Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: rswhaflfhqDi8ouWpyfbd5eBAdOGAifiNNwvXkwuGvY=
Subject key identifier: 6D:DA:65:C5:43:13:9E:AE:C4:DA:05:FB:42:46:52:E5:A7:9B:F3:49
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 01960377160643EF94111837AD2CB1E419B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 14B8
Signing time: Sat 05 Apr 2025 01:00:58 +0000
Manifest this update: Sat 05 Apr 2025 01:00:58 +0000
Manifest next update: Sun 06 Apr 2025 01:00:58 +0000
Files and hashes: 1: UNUa4oFxwFdm00m5r-G61s8Ikh4.roa (hash: k9276a/1X0ewFXRF6cwjGjRo8BKQKSRBiWAxipeCeXc=)
2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: DPA2QUMjTx/lf2wU/mBk8i3wnug+aZwOjp8BQG7dke8=)
3: nFwSDt7zXXCk1k3rMZvJ-zj3Fu0.roa (hash: g/i/k3s/MVqnbweAQkw4FIePeqK2H7kiTAvv/06+PxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:77:16:06:43:ef:94:11:18:37:ad:2c:b1:e4:19:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Apr 5 01:00:58 2025 GMT
Not After : Apr 6 01:00:58 2025 GMT
Subject: CN=6dda65c543139eaec4da05fb424652e5a79bf349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:d3:0e:dc:c2:c2:68:ed:1b:b4:27:4b:73:
21:0c:35:f5:8d:22:7d:e6:d9:ad:a5:5c:3b:70:28:
f2:00:2e:5c:a6:f4:18:e8:16:6c:1c:41:05:79:9d:
bb:1c:11:17:53:a7:72:5b:4d:ac:9f:28:0a:5c:9a:
05:72:c9:3c:63:26:8a:ff:15:18:35:70:6c:25:19:
01:18:26:a3:a1:c2:aa:49:94:89:dd:74:ce:ae:94:
77:3b:3d:e8:2d:e4:68:59:69:d8:a2:5f:92:dd:c1:
ae:26:65:8e:6d:87:f8:3a:24:e4:48:23:00:47:49:
a1:36:5a:0b:3d:15:78:ca:40:ae:ce:35:e1:5d:20:
15:5f:ff:4b:41:69:a7:65:81:6b:de:97:34:8f:9b:
71:ed:18:6f:c8:d5:7d:5f:89:02:c8:72:6a:cd:51:
57:de:04:c7:b1:21:67:41:eb:25:8c:bf:75:86:bf:
68:56:0c:41:6c:5e:fd:6d:fa:93:f8:34:ed:c4:70:
18:c6:bf:80:1a:0d:df:9e:04:71:db:71:64:f2:4a:
cc:c7:ac:a0:29:b0:44:2c:47:ab:ae:93:b4:98:4b:
d0:64:81:1f:1e:68:56:87:75:35:3b:89:06:03:dd:
1a:ca:e2:cf:04:ae:26:d3:b9:77:99:e0:c6:d4:62:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DA:65:C5:43:13:9E:AE:C4:DA:05:FB:42:46:52:E5:A7:9B:F3:49
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5c:72:08:0c:9f:26:56:21:67:53:bc:a7:c9:ae:92:1c:66:
08:ab:bf:26:7c:f6:6d:27:e9:4a:32:da:43:48:55:95:54:7d:
21:eb:5c:21:bb:f8:ea:63:76:4f:ab:fe:75:3c:b4:b4:ef:09:
55:53:a7:19:a8:57:1e:18:66:72:c5:32:78:dd:2f:a5:2a:61:
37:85:8d:4c:7b:d2:78:cf:18:c6:8d:a4:5c:65:89:61:c2:b0:
a8:71:bc:ef:d6:1c:53:f0:31:93:91:75:18:e7:b1:0e:8b:54:
c2:6a:9d:73:f4:3c:e2:7c:51:9a:f4:ff:03:41:92:f0:b0:f3:
5e:4b:54:3d:48:64:91:d2:c1:df:5b:9b:6d:67:53:fb:75:c6:
91:6d:0a:67:86:80:24:1f:e1:26:d0:e1:28:d7:33:e1:31:82:
15:d1:90:0c:0f:d5:78:88:49:d7:aa:16:39:b7:7c:e5:9a:8d:
c1:ad:4f:08:d0:c9:72:4a:2d:fb:df:b2:c1:02:0c:3b:5f:29:
4b:af:d3:da:93:34:31:7d:8c:d3:12:8c:b3:b1:b5:7f:0e:17:
bd:fe:5f:1c:d6:ff:0d:7e:31:12:67:c2:b2:b3:06:b9:08:75:
e8:83:8b:25:a7:b0:87:d4:4b:d4:51:0d:74:03:31:65:c6:27:
ef:ac:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:48 2025 by rpki-client