcLYD99HCUJeo=)
3: Xhs8fAc0SGAyN4KDD0cOKWAqtow.roa (hash: 0rR/+YP0FGlnVR+donPj6Q3O2XueDV+VyXKsGyjN1KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:7c:25:c0:31:ca:bf:43:3a:d5:a2:78:06:3a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: May 11 19:00:37 2025 GMT
Not After : May 12 19:00:37 2025 GMT
Subject: CN=abb7d32ea452002f45c701982da2902e1284611a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:c3:15:83:7e:68:2f:d5:b7:f4:f8:50:84:
68:ff:8b:6e:d7:0d:23:b3:d6:9c:d4:b1:86:fa:47:
6b:ef:a5:0f:64:a4:52:31:73:d0:eb:66:3e:ab:eb:
1c:04:ba:6d:52:60:df:09:e5:55:40:06:04:1a:1d:
04:e1:20:3d:61:5a:5e:c4:0e:1b:3f:cc:6b:ea:ad:
40:0c:31:01:bc:e9:ac:d5:bd:a2:7e:1c:e8:fa:c5:
42:8d:bb:e7:58:cb:c6:75:64:b7:d3:7e:65:d3:48:
46:9d:14:39:95:86:f2:ca:f8:57:06:ba:f5:f4:b3:
99:c6:8a:ff:0e:39:ce:fe:45:65:fb:d0:3d:03:f3:
b2:69:e0:e3:f1:4d:97:9a:6e:bc:ef:f6:84:97:ea:
a2:db:da:71:b8:0d:52:bb:20:5a:ee:d7:13:6d:4e:
2a:15:f8:c5:37:bd:2c:3b:63:8f:c0:4f:d3:99:f6:
3c:16:5d:63:f2:25:5b:be:ab:4d:7c:fd:e8:70:b0:
64:fc:18:30:4e:39:4e:03:92:49:c5:a0:66:79:7b:
3e:a6:70:34:2a:c4:22:f0:93:0b:83:18:23:80:b0:
cb:e2:8f:75:70:64:c9:26:45:27:a4:da:f2:f0:83:
4b:31:8c:9e:b5:c7:23:48:e2:ec:7d:57:4c:fb:8d:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B7:D3:2E:A4:52:00:2F:45:C7:01:98:2D:A2:90:2E:12:84:61:1A
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:61:7c:f9:32:7d:9d:85:ea:6b:34:c7:7b:fe:7a:d5:c2:f6:
1f:ee:78:df:3c:a6:a1:f1:25:2a:ba:ba:21:12:11:a8:32:89:
37:29:d3:14:b4:35:e3:5d:1a:59:e4:05:17:8a:be:e3:2b:45:
b3:3d:76:d5:4c:d2:63:c8:3f:b2:6a:33:92:6b:f7:61:47:2f:
ce:66:66:2f:3c:e4:14:68:39:b2:41:e5:21:13:5b:44:a1:73:
75:b7:8d:2e:5d:47:10:a8:6c:33:1f:ce:2b:cd:4e:f0:cf:5c:
0b:28:9b:1a:56:b0:87:e9:2f:f9:b7:9f:a4:ae:4c:d5:01:2e:
2e:f3:0a:15:d4:42:b4:80:9c:ba:61:5c:66:09:29:41:9f:d5:
19:13:4d:95:d5:ff:8c:12:34:5f:7f:ac:40:79:6c:e2:6c:4b:
13:e2:ea:3a:55:3e:01:fe:e5:73:94:3a:f2:85:91:28:84:8a:
63:15:65:9b:47:ba:fa:9d:57:87:e8:90:b5:b4:3b:68:dc:5d:
bc:03:02:92:b0:dd:e8:71:9c:48:a2:71:ee:32:1e:8f:a5:a4:
54:42:65:66:62:6e:ee:d2:32:ef:fd:77:9b:99:79:1f:5d:b3:
94:6c:ef:f5:8e:a2:80:a4:1f:46:8e:05:89:62:ee:64:0d:9e:
88:3a:77:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:50:12 2025 by rpki-client