Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: CQ8dLNOW6bI4+lJDDCd8V3rUaGzPnxH8vbkJWIlUTNY=
Subject key identifier: 5D:39:6B:48:A7:7D:92:B4:70:E3:F1:57:04:8E:5A:E4:CB:CA:ED:E4
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 0196D22A02F61C5B6951DB2C04FEEDCD4026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 129A
Signing time: Thu 15 May 2025 04:18:10 +0000
Manifest this update: Thu 15 May 2025 04:18:10 +0000
Manifest next update: Fri 16 May 2025 04:18:10 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: RQOQSpucl67AFnI8n7JHF3stx370Kpa7vC/2Bbd2E08=)
2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=)
3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 04:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:2a:02:f6:1c:5b:69:51:db:2c:04:fe:ed:cd:40:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: May 15 04:18:10 2025 GMT
Not After : May 16 04:18:10 2025 GMT
Subject: CN=5d396b48a77d92b470e3f157048e5ae4cbcaede4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:8f:55:dc:b7:f9:93:bf:1f:47:da:c9:d6:
1e:19:87:e7:58:5f:22:5e:9a:ab:ed:a4:29:4f:52:
a7:51:5b:fb:88:5e:fc:99:68:85:04:51:4d:80:34:
69:f9:b3:b1:77:e2:69:01:03:a6:c3:a4:c1:bd:f0:
f3:a9:46:6e:32:e8:4a:71:31:7f:e6:02:6f:f3:ab:
86:a4:11:5d:c5:ca:f4:05:da:f3:60:53:4d:a2:09:
8e:64:49:05:75:1e:e9:fb:6a:a3:af:9e:fe:2e:fe:
48:08:2d:73:12:77:a8:e6:c1:b3:20:86:87:bd:f1:
46:7a:f6:13:88:0d:50:2a:8b:43:8b:f0:bc:29:a5:
ef:65:a3:ad:07:29:c0:79:10:5e:cb:46:5f:6b:0f:
15:2b:e8:3e:b6:e1:83:fe:57:75:db:48:37:47:fa:
0f:e4:43:20:32:3e:b4:fd:53:dd:af:ef:25:00:6e:
7a:28:67:59:51:07:da:34:54:de:a9:51:9d:20:fd:
59:cc:7c:28:fe:01:fb:3f:01:6f:45:c0:24:61:78:
49:2f:a9:d7:d4:09:e2:a7:9c:74:5d:e1:ec:cb:6f:
60:bb:c6:ba:16:65:b9:29:5a:ef:58:6b:e0:99:59:
0e:25:6e:b1:a8:59:a1:e1:01:a0:90:64:c6:38:f1:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:39:6B:48:A7:7D:92:B4:70:E3:F1:57:04:8E:5A:E4:CB:CA:ED:E4
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f6:37:12:b2:36:80:eb:fb:ee:95:c2:7a:dc:02:23:67:72:
35:5f:2d:1c:f4:a9:b9:6d:12:d4:a2:85:ed:47:d1:fb:9c:5d:
48:c4:e7:a6:a5:65:0c:8c:63:07:8d:c9:9e:8d:cd:76:2f:2f:
15:8b:0e:5b:f7:93:df:6b:8d:8e:ed:e2:b7:17:81:19:07:50:
61:85:de:c8:c2:da:82:33:f4:ee:b5:b8:1c:e2:6d:4e:a7:74:
e2:d0:7c:5a:44:31:b6:de:e4:a2:e7:15:b8:86:f4:65:9b:78:
cc:5c:c9:f9:02:0b:d5:e9:13:bf:ff:f9:39:3c:e4:31:9d:b1:
9a:1b:c3:65:f9:05:fa:99:4a:a4:5b:5b:27:ae:b6:d1:cf:32:
3c:0c:19:1b:85:51:aa:45:29:b8:bf:70:d2:26:ab:e8:0b:58:
bf:4c:12:40:f7:7f:87:df:9c:ff:1b:07:91:67:df:c8:91:fe:
0a:d7:a4:da:61:9e:08:a4:0f:dc:ed:5c:30:6f:4c:1e:fb:1d:
97:af:92:b8:47:81:54:fc:62:31:1b:7d:f4:39:bc:a4:84:3b:
fb:e3:71:dd:05:4b:7c:88:c0:30:05:15:a4:fc:d3:86:c1:99:
92:59:ff:db:f8:c3:61:57:00:8b:40:57:e1:05:a3:33:94:94:
8a:b4:c3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:13:31 2025 by rpki-client