Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: KoBDXMyRgffpXhVpfIC0UqOZiX+LPTXekp+7R4fpJlI=
Subject key identifier: 5B:8D:28:C0:E6:86:C3:89:23:C1:42:89:A0:66:9D:4D:81:33:D0:A9
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 0196B7473AE749504107B7C01AC95CB3B470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 1488
Signing time: Fri 09 May 2025 23:00:20 +0000
Manifest this update: Fri 09 May 2025 23:00:20 +0000
Manifest next update: Sat 10 May 2025 23:00:20 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: vyTGx6qGUhp50Mm+rN6ORaRsk8wlMcRc9BG4h27F9wc=)
2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:3a:e7:49:50:41:07:b7:c0:1a:c9:5c:b3:b4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: May 9 23:00:20 2025 GMT
Not After : May 10 23:00:20 2025 GMT
Subject: CN=5b8d28c0e686c38923c14289a0669d4d8133d0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:f6:3c:98:72:92:74:f2:97:db:6e:29:03:
47:d9:d3:ac:ae:60:a9:95:ac:55:b8:01:c4:77:09:
79:63:c2:24:00:44:9c:41:93:71:17:d1:63:1e:e0:
5e:6d:4c:01:4d:30:a9:8d:87:85:ce:6b:08:64:0d:
04:19:83:75:dd:33:8f:3f:22:d8:88:54:89:56:00:
07:b5:fb:e9:04:bd:e7:14:1e:14:2f:04:c0:fe:74:
df:70:2d:44:4e:31:80:23:b4:cf:fa:2c:63:6b:08:
bb:11:b3:0e:8f:2e:61:37:47:24:5e:31:4e:21:58:
94:90:9d:06:f8:f7:65:4b:a4:fd:59:1d:fd:bf:13:
75:3a:4f:9b:e8:58:f4:86:e0:4e:60:07:49:af:11:
f8:af:a9:31:5b:53:13:af:7d:b8:41:86:43:67:ff:
bc:a0:53:ca:fe:f3:e3:11:9f:b0:46:0f:70:56:95:
e9:61:48:ac:43:5e:b8:a0:86:04:63:6c:f4:9c:4f:
28:ed:30:f2:b2:f5:25:47:30:d9:f6:c8:08:65:9b:
65:ca:39:99:ce:7f:b9:b1:74:dc:2c:b2:7d:32:88:
4c:6a:f9:e9:30:47:37:05:c3:3b:74:6a:a2:b5:16:
a4:c1:a1:a2:84:8c:dd:43:d3:99:81:40:0f:fc:bd:
68:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8D:28:C0:E6:86:C3:89:23:C1:42:89:A0:66:9D:4D:81:33:D0:A9
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ca:d8:3f:c0:dc:61:64:b1:f3:d1:d8:70:b6:45:ad:33:21:
2e:46:ea:9a:b7:7e:3e:fe:76:07:0e:fd:fd:7f:b9:8b:02:37:
7f:4e:d4:f7:56:35:8a:1d:97:10:b3:28:dd:1a:c6:7b:41:7c:
c3:1b:9c:6e:87:e9:8f:82:90:fc:61:e0:d1:04:0c:ff:c4:3f:
bd:9f:cc:1b:77:6a:c5:af:c5:8f:a1:bd:b0:95:e7:22:bd:1c:
61:1b:39:0b:db:d3:25:05:7c:30:c0:2c:e6:98:06:30:e6:99:
7e:ad:b6:4e:31:71:45:b0:a2:2f:09:80:42:af:71:c2:db:cf:
90:fb:9a:96:66:4a:3d:d0:67:7c:0f:45:28:1c:46:59:a6:80:
8b:f1:d2:9a:64:3a:5b:2d:44:4d:35:17:38:c7:c5:0d:ca:09:
79:ea:5d:61:1d:53:15:85:59:cc:a8:b6:e8:21:d4:6d:3e:b8:
f9:6b:bf:77:f5:7d:0e:44:49:23:c1:c0:d5:7f:84:a9:f5:cf:
58:57:2b:8c:63:85:b5:be:52:e4:e8:21:a4:df:a1:c7:c7:4a:
b6:a8:3e:42:3e:8a:41:3a:8c:4c:89:6b:7b:76:75:99:63:0f:
f2:0a:af:44:aa:75:90:a7:d9:33:f7:fe:aa:c7:fe:4c:c9:f1:
9d:43:1a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:34:48 2025 by rpki-client