Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
File: jz-dhbyzpBNjYsV3Pp0U455SlFM.mft (raw, json)
Hash identifier: yz7v1o2CxesyB7gLwDpimzy17uUfi7oVxbE97jbzTDA=
Subject key identifier: 47:70:E6:99:FD:6A:20:3C:23:75:A0:53:E6:5B:BC:F7:C0:E3:BA:CA
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 0196372D4D939D5E07DA5FEC710AD0060EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
Manifest number: 0551
Signing time: Tue 15 Apr 2025 02:00:37 +0000
Manifest this update: Tue 15 Apr 2025 02:00:37 +0000
Manifest next update: Wed 16 Apr 2025 02:00:37 +0000
Files and hashes: 1: D6_4qEi07gtXF5ITukzXeqcyPaY.roa (hash: BB8G1BDTfHCkkOszf3uysnvPnN4MWEDmW1B2B7aR3bY=)
2: jz-dhbyzpBNjYsV3Pp0U455SlFM.crl (hash: w5q2okn0dh/cSgjw96yCioZOwFiZaInKNM+b9nPqPPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:2d:4d:93:9d:5e:07:da:5f:ec:71:0a:d0:06:0e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Apr 15 02:00:37 2025 GMT
Not After : Apr 16 02:00:37 2025 GMT
Subject: CN=4770e699fd6a203c2375a053e65bbcf7c0e3baca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:8c:e2:26:c2:1c:c7:20:1b:0a:f9:5c:ab:
b1:9a:b9:31:8a:08:ab:d3:5a:46:08:a1:44:e3:5f:
c1:43:0e:78:12:8b:2a:8f:a6:31:f2:bc:dc:8e:40:
4d:4f:be:be:4b:15:fc:8f:1a:92:2b:d4:a5:bc:dd:
eb:d8:87:ca:c2:a6:a6:d6:82:67:43:26:0b:74:d9:
5f:75:84:ad:2d:73:ec:ff:9f:9e:e2:4c:0e:d0:68:
da:af:25:50:c9:00:d5:ed:dc:d1:a1:83:f5:5e:5e:
12:0d:e4:8b:66:f2:60:90:33:9c:c0:04:18:e4:88:
b8:40:36:1e:7c:6f:3f:a3:f2:f3:f0:22:95:12:7c:
22:aa:56:0e:09:30:24:41:d4:af:48:24:f1:cb:e1:
89:6d:f4:37:30:4d:8b:da:0a:93:f4:7a:5c:c5:c1:
e2:9d:1c:4c:92:fb:d3:cf:8b:24:0b:5e:90:c3:4d:
eb:a3:22:7a:b6:95:4b:e2:8b:f0:8d:3e:a6:21:b7:
b0:da:92:26:ad:69:d4:57:ec:7a:aa:74:df:f8:d9:
da:1f:a5:c1:a7:01:2d:3b:bf:f0:62:1e:3f:9b:2e:
22:5a:5f:21:b4:79:56:5a:5f:b8:93:eb:27:76:50:
f5:7f:a2:d8:24:a7:90:5a:2d:94:c8:30:32:ec:99:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:70:E6:99:FD:6A:20:3C:23:75:A0:53:E6:5B:BC:F7:C0:E3:BA:CA
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d3:04:55:60:17:05:21:9c:ac:4d:ca:6a:05:91:67:ce:54:
8e:ae:a9:33:d0:27:cf:58:8d:0b:cc:2c:2c:1a:bb:4e:c5:47:
a9:a7:58:c2:24:76:57:9a:9b:ca:ca:f7:ce:fa:80:af:ea:2d:
fa:52:b9:75:f1:97:d5:70:45:bc:17:e9:0b:02:f8:81:79:c8:
0c:5c:df:c4:b9:54:2d:fd:80:0c:59:e3:3d:72:78:fd:8d:fd:
93:94:62:fc:ba:88:1d:76:14:c2:67:a9:d7:80:ea:03:b4:7a:
09:9a:25:21:c7:74:bd:90:4c:66:5b:22:c0:a1:55:dc:c9:55:
5d:8b:cb:70:c9:c1:a4:8a:b3:c9:9b:f1:36:b0:09:0f:92:b8:
99:c4:6b:73:3f:d1:5a:a0:00:9f:ca:4e:16:f1:21:b6:7e:dc:
86:5b:34:1a:87:79:26:95:c9:6d:33:ad:42:52:3b:59:cf:63:
c7:6d:a9:55:29:84:0f:7d:29:12:49:44:19:06:54:6b:ef:8a:
ca:36:54:a4:ef:ed:11:bf:c8:83:56:cd:7b:66:04:ee:d0:e1:
3b:2f:21:8b:91:18:4d:e6:df:62:0c:69:3b:53:a0:8a:43:52:
ca:8c:58:a6:ea:66:54:03:a4:76:1e:44:47:49:2f:0d:21:98:
02:63:2c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:22:27 2025 by rpki-client