Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier: A8rSd4YVPH5aH7KmhglPejn/0tZpWlPYjsPYbXSDS3g=
Subject key identifier: B6:3E:8F:0D:25:DA:C0:9A:42:45:40:20:3A:4F:63:1F:AE:4F:94:88
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 0196BDB79256FDBCEFFA83969C297900CEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number: 09A8
Signing time: Sun 11 May 2025 05:00:46 +0000
Manifest this update: Sun 11 May 2025 05:00:46 +0000
Manifest next update: Mon 12 May 2025 05:00:46 +0000
Files and hashes: 1: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: bm2s2fG3AhNsAmZHjoVGpNsCCNL+ekR9X6cIq4cxkzY=)
2: Yz6JK1p8nAWa4yvE6SKtIQJ_V1c.roa (hash: rByHn6YmBo2+AfIQ5f6f0MI7t8+wl3rDT7243r2K7f4=)
3: wyMVR4dEtlYqNcQNudWP-vZ9cs4.roa (hash: 9/Au8AXYJlANsGCX+KV4wLuBFADmhxnPsp4Mf5t4/BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:92:56:fd:bc:ef:fa:83:96:9c:29:79:00:ce:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: May 11 05:00:46 2025 GMT
Not After : May 12 05:00:46 2025 GMT
Subject: CN=b63e8f0d25dac09a424540203a4f631fae4f9488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:62:5d:c2:d0:ec:fb:e2:61:c8:42:43:d0:
06:27:2a:15:15:23:43:e0:e4:fc:e4:7a:09:3d:e6:
0f:29:b6:82:c1:65:73:c1:ab:90:91:a7:3d:05:d1:
1c:4f:8c:4f:db:93:ea:2a:b1:66:c9:0e:3c:d0:80:
08:f7:54:b9:a1:bf:7a:d1:39:f0:55:72:c2:b0:8a:
f8:fb:27:5a:19:7d:61:90:4e:d2:e5:30:50:a8:a9:
c0:80:b9:fa:ed:65:20:8d:13:57:50:c4:8f:b8:fa:
0a:88:33:6e:05:fb:d0:1c:81:36:0c:f3:5d:f3:6c:
b1:0a:ee:0e:bc:a7:5a:61:cf:47:96:57:aa:0e:43:
d8:e2:38:eb:cd:96:1b:ae:13:bd:e5:6d:50:be:f2:
35:d4:48:3d:47:5c:68:33:8f:c4:59:09:fc:37:77:
82:e7:e6:fa:ac:15:be:5f:10:26:a7:81:67:8f:d5:
35:07:9f:b8:dc:a1:62:e5:0d:4e:1e:b1:c5:fd:89:
e9:b0:d9:da:93:f0:11:ec:03:6d:3f:9f:89:3d:b3:
e3:f2:24:cb:0b:b1:cc:ed:27:5e:49:8d:94:4b:5c:
c4:5c:f1:e3:11:59:a3:97:44:3a:d1:8e:a9:51:4b:
fd:3e:30:07:8d:d4:90:d5:b4:a6:62:0b:d1:5d:97:
1c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3E:8F:0D:25:DA:C0:9A:42:45:40:20:3A:4F:63:1F:AE:4F:94:88
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1b:e8:a9:4e:96:e4:99:c8:80:78:5d:03:3a:0f:64:8e:36:
71:44:60:ff:ea:58:a9:72:c9:ee:91:95:fb:44:82:53:a8:17:
c4:08:34:b8:4d:67:64:25:22:80:00:b1:6e:c0:94:57:60:4a:
75:37:7e:07:18:2f:8f:c9:2c:78:53:e7:a4:13:39:4b:d2:d8:
10:67:ab:21:b2:b6:a1:d3:61:a1:53:37:d3:1f:1b:58:8a:de:
6e:3d:82:a1:8b:71:31:cb:a5:4a:da:78:cb:34:73:be:d2:b5:
45:06:75:8b:96:c3:92:dd:61:e4:57:24:4b:3e:8f:8d:36:27:
3f:32:36:30:00:ff:7c:7d:6b:9f:07:fc:a6:77:78:3e:8f:e2:
86:98:9c:8d:fe:34:bd:1e:b7:a8:38:61:eb:4a:5f:76:d2:4d:
72:cd:ec:68:6d:d3:12:74:3a:58:a8:38:bb:c8:91:f6:17:de:
29:6f:9d:64:a4:95:f4:98:e7:0e:ee:da:04:18:3f:0d:de:19:
30:1f:a9:41:ad:62:17:0d:1c:27:2a:3e:2e:c2:54:61:b1:c2:
33:64:d9:81:92:3b:00:07:ff:5c:98:b0:57:66:05:30:71:c2:
2e:b3:e7:d2:30:96:49:5f:06:8f:60:ba:ee:c0:7d:c8:f4:5a:
c0:5c:bf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:08:31 2025 by rpki-client