Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
File: jb7S38YJhwkqB6Dty0arFMv3QxI.mft (raw, json)
Hash identifier: XvU2Uk66Dy4F1d8adFcRShPJCXY5rIQo/xq15WjXvEE=
Subject key identifier: E9:06:64:36:2A:82:3C:E0:F6:07:6F:7D:CC:4F:4C:94:4D:96:B1:33
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 01962B9815F9BA47A65A75374F839F586301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
Manifest number: 1042
Signing time: Sat 12 Apr 2025 20:01:49 +0000
Manifest this update: Sat 12 Apr 2025 20:01:49 +0000
Manifest next update: Sun 13 Apr 2025 20:01:49 +0000
Files and hashes: 1: MEDzHD9q2eGweUQdapdjXMBMfTQ.roa (hash: zXMAfE64URHINF27A6nJI8RqMOkKP0TBeGh/Il74bmY=)
2: TJNsPm3cbta4SQWCq5-FtGHmun4.roa (hash: /493UDv5vGkPWe3z6b3+uF0MkKOjrmJEUEa2xUPVozs=)
3: jb7S38YJhwkqB6Dty0arFMv3QxI.crl (hash: 9lsGcbSllbZaHBhxOqtvybAD7yG+qJnrB0ApNE+eZT4=)
4: sL9Kz85GaDEa7LnBULtmZSLy-lo.roa (hash: XUJoqmnJJ5H1J5j7ZDude3PAUu4a4U54u3Ws3xOI5pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 20:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:98:15:f9:ba:47:a6:5a:75:37:4f:83:9f:58:63:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Apr 12 20:01:49 2025 GMT
Not After : Apr 13 20:01:49 2025 GMT
Subject: CN=e90664362a823ce0f6076f7dcc4f4c944d96b133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b7:d7:0c:e3:e3:f8:98:8a:4d:ee:9e:19:95:
23:3a:1e:d8:0a:da:b1:00:b5:9e:36:8f:69:5d:2d:
13:f6:80:11:e1:30:42:a1:43:50:72:29:28:d3:8d:
37:c2:da:7b:33:b8:95:0d:85:0a:aa:65:64:8f:05:
09:fa:e8:ae:b8:0a:3a:06:cf:40:b7:73:0d:d8:c4:
9a:68:b0:0f:1e:0c:e9:08:14:f5:a8:2c:d1:4e:73:
c8:02:2b:9d:be:27:ff:26:c8:7b:97:f8:88:80:50:
5e:58:c1:69:60:55:67:82:d8:c1:2e:58:5c:d7:60:
c2:cf:4c:f4:47:8e:f8:da:b2:c3:05:f2:eb:01:6d:
21:31:f9:3f:59:fa:5b:15:1d:de:db:82:00:db:0e:
90:fa:df:e5:e8:e9:18:00:38:f0:e6:ac:9e:f3:bf:
39:f6:9e:0c:ec:90:fb:04:f7:fd:91:4c:85:45:7a:
f0:47:08:ab:15:56:56:f9:45:0b:a6:47:35:d4:7a:
80:c2:9a:cd:e2:24:ac:24:d5:79:c9:59:1c:d3:c0:
02:a3:de:da:b1:77:2b:e6:6c:55:2a:01:3f:62:4d:
58:9b:6b:2b:ac:1f:d2:b4:5f:8a:91:2e:70:f8:da:
af:49:a2:26:51:39:d2:25:a9:7b:ed:b8:52:29:7f:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:06:64:36:2A:82:3C:E0:F6:07:6F:7D:CC:4F:4C:94:4D:96:B1:33
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8d:35:36:4f:5d:bb:4d:03:01:fa:45:2f:65:82:7e:7c:b5:
78:04:9c:dd:a6:00:01:a4:4b:db:b5:0e:bf:60:3e:0b:60:36:
66:77:29:db:9d:a7:42:a2:5e:55:17:df:17:08:93:62:8d:9c:
6d:23:82:2c:56:71:fd:07:d9:4d:fb:96:c3:0f:a7:a4:77:50:
d1:85:4e:4a:20:ad:6b:dd:64:d7:9c:96:5a:e9:8e:c0:50:bd:
48:14:93:7e:ff:db:3f:f7:3b:8b:d7:20:bf:20:1d:33:f3:db:
11:b6:c0:c6:0f:2b:77:74:3b:78:3b:f5:69:3b:4a:70:fe:16:
94:25:a7:04:b0:84:b3:ad:c0:44:6c:b6:60:cd:b3:fa:a3:0a:
02:45:83:de:26:3c:b6:96:15:f0:fd:33:06:7b:9c:3b:fe:ca:
bd:7f:c9:09:11:7a:96:0c:08:88:70:56:de:8d:a5:aa:da:9b:
74:e7:7a:31:49:52:13:1f:cf:9f:9a:22:50:1d:10:ea:f4:a5:
fb:b4:5e:3c:9f:36:9e:8f:9d:89:2f:e5:9c:b8:ee:99:e9:92:
e9:e7:8f:b5:f9:3d:7d:a7:05:3d:95:8a:5b:a5:ff:7e:e6:b8:
49:86:61:4c:23:d1:0b:89:3f:84:73:9a:56:55:23:f5:54:b3:
d7:82:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:57:21 2025 by rpki-client