Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: SZsF9VMvPeeRxGWPSyufWiw06JyQQAccRTP/0eH6qjk=
Subject key identifier: 85:E9:08:3C:9E:FB:37:6C:B3:A2:2A:EC:20:82:DF:ED:14:6A:47:DF
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 01964444AFFC66B0C8DB3FFA03CD5DC6B8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 15:01:14 +0000
Manifest this update: Thu 17 Apr 2025 15:01:14 +0000
Manifest next update: Fri 18 Apr 2025 15:01:14 +0000
Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=)
2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=)
3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: KQ7H70/01zEOeNfjMTFBYt2ikg7eC4DiYVYQ+olSVSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:af:fc:66:b0:c8:db:3f:fa:03:cd:5d:c6:b8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Apr 17 15:01:14 2025 GMT
Not After : Apr 18 15:01:14 2025 GMT
Subject: CN=85e9083c9efb376cb3a22aec2082dfed146a47df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:40:0c:84:ac:d1:ad:7e:61:77:31:63:85:
0a:b9:1c:ec:9e:44:a7:ad:f5:d1:35:5e:7b:c6:23:
5e:a3:7a:ec:01:68:16:30:e2:77:03:95:c0:75:d5:
60:9f:4e:ba:c8:6f:73:62:78:cf:24:45:50:8b:a4:
ec:69:b8:dc:1d:9c:f2:ae:76:73:df:9d:30:7d:92:
f0:f6:68:66:27:3c:e0:89:18:f9:9f:10:9f:a1:a2:
e8:d3:5e:20:10:b4:80:4e:8d:9b:fc:f4:bd:97:3f:
11:54:b8:3f:b5:c4:e3:50:5a:04:4e:f1:2a:18:10:
c8:27:c3:40:94:be:6e:7e:57:b6:9f:03:22:df:86:
6f:af:05:c4:d3:a7:66:c2:15:c8:c8:16:06:4f:ef:
dd:52:ea:36:9a:44:84:9c:a9:bc:5a:c2:15:da:f7:
b4:ca:04:0f:7a:62:25:ee:b9:51:dd:f0:7c:f8:fb:
87:2d:c5:13:46:4a:10:f6:75:06:8d:7a:de:d8:07:
af:f4:b1:9d:a4:92:e2:76:c9:87:8e:ea:82:7b:36:
81:1d:d5:fc:40:05:42:98:35:cf:b0:b6:9c:f2:27:
13:bd:98:92:4a:29:47:51:29:47:c2:a4:9a:8d:a0:
90:d5:f8:5e:58:c9:2d:36:89:59:4b:a8:68:51:f7:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E9:08:3C:9E:FB:37:6C:B3:A2:2A:EC:20:82:DF:ED:14:6A:47:DF
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:08:1e:12:67:22:55:57:cb:42:68:e5:51:e6:8a:2a:b7:2c:
8f:0a:74:b0:fd:5b:cd:91:69:e8:02:28:57:0f:3e:f1:be:9f:
01:c7:72:5b:97:a1:b3:cf:b7:c8:77:aa:08:91:6e:44:06:d4:
da:80:82:03:6e:39:bf:95:94:8e:90:06:6d:ad:a3:1a:04:a9:
6e:26:02:18:8b:cd:c1:61:6d:36:c3:75:02:3e:68:63:c2:88:
35:6d:e8:f5:1c:0e:bc:4f:54:1d:18:f2:9e:4d:13:22:fc:b6:
b0:9e:f6:d8:cf:f6:f6:e0:0b:e7:fa:8e:ca:d2:2f:5e:4f:d8:
24:f7:fe:8e:b2:0f:79:e9:f2:9c:fa:c4:2c:1a:64:1a:a6:d9:
60:1a:b8:8d:8f:ac:fb:46:7f:c7:bd:36:f5:f2:b3:fc:1a:cf:
28:27:d5:01:83:12:22:1b:0e:db:97:1f:35:f3:ef:a4:e3:73:
09:d4:eb:f3:3e:d6:c0:69:fe:13:f1:b6:54:c0:33:89:8d:dc:
60:16:12:44:ed:26:5c:c4:e2:c3:8a:27:55:76:87:38:d7:d9:
57:9f:bd:d7:d2:67:af:e4:46:f4:66:8e:49:f9:dc:a9:46:28:
2a:e7:a1:25:d5:80:6d:f3:ea:29:e7:76:96:6c:3f:e3:65:49:
77:cd:64:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:03:28 2025 by rpki-client