Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File: jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier: LonLHSNu7hXG6N8FSpyD9pnbOLdPbHWQR+UQRlesRKw=
Subject key identifier: 91:A3:8E:CB:B7:09:37:8F:20:4E:5F:B8:95:AC:53:DD:F3:E1:B7:6D
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial: 01964DB4F40A33AF7296D99478112C909D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number: 0B22
Signing time: Sat 19 Apr 2025 11:00:26 +0000
Manifest this update: Sat 19 Apr 2025 11:00:26 +0000
Manifest next update: Sun 20 Apr 2025 11:00:26 +0000
Files and hashes: 1: 2W4793sjPA5QMW_mlfEBfSoM2Is.roa (hash: xqASKHMV7rljYXyQYNSClQ6vovvo85JsyWpLw7N75ps=)
2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: vw7hUC0MpbDEBfzpiWWOrGjlBiQjRZYXeItl0sJJQY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:f4:0a:33:af:72:96:d9:94:78:11:2c:90:9d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Validity
Not Before: Apr 19 11:00:26 2025 GMT
Not After : Apr 20 11:00:26 2025 GMT
Subject: CN=91a38ecbb709378f204e5fb895ac53ddf3e1b76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:72:a3:66:6f:6f:ef:d7:94:78:2d:1c:86:
19:fc:ba:d0:16:8c:15:f1:da:2e:c4:ef:44:ae:81:
1f:4c:b4:bf:50:1a:8d:e4:2b:41:b8:fc:95:e4:4c:
85:80:9b:b9:57:f9:35:0a:91:f9:30:1b:7e:72:0d:
4a:54:d9:09:76:a9:39:04:94:ee:a3:6e:a4:75:96:
0b:1d:dc:7b:88:91:de:79:f4:c3:c4:ab:51:84:5f:
e4:d2:86:6d:65:31:24:a2:c6:40:c3:d8:84:aa:37:
8a:22:84:2d:17:6d:da:71:9c:27:9c:60:71:31:1a:
42:2e:cf:13:95:3b:47:b1:ec:fd:6d:10:a0:5c:9e:
80:c2:12:3a:0a:20:21:46:5d:43:63:8d:cb:39:39:
24:f5:54:3a:89:e4:e0:67:a4:10:99:a1:76:9e:f2:
9d:1c:68:b8:fb:49:8f:84:4e:01:51:6f:87:7a:b2:
0b:75:2f:50:8a:d9:d8:2c:e7:0a:14:c5:97:da:35:
3d:d5:1e:b9:ff:40:8f:12:88:11:9d:ee:11:61:fa:
a3:b3:2b:9f:76:ee:e5:8f:67:4c:46:59:7e:ec:d7:
f2:10:02:bf:7b:23:8f:1d:4d:25:1f:7c:03:7e:b3:
c8:69:6a:58:35:1e:49:25:3f:85:65:ce:dc:5a:c0:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A3:8E:CB:B7:09:37:8F:20:4E:5F:B8:95:AC:53:DD:F3:E1:B7:6D
X509v3 Authority Key Identifier:
keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f9:24:98:68:d6:8a:63:c8:08:a0:a7:e6:9f:ad:8a:83:e0:
9d:10:9e:a9:d3:23:8e:d8:2b:98:5d:92:5f:c8:b1:32:86:eb:
e9:b3:94:ab:86:68:30:8b:a1:be:20:a3:9a:c9:48:49:1f:1b:
b3:42:57:be:cd:b9:c9:3a:c3:3c:9e:8e:0c:b5:06:03:ee:c8:
fe:81:57:46:df:0f:6c:87:63:f4:87:a1:7b:d1:cc:0a:af:16:
41:66:cb:ad:30:c2:ac:72:19:fe:a5:cc:84:4f:a9:42:53:fb:
1f:7f:5d:81:e2:85:f1:6d:1c:73:9c:db:64:e6:97:ea:8e:c6:
b8:a7:c6:e2:a1:94:8b:bb:67:75:7e:89:64:7e:ca:1f:ba:b8:
7a:ee:e0:cc:26:19:8c:6b:2f:ef:e3:10:78:8c:80:36:66:7e:
7c:71:15:87:18:11:43:0b:ac:df:69:b5:64:d7:2a:16:90:e5:
0a:5f:c8:c9:5d:15:18:cd:c2:d9:a5:e0:d8:e1:e4:07:e5:9f:
53:24:3c:86:9e:d3:b9:5f:b5:00:23:59:77:6d:66:b7:da:b4:
00:61:95:63:fd:6d:ea:62:af:c5:a7:14:b7:73:a5:76:b2:dc:
8e:ae:30:94:67:6f:c9:28:da:e9:b1:6e:ce:8e:c8:e8:09:f9:
f3:df:ff:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:04 2025 by rpki-client