Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File: j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier: O06I+5gQMDfpOcZqr33g8valXnYCY8Pw7EhIzXsMboE=
Subject key identifier: C2:7C:92:5B:A7:57:5D:54:E2:4E:29:2B:01:A7:32:76:48:4C:14:3C
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial: 019636BF8087E7D5991EA044B9BC0ED54082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number: 14EF
Signing time: Tue 15 Apr 2025 00:00:41 +0000
Manifest this update: Tue 15 Apr 2025 00:00:41 +0000
Manifest next update: Wed 16 Apr 2025 00:00:41 +0000
Files and hashes: 1: DSv-iSXA3wX9nDodPQXtYNJDYLQ.roa (hash: rLpTuxbTjwB1kMP3m7oQHgnYLtGjlIXTCssqGQyXU8s=)
2: abJHppOXbNRTL5BB9_dNqlKen94.roa (hash: yyWwgZa5PLui39TWj5tUmAj6wvoO0anzfsZ9NlvSNwI=)
3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: hR6qwBN0nVgFjUBYHmILIqSAnXL28XI5ERWgv4jXSiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:bf:80:87:e7:d5:99:1e:a0:44:b9:bc:0e:d5:40:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Validity
Not Before: Apr 15 00:00:41 2025 GMT
Not After : Apr 16 00:00:41 2025 GMT
Subject: CN=c27c925ba7575d54e24e292b01a73276484c143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:2f:a2:79:55:65:b0:a7:d9:c0:a5:98:66:
29:fa:e9:e8:f9:5b:64:26:ae:e5:5a:d7:5a:9f:89:
e5:89:0f:5d:d8:72:35:47:ed:c6:45:cc:8e:16:69:
ba:25:10:81:4d:00:0c:24:d2:95:1b:2d:a8:97:f9:
12:aa:bb:47:5c:82:8c:5c:31:fe:d9:7e:4f:a7:60:
9b:fd:c9:ea:42:ce:ac:02:cf:08:09:16:24:ff:62:
7e:6c:56:ac:c0:d5:f5:29:f9:45:ee:3d:65:ed:d6:
8d:14:b4:7c:81:5d:3b:bf:db:7a:87:72:43:0d:c1:
96:9e:f3:80:61:82:50:20:d6:07:46:f1:37:8f:b7:
5e:12:98:21:32:92:02:ef:35:55:4f:d5:0c:a7:34:
4a:17:a5:e5:bf:f0:11:84:ec:5b:9a:c7:c4:2d:6c:
4f:d2:4a:cc:af:70:d5:be:96:e8:a9:e2:54:32:13:
21:2d:a9:c6:23:6c:df:a6:f0:7c:4d:3e:81:7e:20:
df:13:db:af:a1:fc:ea:6e:22:46:f6:76:c1:19:87:
6b:e2:c4:e7:1a:fa:f9:9e:c0:33:2c:d9:58:7a:34:
3c:ef:5f:dd:d9:a1:6d:58:13:70:ee:fc:c6:70:17:
59:f9:e7:a1:fc:09:a1:34:cd:15:9c:b6:b5:39:5d:
0f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7C:92:5B:A7:57:5D:54:E2:4E:29:2B:01:A7:32:76:48:4C:14:3C
X509v3 Authority Key Identifier:
keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ae:3f:74:a5:20:99:7b:f9:fd:fd:da:02:a4:1a:5e:1c:bd:
66:de:51:63:58:ce:4e:1b:10:70:1e:dd:60:5a:bc:a1:e0:8a:
81:ab:6f:30:68:a2:4a:7f:04:9d:87:c7:c0:a2:2b:d0:57:25:
63:7a:de:cf:6c:e8:36:73:5b:1b:b5:86:5f:79:c1:2c:92:d7:
ab:09:36:a2:84:cd:9f:d1:d6:51:be:1c:8f:ef:2b:af:4a:bb:
5c:26:3e:aa:a4:73:d2:ec:ae:39:74:5c:13:8f:6b:a2:8a:74:
e2:23:b7:58:d6:01:7a:c6:89:21:5f:f1:d1:cb:aa:f5:2b:83:
85:b7:ff:ed:37:00:cd:1d:f4:02:cb:80:5a:58:d0:19:d9:36:
44:23:a8:22:96:a3:8b:bd:6a:aa:97:ee:4a:56:34:c9:0d:3b:
55:8a:27:21:62:f6:29:6d:9f:f1:e2:42:eb:96:17:7d:18:86:
46:b1:64:0c:61:99:3b:22:1b:3b:8b:56:3c:33:02:7a:4b:16:
8f:bf:8e:e0:f3:42:07:ad:5d:dd:0c:b9:54:02:c2:a9:e0:cd:
3c:42:31:d7:1d:02:39:01:7c:a7:bf:14:78:cc:8b:ec:ce:e7:
bc:29:7d:89:c0:97:70:0c:0d:fc:a1:72:09:95:06:31:13:6e:
45:e9:3e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:44:23 2025 by rpki-client