Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: /nFHOm98xKsV3u1AK+8AmdaaF5qSKSn23coD5BjMGIA=
Subject key identifier: D5:41:FE:7E:2E:1E:A7:80:91:D2:E9:B7:3E:BD:85:85:01:CA:F9:02
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 01964857A8523029438BE8F9205BE7DFB615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 14FC
Signing time: Fri 18 Apr 2025 10:00:26 +0000
Manifest this update: Fri 18 Apr 2025 10:00:26 +0000
Manifest next update: Sat 19 Apr 2025 10:00:26 +0000
Files and hashes: 1: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: ZZUahdLc33vLuh+FiKnjgXio9c9pix2GLvdZm1OnYw4=)
2: z839WIkF-YRPS5QNYpBIYDtN3Cw.roa (hash: zP6mCwiE2/gg1MEmkXLbZLBNeMsMnTOwcbXXhGjusFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:57:a8:52:30:29:43:8b:e8:f9:20:5b:e7:df:b6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Apr 18 10:00:26 2025 GMT
Not After : Apr 19 10:00:26 2025 GMT
Subject: CN=d541fe7e2e1ea78091d2e9b73ebd858501caf902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:1b:ba:2e:61:ba:a2:22:67:9c:d5:b0:71:
84:20:c0:6e:16:0d:81:41:2c:45:ae:e7:af:32:04:
55:33:30:53:fb:71:96:f7:47:b7:15:93:1a:d1:a7:
58:cb:a2:5c:fa:57:6b:6d:b0:8f:b7:80:bd:6a:df:
50:73:16:7d:91:fc:55:4d:ac:35:79:a5:bd:8c:4d:
fa:62:97:f7:a7:dd:ec:de:4a:d7:69:f4:a8:c8:0c:
ff:5f:f7:26:56:03:fd:d4:53:53:e5:3d:61:2c:77:
fb:21:c0:7b:84:be:61:2c:52:8b:77:28:84:ca:a7:
12:05:83:a7:6d:f1:99:ef:ac:ee:7b:76:d8:e6:33:
24:4d:81:77:55:ad:11:77:50:12:a3:f4:5b:e4:46:
d1:4b:96:2d:3f:d7:d2:cf:ef:f5:40:be:fe:73:bf:
6c:ea:4a:37:f3:1d:bb:97:fd:89:e1:ad:a5:14:56:
fc:8a:f5:53:49:5a:b9:5c:4b:71:24:be:95:ae:e7:
45:a9:80:1a:b7:78:c2:bb:66:ff:52:47:b9:6e:e0:
4a:8b:18:c0:1c:f7:37:45:06:61:02:d0:3f:01:e9:
32:c1:b4:16:c0:48:d5:3f:1f:2e:96:da:fa:2b:7d:
10:a2:7f:fb:fc:87:b5:5e:46:73:94:b7:60:54:83:
f4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:41:FE:7E:2E:1E:A7:80:91:D2:E9:B7:3E:BD:85:85:01:CA:F9:02
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d7:59:81:b4:9b:98:fc:f0:b9:fd:7e:15:7a:30:8c:c7:1a:
f3:b4:a4:c1:fc:ca:f5:2b:01:73:de:d9:d4:9d:f9:7c:0a:41:
40:4d:a5:9b:72:51:aa:63:8e:09:a0:30:54:b3:83:d4:c2:eb:
09:cd:f7:d5:6d:e6:9b:3f:52:4e:c8:bf:59:f7:bf:4a:d1:ef:
41:00:03:63:2f:2c:c5:2d:bb:14:e8:1b:c5:b2:55:ec:30:eb:
7c:de:37:9d:bc:84:6e:f2:95:be:39:85:08:dc:78:2c:3f:93:
9a:6f:63:7c:96:ad:a3:23:ab:97:ea:db:23:74:76:50:e9:c1:
fe:53:a1:e2:ba:e6:fc:93:15:46:cc:a2:e7:7a:1f:99:42:ba:
59:05:e6:22:3e:b0:14:c2:88:a9:86:4b:65:c1:79:aa:aa:f3:
d3:f3:dc:8f:dd:ff:4e:e8:9d:be:97:b5:8a:1f:9f:e9:44:a3:
b0:71:87:ba:c4:03:6c:6b:88:c4:40:0d:98:ea:b4:e8:a6:85:
f7:b5:07:03:c9:6e:04:b8:31:e4:63:ac:bd:76:8f:e9:61:61:
53:86:a6:48:41:ad:31:30:19:59:cf:d2:4b:56:7f:54:cf:10:
3f:50:ae:96:42:7f:90:f9:48:15:21:9f:72:15:67:91:e6:fe:
db:d2:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:14:24 2025 by rpki-client