Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/jh_mbZ9htuZFpEe28GvUm9PgC84.mft
File: jh_mbZ9htuZFpEe28GvUm9PgC84.mft (raw, json)
Hash identifier: oIdtMxJgQb/K8/dKGxHqmhXU7k2o1b5b6bZYmPpV1zo=
Subject key identifier: 9F:D0:31:7D:DE:AA:90:45:D9:7E:23:A3:49:FA:C2:96:18:47:DA:7F
Authority key identifier: 8E:1F:E6:6D:9F:61:B6:E6:45:A4:47:B6:F0:6B:D4:9B:D3:E0:0B:CE
Certificate issuer: /CN=8e1fe66d9f61b6e645a447b6f06bd49bd3e00bce
Certificate serial: 019656812108B29DCAE662C4D2253479C46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_mbZ9htuZFpEe28GvUm9PgC84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/jh_mbZ9htuZFpEe28GvUm9PgC84.mft
Manifest number: 1190
Signing time: Mon 21 Apr 2025 04:00:25 +0000
Manifest this update: Mon 21 Apr 2025 04:00:25 +0000
Manifest next update: Tue 22 Apr 2025 04:00:25 +0000
Files and hashes: 1: jh_mbZ9htuZFpEe28GvUm9PgC84.crl (hash: +DQvnwsv1y5kzFlTxRUUgCdom/pwfm/iZn/WQcVG6vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/jh_mbZ9htuZFpEe28GvUm9PgC84.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/jh_mbZ9htuZFpEe28GvUm9PgC84.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh_mbZ9htuZFpEe28GvUm9PgC84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:21:08:b2:9d:ca:e6:62:c4:d2:25:34:79:c4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1fe66d9f61b6e645a447b6f06bd49bd3e00bce
Validity
Not Before: Apr 21 04:00:25 2025 GMT
Not After : Apr 22 04:00:25 2025 GMT
Subject: CN=9fd0317ddeaa9045d97e23a349fac2961847da7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:ff:2c:8e:5d:fb:0b:eb:e6:06:bb:5f:54:
c6:44:a6:cc:0e:12:b2:88:1a:e0:e4:80:0f:77:04:
e9:7b:e8:61:60:ae:fe:ad:58:21:37:a6:b8:7c:0d:
27:64:b4:90:50:45:06:fd:85:19:ed:ff:fe:26:18:
4f:b3:af:ca:df:24:8d:b6:83:5d:1e:2b:00:41:09:
72:64:c6:70:0a:88:3d:84:33:7f:e3:89:e0:43:5f:
86:90:32:d4:b7:8d:f8:36:82:e4:b3:03:ce:22:6c:
e8:18:77:10:8f:31:50:3f:58:55:f4:d1:4d:df:c5:
18:c9:c0:b2:a9:8b:17:ef:2d:e3:4b:fe:1a:09:5c:
71:69:4f:74:d9:b0:92:6b:ed:94:68:49:ba:fc:92:
cd:21:04:58:9c:50:7c:c3:62:95:17:39:c3:d2:62:
1f:f4:e9:86:03:11:81:1f:e4:6d:77:03:53:0d:b1:
a2:68:0f:a4:a6:c0:58:9b:76:c9:68:02:79:e4:34:
8c:be:8b:e0:58:06:62:3c:a6:df:87:9f:25:75:e6:
8b:d7:e5:08:91:1c:c4:fd:01:7d:a4:f5:10:b4:47:
97:6c:e6:7d:6e:72:9a:88:bc:b1:91:03:52:ee:dd:
43:c3:9f:2d:af:cf:fe:59:b0:cb:7b:70:92:6d:15:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D0:31:7D:DE:AA:90:45:D9:7E:23:A3:49:FA:C2:96:18:47:DA:7F
X509v3 Authority Key Identifier:
keyid:8E:1F:E6:6D:9F:61:B6:E6:45:A4:47:B6:F0:6B:D4:9B:D3:E0:0B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_mbZ9htuZFpEe28GvUm9PgC84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/jh_mbZ9htuZFpEe28GvUm9PgC84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d20ed-3d4a-44d3-a2d7-d64d70612a17/1/jh_mbZ9htuZFpEe28GvUm9PgC84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:34:b5:35:ef:60:5e:2a:68:1a:c2:3f:d3:02:e1:54:31:5a:
78:f0:97:47:d9:07:c2:a9:fa:37:33:b4:66:18:f1:e1:f0:79:
c9:1a:57:74:0e:3a:83:f1:02:53:27:bd:7a:24:30:57:85:10:
c2:dd:81:65:48:bf:d6:2a:d8:45:7a:ad:00:90:5b:70:83:f7:
1c:26:37:8f:9d:cb:53:4c:37:a0:6c:6f:96:19:a3:cf:70:07:
10:13:b6:21:77:28:80:a8:db:f8:79:02:55:49:dc:92:a9:18:
5e:68:79:9b:84:78:97:b3:40:dd:3a:21:2b:39:83:92:22:6e:
9f:a7:df:56:ff:12:aa:49:d2:d9:ae:6f:f0:a5:c9:b8:03:cc:
2c:62:cd:b2:46:50:a9:15:6b:36:be:4b:ba:3c:3f:f7:32:05:
b6:e4:99:3c:70:56:43:df:88:00:83:43:e0:f9:37:32:61:5c:
26:b6:b0:45:29:35:91:ba:cc:37:2f:87:16:d4:28:ce:b1:b9:
24:e0:df:bd:aa:9d:e9:13:06:08:53:39:83:8d:89:19:42:06:
15:c4:24:d4:df:61:7a:5d:a0:9f:3c:ba:d2:ab:84:71:57:a0:
7a:77:cc:98:e4:25:2c:32:e8:76:17:ea:3d:18:5f:8b:44:01:
ed:46:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:36 2025 by rpki-client