Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
File: JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft (raw, json)
Hash identifier: sG8XIFKF07T9+ru8YU0+xFdakvzIkiPMsbdsq87lE1o=
Subject key identifier: 77:D1:08:71:48:32:BD:90:FB:06:C3:81:C9:58:51:65:36:98:72:A7
Authority key identifier: 24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
Certificate issuer: /CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Certificate serial: 01965492DC5004F79C10A9AE8007EF70B73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
Manifest number: 0ED9
Signing time: Sun 20 Apr 2025 19:00:32 +0000
Manifest this update: Sun 20 Apr 2025 19:00:32 +0000
Manifest next update: Mon 21 Apr 2025 19:00:32 +0000
Files and hashes: 1: 89L3qYgunLwQpom3bGdwccQduKU.roa (hash: Wmvi3Nv4a5j2YSCNbxxtOShkpYW766qjpODSUqcoafA=)
2: JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl (hash: OWCsb19tQMlIdsOJ77O4tiECK4nonkshVnFCmrZUBzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:dc:50:04:f7:9c:10:a9:ae:80:07:ef:70:b7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Validity
Not Before: Apr 20 19:00:32 2025 GMT
Not After : Apr 21 19:00:32 2025 GMT
Subject: CN=77d108714832bd90fb06c381c9585165369872a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:af:09:3f:fd:8b:a2:ca:31:08:79:dd:e2:
cd:c9:d7:42:fb:5c:84:90:40:a9:9f:86:e6:2d:f8:
e1:fe:1d:9c:7f:0a:39:ec:bb:64:a9:b2:1e:05:3f:
54:3d:61:75:e1:e5:be:63:99:de:4e:e1:34:05:fc:
18:b0:17:bb:6b:71:c8:7d:05:42:de:a7:ec:a8:33:
06:bd:a7:ac:02:51:90:ba:04:9b:b1:0e:6d:d8:06:
94:be:7f:de:ce:0d:6f:d8:6c:12:e5:7f:c2:48:3e:
22:d0:26:a7:ee:4d:2b:86:7e:85:c3:81:b4:53:d2:
fb:ae:9e:b2:11:37:48:93:62:bf:fd:c2:54:76:1b:
6a:6d:e0:2a:8d:34:c1:44:3e:cb:89:53:0b:de:53:
6f:ab:a1:4d:b2:8c:ec:7b:4f:5c:44:a8:74:81:8d:
25:25:e2:57:ac:11:65:85:f8:3d:d2:fb:75:ae:7b:
a7:ae:2a:85:fe:40:c1:ca:ea:74:61:26:70:4a:2d:
98:ec:d0:0f:33:bc:12:53:c7:a3:ee:87:5d:0a:53:
43:9f:17:3a:e4:7a:14:25:79:17:d4:bf:34:3f:b5:
b5:9d:07:39:91:44:6b:9e:73:a8:95:6d:1c:d1:d0:
bf:09:d2:4e:96:9e:72:b9:56:ed:34:29:0d:b3:cf:
dc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D1:08:71:48:32:BD:90:FB:06:C3:81:C9:58:51:65:36:98:72:A7
X509v3 Authority Key Identifier:
keyid:24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8f:72:2b:a9:2b:42:f2:8d:46:c1:4e:bb:13:9e:8f:de:06:
bb:96:38:95:6f:b4:30:ef:9a:00:48:33:24:82:01:32:93:a8:
a7:91:e3:45:ce:65:e1:87:d2:46:ec:b5:c5:84:9d:30:f0:66:
68:a8:ec:d9:59:38:e9:27:74:ab:0e:1f:35:b4:40:19:0a:cd:
a3:cd:ff:97:53:6a:5b:2c:ab:2e:d1:e8:ea:3b:0e:4e:95:80:
3a:dd:da:1a:f4:7b:97:b2:91:db:1c:d9:82:58:d4:54:1a:de:
6b:7a:5a:0c:17:76:9f:9f:42:37:c4:41:47:01:cf:28:ef:01:
51:fb:58:ae:5a:5a:ad:c1:fb:51:51:a5:a8:95:16:a5:6c:63:
ea:36:ac:5e:82:35:67:47:8b:68:91:5d:b4:d5:2b:7e:fa:77:
c8:d2:e8:e3:ce:4e:03:8b:af:91:a5:ae:4a:d3:a9:e6:8b:ef:
d3:49:68:55:af:0c:09:4f:e1:91:14:d9:06:8e:e9:e4:e1:6a:
d2:ed:d5:d6:04:e9:66:f2:c9:5f:1b:80:70:14:03:4d:98:4a:
82:72:57:5f:ca:c6:cb:d9:c8:d3:99:c3:d1:5c:b9:9e:24:4e:
1a:78:55:66:17:1d:e9:9f:52:27:2f:f2:f5:08:54:7a:d8:cb:
f3:29:f5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:36 2025 by rpki-client