Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
File: jzASR05qobNrQgZN0XWzDtgi5zU.mft (raw, json)
Hash identifier: gT7r+KhuXcj4AYBqW54er6wVs8zYM9E0EyKKFVEdCqg=
Subject key identifier: 45:DB:C0:41:D3:94:C6:DA:16:FF:02:01:1C:45:CD:51:16:3D:F0:2F
Authority key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
Certificate issuer: /CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Certificate serial: 0196526D5F57E333D7263220F8B507B50F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
Manifest number: 130C
Signing time: Sun 20 Apr 2025 09:00:21 +0000
Manifest this update: Sun 20 Apr 2025 09:00:21 +0000
Manifest next update: Mon 21 Apr 2025 09:00:21 +0000
Files and hashes: 1: hSeJLXUeQJLgsdHt2Swy2Krt_5Q.roa (hash: 1r4uFqSNgKddi8IkUrdMVRZBEoRqwJZMemm/bbM90fE=)
2: jzASR05qobNrQgZN0XWzDtgi5zU.crl (hash: DodFULFwVy9W5L84U1ej1rtQC3tvV+XdoxsPoln3uDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:5f:57:e3:33:d7:26:32:20:f8:b5:07:b5:0f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Validity
Not Before: Apr 20 09:00:21 2025 GMT
Not After : Apr 21 09:00:21 2025 GMT
Subject: CN=45dbc041d394c6da16ff02011c45cd51163df02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:4e:ed:74:f1:ed:93:e8:96:cb:ee:89:15:
c3:5b:84:a8:0a:bb:8b:0a:4d:d5:2c:96:37:54:c2:
8a:5d:bf:ee:c7:3c:79:b1:02:51:aa:a3:9c:d1:d6:
71:93:a3:fa:3e:4c:24:76:ba:ce:e5:21:93:11:b8:
d4:5a:40:d0:0c:f0:51:42:3a:55:a2:ab:8d:aa:8f:
d3:d1:4b:dd:67:01:53:75:3b:9b:66:17:4f:d2:af:
86:c1:04:c3:25:02:a9:7c:42:c7:1d:23:4c:1a:d0:
dd:82:22:09:d2:4c:70:eb:26:8f:75:76:3c:a1:43:
4b:5a:3d:22:15:60:5f:59:61:e6:01:5d:19:bb:88:
07:98:26:17:73:50:dd:8e:af:2e:e1:22:30:67:dc:
9b:73:37:2b:82:05:72:1f:80:46:59:f5:74:69:21:
c4:33:72:6d:c4:08:a8:60:02:e8:02:ec:18:1c:c4:
40:d0:5f:9d:79:fc:35:fb:be:a0:96:94:90:fc:a5:
64:36:99:e3:cc:df:98:44:5b:db:7f:26:37:60:9e:
a0:11:03:53:6b:00:89:31:16:83:96:35:76:f1:8e:
0d:ae:64:42:3e:7d:6a:2b:04:bb:f7:ee:4c:e5:89:
5e:e4:32:b5:78:7d:be:a0:04:ba:53:87:c2:61:a1:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DB:C0:41:D3:94:C6:DA:16:FF:02:01:1C:45:CD:51:16:3D:F0:2F
X509v3 Authority Key Identifier:
keyid:8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b4:ba:43:7b:ea:12:77:b6:a4:aa:74:dc:8c:cf:6d:01:36:
70:8d:13:bf:47:a0:73:4a:f9:c5:a8:e4:be:26:a5:65:41:9e:
5d:89:cf:12:c4:7a:7c:23:8b:d2:77:77:2e:97:4a:25:f1:6a:
b7:c5:e0:0c:f5:b5:bb:92:bf:2e:51:d8:61:b4:6a:ee:a6:fb:
9f:c5:52:85:ed:a8:0f:d9:6d:47:51:45:21:32:c2:45:f1:9f:
54:40:0c:66:5c:34:81:66:56:5e:16:22:0e:bf:68:84:7c:21:
2d:52:6f:48:f4:e3:4f:65:14:2d:aa:4d:d0:5c:45:74:57:ee:
ed:97:04:2f:a5:c3:d5:67:0e:f6:22:5e:ad:b0:f0:a1:27:9c:
24:9b:bb:f8:74:b4:c5:0e:87:13:d6:01:29:96:b4:20:69:73:
34:c2:24:58:64:e3:c1:2a:86:42:12:7a:cf:ff:94:3f:e0:44:
3f:27:83:90:f1:18:7f:f5:92:56:d5:eb:13:bb:e0:ac:5b:20:
ce:49:76:fb:14:ae:ee:7b:94:63:1b:e0:7a:18:47:2c:cd:c8:
02:61:5c:fa:8b:a4:47:02:4d:ca:58:70:53:e1:45:a7:ab:95:
d2:63:f7:a4:20:bf:7a:8e:70:8e:a4:53:d0:5a:57:ed:21:d3:
95:a0:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:53:53 2025 by rpki-client