Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
File: jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json)
Hash identifier: 4AQSKRnGZiuBcHhPcVQIP8FAUGUXhNjotCg2DYXgllQ=
Subject key identifier: 9D:23:F7:FA:06:88:ED:4F:83:59:FE:42:46:D7:34:81:73:EE:7C:7A
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial: 01962D8637AB3CD6EFEE689F444E727DA69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
Manifest number: 1044
Signing time: Sun 13 Apr 2025 05:01:32 +0000
Manifest this update: Sun 13 Apr 2025 05:01:32 +0000
Manifest next update: Mon 14 Apr 2025 05:01:32 +0000
Files and hashes: 1: FveeOj9l7FxxmRsSwt1HgCwwQeA.roa (hash: M4dtF8jy0wzwUCk1jVRckWxwU5GEJHMwlYsYHLu5Fdo=)
2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: dL9z4aZU7ZnkXlbUifyVMrJ8dfAapdSu8T5ENAOQ36k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:86:37:ab:3c:d6:ef:ee:68:9f:44:4e:72:7d:a6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Validity
Not Before: Apr 13 05:01:32 2025 GMT
Not After : Apr 14 05:01:32 2025 GMT
Subject: CN=9d23f7fa0688ed4f8359fe4246d7348173ee7c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fe:75:29:e1:d5:b8:d4:14:56:22:79:65:81:
d0:e5:5d:e0:ed:bd:00:9f:51:f0:af:4c:a0:bb:c2:
3b:d3:6a:25:db:5a:8a:db:89:10:9d:d8:9f:06:ca:
0f:57:8c:49:7d:35:6b:9d:9f:7a:de:9f:32:4f:3f:
6c:91:ea:a2:a4:68:d5:24:07:f9:de:05:05:96:30:
ab:bf:2c:28:41:af:86:70:e1:eb:94:62:d1:2e:94:
6f:28:71:07:0c:20:0a:9d:4a:d9:a3:66:30:50:fb:
5a:bd:d5:95:3d:35:ea:7b:d1:e6:91:0b:16:91:1a:
9c:c4:1d:85:8d:80:68:72:80:af:8f:30:31:73:21:
09:68:4d:29:b0:11:7c:53:35:63:8d:27:7f:56:68:
9c:94:27:c6:80:48:8c:93:94:b5:dd:f2:df:06:a5:
03:47:52:c8:6e:d7:cd:7e:18:2a:1a:2d:ee:d4:a1:
a5:f3:e0:3a:f0:c8:e7:be:18:8f:40:99:7c:1b:e6:
29:54:f4:35:1e:3a:cd:f5:8b:5e:91:64:a4:84:a6:
b7:04:49:b5:3e:b9:8f:a2:ad:f4:98:d5:44:9f:fd:
06:f7:70:8b:dd:ad:11:7c:8a:98:ce:06:55:74:0e:
94:be:86:02:3b:74:bc:54:26:83:27:1f:e0:eb:ee:
81:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:F7:FA:06:88:ED:4F:83:59:FE:42:46:D7:34:81:73:EE:7C:7A
X509v3 Authority Key Identifier:
keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d0:70:f8:20:a9:66:cc:f5:ed:5c:66:45:fa:08:f7:a0:40:
4b:21:82:e2:d0:e8:b3:19:96:cf:34:84:a1:e9:c6:72:5c:33:
8b:08:d4:c3:08:8d:8f:1b:cf:53:75:66:3b:6b:3a:27:0d:31:
5f:37:31:0a:a6:a1:9f:cc:23:2a:fe:cb:8d:d6:87:c2:aa:43:
17:54:72:a7:5b:49:54:d9:49:51:6b:76:ec:d2:27:64:f1:a8:
95:52:7a:0d:f6:b6:d3:62:3c:99:fe:ab:51:2f:32:d8:98:53:
0b:2a:40:0d:fe:98:8b:7e:b8:d0:f6:f1:12:b0:14:bd:98:ac:
bf:3b:7c:7a:0d:26:61:a0:d6:97:04:c0:86:8a:55:3c:8d:a1:
66:08:f2:d9:ee:16:18:7f:70:84:d0:e7:d1:07:5c:e8:00:cb:
1e:23:db:f0:22:7a:b1:36:83:9d:5a:41:48:7e:70:f6:40:0b:
8b:2e:1c:ac:b4:80:9b:02:9b:c4:ba:f9:be:32:2b:9d:1d:6c:
f2:cd:1b:da:f1:54:ca:55:59:89:9c:10:4d:05:ad:b9:cf:5d:
3b:aa:df:5f:ea:6f:29:c8:82:de:f4:74:5f:25:26:44:43:2b:
fc:aa:e2:fb:6d:50:12:2d:8e:98:c8:31:9f:37:ec:91:d6:04:
b4:37:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:10:59 2025 by rpki-client