Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
File: JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft (raw, json)
Hash identifier: 9PhxDGcPTAnHVhJuPA1CYdlneC9NAarkBNYaMo7lVkw=
Subject key identifier: C6:0B:FC:AD:77:A1:33:E4:DF:AB:22:E6:C8:E2:74:F2:0D:13:54:FE
Authority key identifier: 24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
Certificate issuer: /CN=24bc98ddeefdb561aa69eca7349060d84059e192
Certificate serial: 0196519205CBE33709DBD092B9A7D53371B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
Manifest number: 038A
Signing time: Sun 20 Apr 2025 05:00:46 +0000
Manifest this update: Sun 20 Apr 2025 05:00:46 +0000
Manifest next update: Mon 21 Apr 2025 05:00:46 +0000
Files and hashes: 1: 9XlHb8rJg-OmDPMs6N_TKhkkHb8.roa (hash: cpk83kEdrOWJJYVKeP1fpe20g1cPT7sKTkIKvw0KJjI=)
2: JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl (hash: RTcx5eWmJVEZvZTQ7rWAyk2n5gLgZdZo1fMPtErK+L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:92:05:cb:e3:37:09:db:d0:92:b9:a7:d5:33:71:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24bc98ddeefdb561aa69eca7349060d84059e192
Validity
Not Before: Apr 20 05:00:46 2025 GMT
Not After : Apr 21 05:00:46 2025 GMT
Subject: CN=c60bfcad77a133e4dfab22e6c8e274f20d1354fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:e3:e2:d8:5e:01:30:f0:08:99:52:3f:4c:
c7:e9:ad:70:ac:7b:cc:9c:cb:c0:45:e3:8d:ff:11:
8b:c2:0c:f5:3b:af:f6:2f:0c:f1:90:d0:1a:c9:ed:
f7:8a:18:66:6b:02:3f:e2:29:e5:c3:47:68:19:7f:
10:c6:10:c5:9d:e0:55:00:33:c0:99:48:bd:04:4e:
25:18:bd:76:22:2d:f9:f7:ac:db:47:f9:66:0c:03:
7a:f1:dd:57:c5:a4:ab:3b:06:8e:fc:91:98:0a:71:
b8:23:46:de:8c:80:8a:c8:f8:90:2e:80:c8:62:66:
5d:45:f3:2c:69:81:a3:8b:73:cd:d0:a8:6a:41:a9:
91:14:f7:e3:e0:d8:bb:40:27:99:15:e6:63:e0:61:
aa:6d:3d:0c:f6:a2:c5:3c:f0:8c:f0:5f:1b:a6:d6:
74:14:e7:9e:56:1a:a2:76:4e:8b:71:65:88:8d:9d:
04:d8:12:3a:66:88:52:3a:7d:bc:c9:bc:75:a4:91:
d3:e4:29:be:32:10:6d:a4:08:96:b3:b5:a3:22:7b:
d8:05:2a:c0:1a:7f:49:ea:5e:ff:78:56:4a:db:93:
66:0a:30:c4:10:b0:9c:cf:36:55:63:ff:20:37:33:
05:27:1c:2c:98:c9:84:65:44:74:31:30:5d:0f:f5:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0B:FC:AD:77:A1:33:E4:DF:AB:22:E6:C8:E2:74:F2:0D:13:54:FE
X509v3 Authority Key Identifier:
keyid:24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:62:57:13:f5:16:73:15:eb:0b:7c:b7:e6:87:a8:3c:0c:a6:
a6:46:6f:bd:74:f8:21:8e:fb:b0:80:3e:66:0a:f8:f9:c4:15:
37:65:4c:39:d5:d3:90:14:74:24:2f:b2:25:a8:e6:4e:ce:2f:
07:b7:f9:4c:85:3f:c4:69:10:e7:c2:8b:e3:4f:d1:0c:27:03:
99:5e:49:88:d8:cd:1f:6a:25:a2:fd:ba:dc:35:4f:bf:1f:5d:
e7:48:ce:bc:98:f0:b9:1c:03:c2:a7:cf:ee:71:00:10:8e:0e:
dc:3c:56:3b:ff:96:a2:a8:a0:eb:de:17:a6:f7:19:d9:40:30:
3e:bc:fc:08:e4:ca:93:20:8c:f3:8d:88:72:c3:86:8c:1a:18:
e7:c2:92:2b:23:5d:3d:e4:fa:ef:cd:b8:f5:21:e7:87:ac:fa:
f2:18:74:56:f9:2c:8e:a0:5a:d6:90:29:ec:25:7f:45:11:b0:
93:03:f1:f5:05:36:bc:9e:48:fc:c9:31:8a:9a:cb:24:67:a5:
e0:c3:9d:36:75:ec:b4:a9:bc:31:1a:4c:9d:aa:6b:3e:72:b0:
05:80:a9:3b:ae:32:f1:b3:65:0e:7d:7f:19:5e:46:0d:58:9a:
95:c3:26:94:c7:61:dd:8d:53:cd:8e:c1:3f:e9:8b:d3:90:1b:
4b:ef:20:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:59 2025 by rpki-client