Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json)
Hash identifier: Aq0Cy4ezXd3m2IEICUtGQX3IEjetwwIVlo3P5nWaNxE=
Subject key identifier: D5:AC:92:5F:C5:6E:7A:65:F2:F9:54:10:6F:39:DE:F0:19:5E:EA:37
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 019646A07C87D6C6A9BFB52658096901BE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
Manifest number: 0FD8
Signing time: Fri 18 Apr 2025 02:00:44 +0000
Manifest this update: Fri 18 Apr 2025 02:00:44 +0000
Manifest next update: Sat 19 Apr 2025 02:00:44 +0000
Files and hashes: 1: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: wWuq5w0CxfwwVUbZmvtQ9aLCRpBOPBU2OeHN8jGcMJo=)
2: oBH_u1PqllstMg1clbDeim1fyyE.roa (hash: L3SOkvuxnMh5EHKE9/YilBcdLKJMaucr/0ncA4MIDhw=)
3: zHs9cFuQEsCg45LnMiCsOF3kF4Q.roa (hash: C6+fwUFGNJ/F4sEfe/qDP+eEAltXpbDsycsJBFRmzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:7c:87:d6:c6:a9:bf:b5:26:58:09:69:01:be:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Apr 18 02:00:44 2025 GMT
Not After : Apr 19 02:00:44 2025 GMT
Subject: CN=d5ac925fc56e7a65f2f954106f39def0195eea37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:66:5d:ef:33:ea:42:6f:21:47:ef:1b:df:
41:ff:d5:a0:be:a7:34:81:ff:66:e7:ef:0c:fc:48:
67:a1:d1:67:d9:77:b4:f6:7f:c0:70:0b:3d:ca:49:
9f:34:6c:8b:a1:52:23:db:89:d0:c4:c0:5a:32:b8:
e4:30:f2:ec:62:24:a6:d5:b1:73:3b:9d:0e:b5:e9:
df:61:0b:95:0c:84:0e:bc:29:bc:97:c7:db:88:47:
68:3a:88:9c:fd:45:96:3d:b5:88:c8:f3:3e:31:cd:
b7:6e:91:33:2c:d8:3d:1a:65:f9:3a:59:7f:34:89:
82:72:57:c8:e6:c0:eb:0a:85:26:0b:48:73:f5:71:
e0:b5:70:c9:00:aa:13:ad:26:d9:d1:4a:45:2f:59:
a0:95:98:b6:71:46:d4:28:87:ea:7b:ad:a1:77:55:
6d:fb:8f:14:d4:88:78:74:5a:bb:d1:9c:a8:0b:04:
c2:aa:1d:1f:63:05:ca:88:b1:95:47:46:69:11:24:
e9:9c:b8:5b:a4:f6:73:5e:fe:89:1a:48:8c:7e:4b:
f4:7e:03:34:e3:7a:52:7f:09:26:f8:8d:71:76:ff:
15:7a:62:14:9e:e0:3f:64:f5:ff:60:2b:d2:d4:a9:
7f:07:dc:32:62:75:2a:ff:4e:49:97:0f:60:4c:a8:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AC:92:5F:C5:6E:7A:65:F2:F9:54:10:6F:39:DE:F0:19:5E:EA:37
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:92:13:90:a9:b4:3b:d4:72:c3:4b:18:49:01:cb:bf:62:ea:
4f:11:26:a0:60:4c:8c:2b:62:d6:4a:24:17:82:61:4d:dd:b5:
47:94:85:16:84:e2:d8:d9:79:14:32:e3:44:07:71:10:63:ac:
44:ee:3c:74:d7:39:45:10:f8:c9:17:c2:61:75:50:50:f9:2b:
08:c5:72:36:40:7f:59:eb:3a:2a:c5:39:8e:3f:2a:0e:5b:a7:
47:c0:eb:e1:ca:5b:67:7f:b4:82:a6:56:97:23:cb:83:9f:1f:
aa:ae:d1:9b:f0:dd:f3:e4:ed:08:ea:2d:dd:2e:2d:87:96:14:
5a:06:55:14:1a:ff:d4:1c:59:90:fd:97:a8:70:bc:66:18:d5:
93:b9:ee:55:b9:16:5c:7f:1f:0f:e3:f0:7e:fe:c2:aa:58:35:
2e:72:53:b5:27:45:15:fc:0c:0b:3e:39:91:47:ae:27:f2:0f:
6b:7d:37:4a:6b:db:51:7c:2f:7a:00:02:1e:3a:c6:8d:e3:8f:
41:40:3e:21:45:53:a0:d4:9d:38:32:f0:68:84:4c:44:24:90:
95:5e:9f:cb:76:dc:dc:9b:fd:bf:88:94:0b:f1:fd:e7:07:1e:
4b:a6:35:4c:7a:d1:b0:ef:74:aa:72:22:e3:65:48:2a:26:e5:
b4:4e:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:58:46 2025 by rpki-client