Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.mft
File: Jvyww2VaPFLwMKZNtmE5YloP--A.mft (raw, json)
Hash identifier: X9q3DMwDUAXn1tp0RPGeiIIA+g9GcBsnj3oD0LB+YeU=
Subject key identifier: 87:08:09:B9:EE:63:56:B1:45:9E:64:C2:33:48:B1:90:1D:8D:31:80
Authority key identifier: 26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0
Certificate issuer: /CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
Certificate serial: 01964067BCCD05C8BA0573B9AC699AD23D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 21:01:02 +0000
Manifest this update: Wed 16 Apr 2025 21:01:02 +0000
Manifest next update: Thu 17 Apr 2025 21:01:02 +0000
Files and hashes: 1: Jvyww2VaPFLwMKZNtmE5YloP--A.crl (hash: q3vo10rlBpG9cO4WVZ3sidiWdUFeM95zFsnf2OTiHuI=)
2: jp6Dk4OIH5wyM0uJlfUzSca9GNw.roa (hash: IFxU2OJAicnZXyMwvY0QA/kZzJs8on/NYi3IKTX6AZI=)
3: yxofyA5fIMjKe3ieqVgZb-edgIg.roa (hash: +OP6UZvkCAZ/npr1tk+mM2rvs48Bb9dmoLT1SnUOUIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:bc:cd:05:c8:ba:05:73:b9:ac:69:9a:d2:3d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
Validity
Not Before: Apr 16 21:01:02 2025 GMT
Not After : Apr 17 21:01:02 2025 GMT
Subject: CN=870809b9ee6356b1459e64c23348b1901d8d3180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:73:52:6e:30:0a:b4:c5:95:52:fb:66:61:
a3:8f:31:36:bf:aa:bd:e7:49:31:7a:a0:e1:26:cf:
f3:1e:05:f0:ed:3c:d3:c5:29:47:d2:2a:f4:f9:ab:
94:13:38:55:51:31:2c:5b:a8:a3:bd:e5:f7:3f:26:
27:15:28:d2:2b:70:8d:9d:70:7f:65:0b:c4:2b:cb:
3a:c5:b2:ab:bd:75:87:c8:ca:96:00:00:6e:ef:46:
ba:df:fc:f0:6e:48:0d:13:3b:c4:9a:22:7f:6e:83:
b8:16:73:a0:74:66:e0:29:d4:10:e3:88:c0:92:4b:
37:ea:1a:fa:86:33:03:d6:26:b9:41:9d:df:3c:9c:
da:fe:84:76:9a:94:4a:c5:dd:45:d9:48:21:82:c1:
e3:8c:68:fd:c5:d9:36:60:59:d7:26:3f:1a:d1:28:
2d:61:06:c6:2d:57:9c:09:0a:7b:f8:d8:cf:aa:72:
46:1f:db:d7:e5:e8:9d:f1:67:d0:c8:eb:ea:ca:99:
e1:51:ad:2d:13:6e:a1:e6:e1:db:88:1c:90:0b:2c:
87:0a:39:be:e3:f7:5f:b2:2e:4c:22:8b:0d:d3:c5:
d8:b3:93:63:8c:06:88:ce:a3:e3:47:7d:0f:64:47:
f7:61:2e:c7:fc:d3:12:e9:67:5f:e9:ca:a0:64:51:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:08:09:B9:EE:63:56:B1:45:9E:64:C2:33:48:B1:90:1D:8D:31:80
X509v3 Authority Key Identifier:
keyid:26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c0:ea:f3:69:08:e0:60:46:51:e7:8d:73:44:d2:68:cc:f4:
34:32:66:1a:51:6e:62:98:c6:ca:75:15:7a:09:b0:b2:b9:b6:
ce:60:fe:52:bc:1f:06:56:6b:a1:4e:45:f3:fc:db:16:7d:f8:
f3:82:08:6c:da:1f:00:fe:12:5d:39:47:d7:84:db:64:e5:81:
21:fd:23:06:0b:9e:aa:b8:da:c6:57:5b:a7:a3:41:c8:bd:36:
1b:25:3d:bc:e6:df:26:32:7c:2f:fd:7c:7c:27:6b:1d:cb:e8:
14:c7:68:f6:bc:e0:d6:55:e9:7f:75:4b:67:de:1f:83:f7:b2:
1e:74:40:58:5e:11:aa:a0:01:6d:db:4f:de:4a:44:68:d7:d7:
fd:3d:43:61:9d:08:89:a1:c6:61:a2:c3:60:00:4b:30:af:9e:
db:cd:54:70:14:62:31:5c:92:06:6f:ef:25:8c:77:41:33:12:
eb:45:c0:5f:b4:79:6c:64:16:2a:a2:1a:41:76:15:1f:91:40:
ac:cb:0e:9e:40:2e:14:40:28:79:46:a0:be:71:7a:90:53:e9:
1f:f7:e5:d1:47:89:59:dc:b1:dd:6e:41:39:3e:39:63:cb:bf:
ad:06:96:63:a3:85:b3:4c:0d:50:81:9b:58:32:cd:b3:6e:07:
fa:0d:d7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:08:19 2025 by rpki-client