Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: qnhLYrCoFVBixLwMuXL291Fp22DkMQBi8Orljiytr+c=
Subject key identifier: 6E:82:E9:01:E4:65:26:5A:0D:75:18:08:9B:28:4A:CF:8F:DE:B2:51
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 01964BFE1DD3513F3DE3CF43D4AA4B20C75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 03:01:07 +0000
Manifest this update: Sat 19 Apr 2025 03:01:07 +0000
Manifest next update: Sun 20 Apr 2025 03:01:07 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: R7rl8w9cAKjtRID+JAXThQIBg6RTxUucWHBALXouN7o=)
2: visWSJlNcMrC3jJZFirSko7YGBQ.roa (hash: aZpd1tnSI6OX83780EE9bEx3FT7nmj99SMc4Lm6Unmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:1d:d3:51:3f:3d:e3:cf:43:d4:aa:4b:20:c7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Apr 19 03:01:07 2025 GMT
Not After : Apr 20 03:01:07 2025 GMT
Subject: CN=6e82e901e465265a0d7518089b284acf8fdeb251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:85:b4:fe:72:ca:9f:15:54:47:c0:b7:cb:ae:
da:43:90:f1:75:5b:72:29:06:39:e1:21:92:0e:b2:
0a:59:63:fd:cc:1e:12:02:c4:34:93:c1:1e:e3:df:
d0:5d:be:3d:6b:e2:23:e3:58:6f:a0:bc:89:92:59:
1c:f9:69:8d:e3:27:55:75:64:79:d9:2d:5c:ad:b1:
84:c6:0e:14:89:c4:29:b3:ff:d3:e5:2e:e1:23:ab:
cd:6c:04:85:1f:c3:7a:f0:cb:d3:d4:a6:64:f8:b9:
9e:45:64:06:51:25:e0:c6:12:0f:d5:e8:6c:6b:ff:
f3:b3:b8:19:64:54:58:7c:44:ad:60:25:7e:50:32:
96:db:b8:ab:c4:9b:9d:e9:07:f9:db:8e:d3:e0:79:
a1:9d:90:7e:00:f6:80:93:44:e7:dd:55:72:fe:ea:
f1:0a:76:6c:01:a5:3f:88:d4:21:db:45:01:f3:34:
e4:d7:b6:37:0d:f2:bd:b9:95:2f:e3:7d:3a:df:67:
40:bd:7b:ee:e6:65:57:9d:2f:82:16:f2:eb:89:bb:
04:db:e6:4c:1f:c0:c7:98:8e:e2:ff:9e:96:d6:72:
da:bc:f6:16:bf:55:ec:13:eb:e7:12:40:dd:cf:08:
a6:ca:6b:1a:4d:25:0f:38:f4:e8:22:ef:b0:88:97:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:82:E9:01:E4:65:26:5A:0D:75:18:08:9B:28:4A:CF:8F:DE:B2:51
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a7:f2:55:f5:3d:b8:fa:60:f2:b4:6d:0e:2b:3f:4c:ee:7f:
85:77:39:86:2a:e3:2c:e2:de:48:5d:0b:47:34:77:b4:bb:24:
29:f1:71:54:aa:4b:02:d4:f2:7f:97:24:6a:86:a0:4c:70:58:
9f:8f:8f:59:fa:f5:4b:ea:c5:09:5a:f6:b4:b4:e6:43:2d:c1:
40:be:2a:e3:09:4c:f1:17:d2:a1:a6:df:e9:be:35:61:3b:4c:
a4:24:dd:c6:5d:33:b8:f3:09:30:cc:e0:28:5a:05:9a:92:a3:
04:4d:f5:5b:ee:aa:f2:42:ea:77:94:ed:6c:a1:51:2d:dd:d7:
96:b2:e6:2e:5d:ce:39:68:08:61:2f:83:8b:fa:d5:9d:2c:26:
ad:5e:7a:9f:ee:fe:5e:a4:04:bc:94:ad:70:f9:05:8a:47:19:
92:bd:00:da:f4:fa:a8:be:2d:15:04:9a:2a:6f:d6:6c:55:4f:
50:7d:b3:33:66:2d:94:7e:a1:e8:1e:7a:a5:14:c2:81:53:8e:
7b:68:fd:d8:5e:97:96:ac:e2:44:76:95:4a:93:ee:5e:53:56:
e2:d6:77:cd:36:06:aa:ce:5c:d6:b6:00:8e:93:4d:e3:84:0c:
3e:d7:69:68:1a:21:8d:90:4e:60:2c:6a:42:52:9b:e9:da:a9:
1c:d2:33:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:17 2025 by rpki-client