Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: s2w1h6EUDIH+IF0omuZHmV8NXI3cZCJW+92ZZs/Ucyw=
Subject key identifier: 97:AD:8E:A4:C2:BF:B1:F9:93:3E:E1:BD:E0:57:40:85:2C:B1:DB:96
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 01963D9D49640F5917751ABAFFD9F40A23C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 109F
Signing time: Wed 16 Apr 2025 08:00:40 +0000
Manifest this update: Wed 16 Apr 2025 08:00:40 +0000
Manifest next update: Thu 17 Apr 2025 08:00:40 +0000
Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=)
2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=)
3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: 621xcYJAca/2Go9TrrsfT56NsQDJgDqLUWe5nUznzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:9d:49:64:0f:59:17:75:1a:ba:ff:d9:f4:0a:23:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Apr 16 08:00:40 2025 GMT
Not After : Apr 17 08:00:40 2025 GMT
Subject: CN=97ad8ea4c2bfb1f9933ee1bde05740852cb1db96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:48:d8:af:27:e0:0f:1a:7c:96:ba:c8:0a:
fc:5d:61:56:33:0c:99:d2:2e:04:4e:c9:f9:7f:bf:
35:df:cc:d8:da:fe:e5:c6:a4:e9:c7:41:29:92:51:
fe:d5:61:3b:83:39:88:97:e6:43:2a:5d:66:a1:6b:
c0:a1:8c:17:75:c7:b6:d5:f3:b9:0b:18:2b:f3:18:
87:94:02:fd:da:0f:ba:a5:f9:07:18:e8:70:d1:60:
c9:5a:b6:ac:98:81:19:ad:9b:cd:51:fe:59:e3:f1:
f8:4e:ff:14:bb:8d:85:e5:95:ef:3e:9e:e2:f7:b2:
2c:0f:d7:47:e9:38:33:80:55:19:55:a1:d9:8d:13:
57:88:a4:a3:c0:e3:e9:79:92:d6:a8:31:cf:fd:ef:
32:5e:f2:d1:79:e7:32:8a:2b:33:a9:00:d8:5e:af:
e1:a7:69:6f:16:22:11:be:54:38:0f:f8:7b:00:77:
4a:e1:d3:91:69:89:7f:05:85:9e:d5:71:b8:36:b8:
6f:a1:cb:e0:07:3d:8b:5e:23:45:19:5a:3a:49:1c:
89:5f:fb:fe:94:4b:20:08:2f:4c:71:6e:cd:70:60:
05:fd:a1:d0:31:a8:19:d5:5a:62:fb:f8:56:f0:14:
8d:1d:ac:d6:4c:f9:fc:29:3c:e2:00:0c:62:38:43:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AD:8E:A4:C2:BF:B1:F9:93:3E:E1:BD:E0:57:40:85:2C:B1:DB:96
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:80:9f:8d:6b:56:a0:32:95:68:8a:65:59:c4:eb:96:07:94:
aa:e4:d8:f2:e6:7f:da:92:ee:fc:60:73:3e:42:b9:a5:76:13:
6d:c8:0c:4d:c5:ec:1c:ed:a0:bb:5d:38:4d:26:19:cb:93:f6:
4f:ed:1e:8e:d6:22:4a:90:37:89:9f:d0:6a:97:dd:db:0d:55:
53:e6:e4:60:82:3a:22:2d:c8:ec:1e:15:0c:d9:93:79:68:59:
e7:ad:9f:a3:6d:83:f3:5a:03:f8:fc:f8:5e:98:1b:f6:fe:45:
31:f9:06:34:c2:60:e3:79:a1:13:6d:81:0a:e6:b6:38:d0:38:
dc:e3:2a:bc:c4:5d:da:3f:c5:be:97:ae:7d:50:a8:a9:d0:de:
cc:65:96:5a:6f:d9:e1:85:d1:35:5a:f1:61:81:bc:a6:26:2b:
cb:66:59:c5:02:e9:28:c3:db:bc:c4:11:fe:18:6a:c3:c4:85:
7a:91:61:eb:8f:89:c9:8d:9d:13:91:fe:1e:d8:8c:2a:e2:9c:
e6:28:b2:6d:fc:8b:20:c2:e3:4b:96:d2:94:da:de:ac:73:b0:
70:42:77:1f:c5:29:eb:43:5a:a7:ee:ed:15:b4:2b:83:33:12:
0a:26:11:1d:b5:97:cb:8a:21:e2:a8:7d:fd:1e:cd:03:e5:de:
33:5b:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:25:48 2025 by rpki-client