Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
File: JJtVjEhVDgYjTF3f_Kofzy6axv8.mft (raw, json)
Hash identifier: SHVUQcIUo1CDFi0QyCBvWTzYw/nvkRzqUfBiMYib9YA=
Subject key identifier: 75:E9:45:F2:02:97:63:CE:3A:12:C7:BB:3C:DF:58:61:90:0F:5C:08
Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Certificate serial: 01964669ED2E786E0586568DC54F67F78C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
Manifest number: 1040
Signing time: Fri 18 Apr 2025 01:01:09 +0000
Manifest this update: Fri 18 Apr 2025 01:01:09 +0000
Manifest next update: Sat 19 Apr 2025 01:01:09 +0000
Files and hashes: 1: JJtVjEhVDgYjTF3f_Kofzy6axv8.crl (hash: tHRN8VwQFBtchJflmXeVhwKQmI8doVh430LFWB2oqB4=)
2: _9h5ZKwqdSKkErlK3fCYBbj_WJI.roa (hash: UW9SDNl7M71q4Lr8IwhlaiOjT1v+Jp+baAjrn4Vs/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:ed:2e:78:6e:05:86:56:8d:c5:4f:67:f7:8c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Validity
Not Before: Apr 18 01:01:09 2025 GMT
Not After : Apr 19 01:01:09 2025 GMT
Subject: CN=75e945f2029763ce3a12c7bb3cdf5861900f5c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:26:f5:0d:14:86:89:16:72:bc:8b:d8:c7:
e6:d7:0d:63:49:45:5c:ce:90:c2:dd:76:25:45:b9:
51:38:3b:3d:74:59:5a:fa:d9:c2:69:70:27:a9:d1:
ca:43:07:c9:bc:80:4a:14:3d:9c:8e:73:9b:d1:d2:
54:52:79:f5:9a:9c:c6:5c:d3:31:60:39:8c:31:31:
d5:58:92:ec:05:71:4d:20:1a:ce:7e:fd:79:41:2a:
fe:fa:b1:6f:f7:bd:df:a9:0d:df:29:8e:0c:ad:fe:
05:3b:e1:27:d3:b3:9a:22:ce:90:16:dd:9b:2e:c8:
9a:be:b1:3a:57:31:de:3d:2a:2b:c1:8a:f8:91:66:
bc:6b:7f:eb:35:08:6d:f0:82:c1:30:01:3b:cd:a6:
6d:b5:56:d3:a6:c5:91:91:ed:e6:0b:bb:a3:3b:02:
71:0a:84:88:0a:3b:b6:e4:99:ac:54:8c:9c:86:6d:
09:a8:2c:2c:a8:78:b3:ea:88:1f:6b:20:90:25:00:
79:f3:ec:fa:15:60:c6:39:25:5b:b0:64:6c:ea:ff:
38:f9:01:3c:0f:f3:31:ce:02:84:bf:7a:ca:2b:a8:
c5:0f:67:6a:be:dd:98:00:0b:14:cd:b7:6b:71:22:
27:91:36:ea:e5:b5:d5:4d:1f:23:b9:a5:7a:39:28:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E9:45:F2:02:97:63:CE:3A:12:C7:BB:3C:DF:58:61:90:0F:5C:08
X509v3 Authority Key Identifier:
keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:38:af:8f:1e:75:49:02:79:70:16:42:e2:a7:80:9f:55:42:
e0:9b:3d:92:8a:26:04:ca:68:81:d6:4b:e8:4c:b8:ee:64:c2:
19:ee:b7:02:68:16:26:21:5e:23:cb:64:13:ee:79:a8:f3:46:
cb:bd:f2:3b:d0:c5:a2:09:95:f9:7b:ff:4d:22:c3:7d:fa:04:
23:a4:68:cb:40:2a:6a:70:b4:33:a4:0d:d2:58:a3:0e:cc:c5:
8f:61:38:ea:b4:a2:df:2b:a7:81:b2:c6:8f:73:41:51:9b:84:
5f:f7:b3:63:5d:91:f1:99:35:6d:25:26:41:44:d9:b6:5f:a3:
a3:d2:1e:33:77:f5:f8:29:1d:1c:fa:15:c2:e6:76:a2:7b:70:
56:6e:7c:c6:43:e3:b2:ab:66:90:33:03:f7:34:ec:fe:d5:28:
dd:9f:07:3f:43:92:17:0a:62:ee:a4:5f:01:5d:16:3f:31:06:
4b:69:66:66:72:48:10:27:6a:40:2e:f5:5f:71:44:a6:71:25:
0b:24:79:33:5e:5b:81:f8:ef:f5:ed:51:36:ab:9a:c9:c7:65:
73:9e:62:d3:aa:3f:a6:89:ea:0c:5b:aa:0e:71:60:02:fd:72:
1a:26:1a:56:f7:a1:15:fd:cf:17:b7:49:c7:1b:70:ee:05:14:
2f:2c:a2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:14:42 2025 by rpki-client