Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: n+HvLWdDm7b7gt5JAlw8VzV0zbCF+XQTMn2NiUR+/uw=
Subject key identifier: 4F:5E:46:9E:3B:0F:08:7B:5E:65:B2:91:6F:B9:8B:73:5F:6E:31:37
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 01965537EF1D2DC726E78B27C1FF590B3E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 0A4E
Signing time: Sun 20 Apr 2025 22:00:50 +0000
Manifest this update: Sun 20 Apr 2025 22:00:50 +0000
Manifest next update: Mon 21 Apr 2025 22:00:50 +0000
Files and hashes: 1: B_tPzlcakKiFDBacnORzzWv1yTE.roa (hash: agYbT4sj3xKKoiRvTRiMrXGnEy5N2ggal8elxJ61JUw=)
2: HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa (hash: E94twRw9JlGZMbmmCttmzyXZguvpf/OPgy8FVeGF2rg=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: w3DdF+zhIRSESvIH1WeubwbwR7K7J64TWalQW5c+O4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:ef:1d:2d:c7:26:e7:8b:27:c1:ff:59:0b:3e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Apr 20 22:00:50 2025 GMT
Not After : Apr 21 22:00:50 2025 GMT
Subject: CN=4f5e469e3b0f087b5e65b2916fb98b735f6e3137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:a0:22:cb:f3:d9:d8:5e:13:63:30:5c:3b:
3d:a9:60:45:fe:64:87:66:90:f6:4b:60:2a:c3:ba:
65:ec:90:f1:ca:65:6c:f8:99:37:60:dc:cb:65:9e:
b0:fe:6e:f3:8c:ef:f2:85:13:a7:a5:fd:54:7c:29:
b6:34:78:aa:36:4b:d7:89:9d:c1:b5:59:43:9d:22:
fd:23:38:84:4a:9f:01:a3:c9:96:43:d4:4b:a1:a7:
6c:c4:66:45:bc:e3:fc:db:1a:25:86:a1:e8:41:e2:
3c:8c:5a:95:64:54:9a:64:5a:0f:46:ab:dc:1b:10:
d1:23:2b:7d:e1:0a:8a:7e:ac:ef:86:e2:31:b5:88:
a9:17:4a:1b:6e:3d:16:b5:4c:21:4f:cf:7f:0f:1d:
37:96:5a:8e:7d:44:f9:35:71:d5:85:67:22:c3:f3:
22:03:0b:0b:b1:64:64:2a:ba:85:a8:c2:9a:bf:77:
57:28:59:36:ab:11:27:23:40:c5:ec:cc:61:d7:c4:
77:34:1d:32:8f:f3:b8:3b:0d:1f:4a:62:31:8c:32:
85:18:df:1f:79:2d:a1:0c:90:c8:b6:88:6a:10:b5:
c8:84:9e:91:26:77:40:37:f4:82:2e:b6:d8:5a:c4:
bd:ba:81:db:f8:aa:58:7c:da:fc:da:db:72:dd:5e:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5E:46:9E:3B:0F:08:7B:5E:65:B2:91:6F:B9:8B:73:5F:6E:31:37
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b1:b6:3e:84:61:e9:ee:67:a2:ef:52:ab:61:da:e7:d2:49:
48:e2:b3:e3:38:c7:c8:df:75:4e:3a:a8:c4:71:b3:9e:86:e6:
fe:e6:d2:ff:b4:69:3e:99:26:25:d7:ab:75:b0:10:ec:46:27:
46:73:b2:c2:78:6c:3f:f1:9a:18:ae:89:20:c8:fc:32:fc:45:
68:0f:8f:50:b9:33:b5:3b:e2:57:fa:e0:51:2c:22:07:6a:bf:
41:0e:6e:08:17:ec:97:8d:9c:f5:1d:a8:79:98:20:16:81:69:
c8:09:53:f7:f6:fb:c2:90:aa:71:4f:90:76:26:f5:79:22:ab:
aa:05:de:7f:f8:99:d8:fa:33:59:bc:34:c2:c0:66:94:a7:e8:
b0:e6:8f:d7:09:d3:ce:00:1f:fe:4a:bc:b1:d5:73:4d:53:ae:
6e:4e:b8:d5:a8:53:00:89:b5:69:b5:a9:62:af:5f:29:eb:a6:
6b:f3:c8:bc:d1:e2:0f:74:27:7e:f9:b0:d6:c2:20:f7:15:f2:
2c:b7:0f:ae:01:ab:bc:b5:18:c9:87:cf:a3:fc:c0:01:4a:cf:
98:2e:97:36:c5:ba:fd:ad:25:1e:66:95:fe:3b:fb:4a:d2:b0:
cc:f8:02:55:43:cd:71:9e:5f:63:3e:22:4e:4b:34:a1:30:7d:
4c:38:54:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:19:54 2025 by rpki-client