Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier: b3XmfnUlZlMdN4SuixdKgtJyH9LqjO/XeQN7Y3o7ZD8=
Subject key identifier: A6:55:B9:97:AF:DB:DE:CE:5F:F7:07:84:CA:2A:C1:9D:36:49:96:6A
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 01960678EEDC84D29A19DD5A6106208493E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number: 0D06
Signing time: Sat 05 Apr 2025 15:01:50 +0000
Manifest this update: Sat 05 Apr 2025 15:01:50 +0000
Manifest next update: Sun 06 Apr 2025 15:01:50 +0000
Files and hashes: 1: CicZBBxXimIHZjGjJxw0-P_TKwA.roa (hash: WCF5D0GYPfyQKw7aRx70x9QWu1BJyay4IJiNMiHqns8=)
2: H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa (hash: VX1SELBTMMOXweJZC3AHO0K6SmWP/UMVdMCZso8oNU4=)
3: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: U2C4IBXOj3CjlIA0naekrmYVbakFgPp35I0grKCQgm8=)
4: KBHAEuTQwMUyiCX_3RfZwtGUVwk.roa (hash: MrQgPzvtmJ1OylGpfrcHItYSdYG/3jwcYZSpyY/5nO0=)
5: Xud5emWKez2CWje3_uKElUeeYZM.roa (hash: JEEaFQSLgyko90PuBT5aCnY8R+bLlVoo/ly+wTonPTM=)
6: aLqHk2UMrsAFp8O_WkYeTwl3zWg.roa (hash: KSJSQQgNlVfvoPK0hF2rIvdyy8wj5LGpw3RQ1LyRxBU=)
7: gQWFEkun2ccvVh53BL0LLh5mo3I.roa (hash: Tz3OrEHIL28w3om3xiZeD8yyhg/V93Fe5zZKo9SAMIg=)
8: lyRiID6blcYjTxuro8RbRo8yBq8.roa (hash: URzaCIkjGunchT54U9dPfC35zUMjoPWxJXeabV1SOog=)
9: yfa_WQD3YpUEPvOqlipnQtZKTbU.roa (hash: aUGBtF0Q+ZPDnjAMxIqBivvu5PiTIPwqlssloFoWyho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:78:ee:dc:84:d2:9a:19:dd:5a:61:06:20:84:93:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Apr 5 15:01:50 2025 GMT
Not After : Apr 6 15:01:50 2025 GMT
Subject: CN=a655b997afdbdece5ff70784ca2ac19d3649966a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:61:d5:79:08:d8:ed:d4:92:5a:73:3b:87:
39:d5:70:a6:d9:ff:6b:07:16:25:27:5c:38:9e:82:
4a:23:92:b3:36:66:74:36:55:6d:b7:6f:53:b4:ef:
f7:c5:4b:77:33:48:90:58:89:a0:b9:f7:71:83:99:
0e:79:e8:9b:15:04:3d:ca:bb:49:b6:5c:57:11:38:
5c:00:51:22:9e:9f:d1:c4:ce:18:3d:73:48:e0:7d:
0a:6c:9d:9f:25:65:1c:5f:ec:98:03:54:6a:57:95:
0d:ae:28:ce:1e:c9:80:50:c9:e2:85:82:37:be:6d:
53:95:ba:8d:5e:42:e3:b7:88:7b:a7:06:3e:31:e9:
1c:c6:33:09:79:c1:49:19:9f:89:ac:7c:64:b8:18:
72:a8:f6:66:89:ba:be:97:ea:ce:c4:95:6d:2a:8d:
4f:b6:8e:02:98:27:16:78:0d:74:1c:fe:8c:8b:62:
c1:b4:8c:ed:2e:54:27:61:56:76:73:7d:a3:9c:c8:
69:b1:06:93:f0:5e:b2:1c:e6:0f:1c:69:2a:a4:d7:
ca:79:e1:f6:dd:7d:f4:51:c8:1a:57:0d:55:09:9e:
e5:b6:68:57:bc:ee:18:cf:64:0a:16:d9:b2:41:bd:
86:1b:c8:ed:5c:9d:b3:67:57:72:43:2d:fc:ff:4d:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:55:B9:97:AF:DB:DE:CE:5F:F7:07:84:CA:2A:C1:9D:36:49:96:6A
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:70:17:98:77:ba:92:2d:4c:66:f8:e5:56:18:98:5b:b2:b0:
e4:b0:fb:00:c3:9c:63:db:67:37:e8:7e:2e:04:a5:56:75:f2:
85:71:e5:a9:dc:ef:49:5b:49:6d:cf:c3:8d:75:15:fe:37:7b:
20:ca:86:a8:c5:fa:9e:1e:b9:96:c6:7a:5d:c8:ec:a2:54:e5:
40:5c:a2:1b:77:e4:ec:2f:52:25:2e:5a:95:1d:3f:4f:d4:b5:
03:42:42:35:54:0b:69:9e:e2:c5:ae:1a:28:53:eb:4d:38:ef:
b5:da:14:7a:1e:04:80:e6:e3:88:72:5f:86:c7:d1:e2:d4:fb:
08:2d:11:35:26:92:0e:a3:9c:cd:b1:6c:21:f1:dc:53:10:5d:
fa:42:71:78:89:d9:89:26:ea:07:5a:32:6e:09:d5:9a:00:d2:
9e:28:50:42:13:cb:63:33:32:c2:30:a9:94:0d:7d:87:47:c1:
4b:6a:07:e6:50:d3:64:b3:a9:21:24:2f:6d:79:94:39:b8:cd:
2b:d6:6d:5c:a0:41:2f:da:67:d6:6c:66:af:4f:07:26:17:89:
4f:ac:f7:fb:1b:c0:26:00:fc:fd:1a:85:16:1e:e1:3d:1c:52:
85:ee:c2:aa:70:ca:ff:82:81:1c:b5:15:ef:c5:9d:fe:5b:18:
60:dd:71:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:57:58 2025 by rpki-client