Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier: txbhDS1tvdxUiL0HN/LZPeLLYHEyezynebsU9DFWwBo=
Subject key identifier: 6B:3E:71:14:79:95:A8:AA:EA:29:22:4A:DE:21:99:75:58:4D:45:20
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 019630F573D4151941E814850E2257334E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number: 1018
Signing time: Sun 13 Apr 2025 21:01:54 +0000
Manifest this update: Sun 13 Apr 2025 21:01:54 +0000
Manifest next update: Mon 14 Apr 2025 21:01:54 +0000
Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: +8QKw+XS+FkrMMow8x/tYQzxcRNXf33zTYHi4g4kIkI=)
2: _d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa (hash: vnr1x2ojeLhbVafxW9oqVV43qotLr8cLQwIIuErWSfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:f5:73:d4:15:19:41:e8:14:85:0e:22:57:33:4e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: Apr 13 21:01:54 2025 GMT
Not After : Apr 14 21:01:54 2025 GMT
Subject: CN=6b3e71147995a8aaea29224ade219975584d4520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:19:52:7d:7a:fd:d3:62:69:c5:f4:0f:2b:
b2:69:0d:d2:bf:5a:f5:fc:0b:5a:d7:3d:b4:aa:b3:
e7:2b:cb:4a:95:26:1e:e8:74:17:81:87:59:a6:dd:
50:7e:f9:c0:b0:06:48:42:72:f5:b8:02:0b:25:0f:
9e:bc:82:4c:4f:4a:f4:56:da:02:50:01:9c:26:e8:
a0:da:66:b6:a0:1e:fc:00:63:7a:64:9c:e0:a1:ee:
56:c7:2c:18:77:a9:ed:f2:be:dc:32:52:78:10:05:
15:e1:b4:f8:58:14:4b:33:b9:51:a1:b4:da:5b:29:
6a:57:ca:69:56:4e:ed:d4:69:4d:ba:74:f8:1b:d0:
45:43:ed:25:7a:6d:2d:fb:5f:93:7d:1b:87:70:f3:
c5:6d:29:e8:a0:12:a3:72:a7:52:53:5b:05:ab:ef:
32:63:ae:d2:fd:72:6c:63:f4:7b:cd:54:2a:22:85:
da:40:a5:5a:6a:e7:31:97:5b:fb:93:06:13:64:f5:
97:d7:94:19:1c:d8:39:4f:25:57:1b:eb:79:90:86:
ad:db:5b:d8:d6:6d:44:a0:07:09:6f:6c:f7:fe:18:
97:7e:bc:13:24:90:eb:54:56:0c:95:f7:55:1e:86:
7b:cc:dd:5d:92:a5:fc:0c:85:53:cb:e2:66:64:54:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3E:71:14:79:95:A8:AA:EA:29:22:4A:DE:21:99:75:58:4D:45:20
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2f:f7:b5:90:94:c2:2a:ad:9e:2d:c9:b8:83:ef:e3:24:12:
ea:3a:b6:12:a0:27:f9:a2:32:0a:80:7c:0a:02:81:4c:26:f1:
55:08:81:f2:75:be:82:34:74:2b:7b:46:ff:91:d7:4c:b3:b6:
f5:11:54:bc:2a:24:4b:14:e3:89:7a:10:12:66:3f:e5:31:f0:
c4:d9:2f:20:08:af:7b:e3:d1:9e:c2:85:e5:70:0a:2c:da:df:
ca:a3:b2:92:f1:e5:26:74:52:93:7e:30:0e:18:f4:3f:5a:ce:
79:c8:35:fd:2f:04:e6:4b:78:d2:55:01:8b:5f:36:9f:b8:75:
76:b5:76:22:66:f0:9c:99:6a:e5:6e:da:fa:96:99:5b:fa:07:
5d:03:25:bf:e9:a9:15:87:99:7c:38:6d:07:bc:c6:c8:cd:44:
6c:c7:d0:8e:50:25:aa:e6:8e:59:7d:46:9d:b9:07:59:a0:9d:
89:77:37:e2:ca:dc:61:3e:0f:c4:1d:10:b4:9b:e7:1c:3c:2c:
c6:ad:85:d5:ce:27:a6:86:62:c9:a4:75:ce:43:8e:91:c7:f2:
85:e1:ba:45:d7:41:36:be:18:23:ae:55:af:3a:eb:e1:dc:a0:
59:c1:68:e4:45:0f:c6:92:6f:79:61:82:50:bb:b8:40:41:bd:
f2:82:be:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:03:13 2025 by rpki-client