Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
File: mJut_SoX_KO5NaNo4uA61W1uO2I.mft (raw, json)
Hash identifier: GOn0fdtG3gAraL6AG6RDZvbEfIjrgkYHfw0mAzwqK3I=
Subject key identifier: 06:59:A1:57:8F:22:21:D3:AA:08:FF:45:CB:98:BB:ED:53:EF:47:D5
Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
Certificate issuer: /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Certificate serial: 01965C159A87557C55B27C8AE62186DF220A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 06:00:41 +0000
Manifest this update: Tue 22 Apr 2025 06:00:41 +0000
Manifest next update: Wed 23 Apr 2025 06:00:41 +0000
Files and hashes: 1: mJut_SoX_KO5NaNo4uA61W1uO2I.crl (hash: ayxzkFqrYPFqIGYUP+gQdnMTypgOj0ru4k/bju5UN5M=)
2: ruJJQ56Vhu1olZiih1SCGIZreKo.roa (hash: IJHmJIP1ayDC0tbuVGoo3w6OOoLmUwDSxcxdW/4Pcy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:9a:87:55:7c:55:b2:7c:8a:e6:21:86:df:22:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Validity
Not Before: Apr 22 06:00:41 2025 GMT
Not After : Apr 23 06:00:41 2025 GMT
Subject: CN=0659a1578f2221d3aa08ff45cb98bbed53ef47d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:08:d2:8f:a8:92:36:21:0c:29:ac:7c:18:
c5:d9:58:84:a9:a0:8e:ef:50:e7:16:d5:4e:b7:92:
d0:99:be:fb:6e:96:48:62:e7:74:e7:18:8a:65:50:
98:66:d5:51:a3:48:2c:ef:9a:13:0d:f6:15:99:02:
55:31:f9:f7:4f:50:a5:21:d4:c7:3f:ba:1d:10:22:
7d:fb:53:82:9d:dc:e2:4b:b2:11:aa:4c:54:b7:4a:
0f:fd:01:dc:f2:dd:3d:2e:d6:7a:b4:17:4c:78:f4:
48:c9:d2:e0:94:3b:87:98:68:ce:50:c7:b1:0a:93:
27:1f:ec:25:60:55:b4:93:bb:8c:df:a2:1e:18:b6:
0d:7c:da:b3:c1:fc:2f:81:93:9f:4c:77:38:2c:eb:
a9:51:35:1a:c9:7c:62:77:14:1b:bb:29:91:e2:df:
8b:0b:f5:ef:a1:07:55:49:20:f7:b4:d8:41:4d:d4:
12:57:fc:e9:c4:1b:ff:f3:d2:df:3f:40:d6:a5:0a:
fd:01:11:06:87:45:8f:e8:39:e7:04:01:18:b9:2e:
4c:11:1a:b0:9e:90:61:02:83:fd:03:ac:a5:4c:a0:
98:52:87:d7:cd:6a:02:a7:f9:c4:02:c6:9a:a4:7f:
93:0f:e4:22:82:55:1f:ed:25:8b:1b:57:35:a2:a2:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:59:A1:57:8F:22:21:D3:AA:08:FF:45:CB:98:BB:ED:53:EF:47:D5
X509v3 Authority Key Identifier:
keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:4d:4c:8d:8b:b7:ae:97:88:57:db:a1:c6:14:58:43:9e:b7:
f3:9c:58:b0:d7:ea:a0:32:5c:18:05:82:87:7b:46:26:c5:ed:
a9:fc:ac:49:c8:aa:a1:14:22:af:ee:f3:65:25:9e:9f:1d:51:
af:56:42:7b:b3:67:28:ae:aa:c4:d4:d4:7b:c7:2a:81:e4:8f:
0f:ff:91:a2:23:e4:9d:2f:4f:ea:32:66:44:8e:9e:be:16:e3:
10:45:a9:a2:bb:f8:9a:7a:bc:fc:38:89:be:38:58:0a:e7:d8:
be:91:ce:e4:07:1b:77:7e:84:3c:f7:1c:51:d5:8e:de:32:f4:
c2:52:33:2e:a2:82:88:c8:f2:8b:be:0f:00:16:e3:cd:db:87:
29:ef:46:d6:55:de:e4:3a:1a:f0:22:66:d5:c6:04:84:89:80:
a7:17:d9:39:7a:8e:b7:54:12:8c:dd:9e:23:20:d2:0c:de:9f:
44:aa:f1:e4:ac:5b:ac:c7:e3:41:87:38:87:e4:53:59:7a:c5:
ce:fa:9d:80:91:8a:9e:eb:d9:e3:db:a5:66:78:28:f6:e3:e1:
be:b9:23:c9:95:56:4a:14:05:b4:b0:1f:46:31:92:f4:28:55:
b9:31:30:49:72:39:d3:66:6f:ba:b1:11:47:65:0f:e7:70:3e:
61:c7:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:00 2025 by rpki-client