Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
File: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft (raw, json)
Hash identifier: 3zFEpTMBKHpnWGrKUYkkBCHIMh3dgUtKL+9hlYAQgOo=
Subject key identifier: CE:25:B7:B4:23:08:50:41:F1:50:E8:F7:63:1B:5B:1B:FB:A0:BE:10
Authority key identifier: 8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
Certificate issuer: /CN=8c029fb18e19c5677244057eda38c63dc18da12a
Certificate serial: 019650ED237930CDC90534750D49E1FACDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
Manifest number: E1
Signing time: Sun 20 Apr 2025 02:00:40 +0000
Manifest this update: Sun 20 Apr 2025 02:00:40 +0000
Manifest next update: Mon 21 Apr 2025 02:00:40 +0000
Files and hashes: 1: Cb3iCmSyTi57Hr9wgt7-XKl22eM.roa (hash: KWc0sd0YcpuWSqdNBF0A6JkpNXMWTuayHXK6TkwuLFE=)
2: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl (hash: a/gPoKY+82wUHlyv+t3kHytr3HIEN1PaGW+5od+8VR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:ed:23:79:30:cd:c9:05:34:75:0d:49:e1:fa:cd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c029fb18e19c5677244057eda38c63dc18da12a
Validity
Not Before: Apr 20 02:00:40 2025 GMT
Not After : Apr 21 02:00:40 2025 GMT
Subject: CN=ce25b7b423085041f150e8f7631b5b1bfba0be10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:a8:91:9a:8b:cc:7c:98:9f:2b:88:82:ea:
b6:c4:2c:a1:15:c3:24:a7:a7:e8:e8:f6:41:db:7e:
72:66:bd:0c:91:ee:73:33:56:9e:a9:bb:32:97:d6:
6a:17:b6:31:04:2d:07:68:12:b8:bd:6a:a7:42:e6:
d5:c9:5c:ce:21:af:e6:63:2c:33:04:29:70:d2:d7:
73:b0:82:0b:81:3b:76:2e:bd:bf:4b:14:0d:33:84:
ba:6d:c8:b1:12:4a:e4:f0:cc:5d:fc:48:89:2b:8c:
d1:76:e4:7a:2b:c5:59:d3:e5:6c:b0:3f:fc:1c:27:
fb:74:60:58:39:94:73:98:b9:bc:d0:aa:b1:5d:98:
8f:18:f2:fc:6d:f8:74:c0:e0:37:dc:0a:51:13:c3:
95:1d:a3:93:89:f8:81:d1:fe:1d:50:35:22:34:c3:
7b:a2:cb:f1:85:39:ce:2f:65:c8:db:8a:49:c4:55:
23:9e:41:d6:fb:d1:f1:04:f2:dc:de:12:2d:2e:7d:
77:34:99:e7:81:ce:8e:5f:98:44:2c:78:dd:91:d2:
6f:a9:b2:21:ec:a3:e8:e7:26:2f:a3:87:ec:ab:a1:
03:08:b5:a2:11:81:85:13:57:84:a6:98:17:d9:58:
8d:c2:04:c9:e4:a9:e8:d2:49:92:00:08:61:2a:82:
e1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:25:B7:B4:23:08:50:41:F1:50:E8:F7:63:1B:5B:1B:FB:A0:BE:10
X509v3 Authority Key Identifier:
keyid:8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c1:8f:5e:dc:e3:4b:e2:fe:3c:dd:32:00:e1:49:b8:98:46:
1d:a5:c6:ae:41:2e:19:7e:39:d7:6e:cf:7d:11:4b:d8:69:17:
b2:d1:31:82:e4:ab:ea:2d:a6:f4:86:5a:30:51:69:3f:c1:9a:
88:87:d0:9c:d6:2d:17:27:ce:77:2f:c6:c4:aa:b6:e5:1e:de:
8d:2c:9a:2e:b2:f2:75:4d:56:e8:bc:89:32:20:fc:12:ef:5e:
7b:54:76:5b:2e:1d:80:60:a2:c4:1e:64:fb:a1:11:cf:3b:0c:
4b:80:ae:ab:ea:a4:5a:37:9f:5f:91:8a:17:47:4d:60:97:b1:
71:9e:24:1b:d4:cb:e5:ef:03:cf:ca:f7:aa:23:da:7d:23:b9:
93:a3:06:7e:78:84:76:35:3d:c9:a5:b5:74:ab:c1:e0:bb:22:
5c:bc:90:a8:dd:5b:b4:38:7f:b7:da:90:8a:1f:d5:49:eb:eb:
8a:3f:00:55:c3:fe:a7:e0:09:fb:0a:5c:e3:07:d5:f3:3a:aa:
bb:57:1c:c7:ee:51:29:0b:e9:fe:3a:23:f0:ac:10:4b:78:21:
96:a4:1c:fa:3b:b9:75:30:34:b7:15:26:7b:9e:3f:e9:2a:bf:
dd:96:a4:12:be:3b:66:11:75:41:35:86:b0:f8:9c:51:e4:d1:
66:6b:dd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:35 2025 by rpki-client