Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File: JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier: NOSddojSjG2C+rV+Ht11OhLV2cEwy8FQVIjNPLBtCyw=
Subject key identifier: 21:F9:0D:48:12:99:91:6B:0F:5F:2D:43:85:8D:74:09:11:64:27:40
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 01965B71417DE6D93B535AB414CE64B9BE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number: 05DB
Signing time: Tue 22 Apr 2025 03:01:11 +0000
Manifest this update: Tue 22 Apr 2025 03:01:11 +0000
Manifest next update: Wed 23 Apr 2025 03:01:11 +0000
Files and hashes: 1: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: cStBwZ2O2Ecj48wTGm/fSFWSSjpqsX7ZDKFbbUXDMyM=)
2: fLXiRPdHI-7ZXM738GnPEvoiyOc.roa (hash: mxOqTfa0/eUKhzvYGP8+UstSP5NK5/GLU01oehfJvC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:41:7d:e6:d9:3b:53:5a:b4:14:ce:64:b9:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Apr 22 03:01:11 2025 GMT
Not After : Apr 23 03:01:11 2025 GMT
Subject: CN=21f90d481299916b0f5f2d43858d740911642740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:72:16:0b:6e:25:98:3d:ae:c7:1c:d6:91:
7f:d3:02:c6:ab:83:2f:72:29:bd:2f:e9:53:af:ad:
00:8b:1b:c6:e3:6b:d5:b9:3b:de:92:53:4b:4b:a1:
c5:80:07:7c:b4:ba:a5:5b:2d:65:3d:a4:3c:62:9b:
b8:8a:51:e2:b6:f2:2c:f0:9b:4a:31:79:22:05:cc:
4e:85:66:9b:e5:03:63:e8:5c:f8:e7:af:90:d8:0e:
cd:87:9f:c0:2d:53:e9:a2:b0:9f:eb:c4:85:24:79:
a9:1d:05:74:78:d7:a0:3f:20:5d:df:09:0a:2e:ee:
36:e5:fd:87:98:ae:f4:2d:bd:64:14:fe:df:1e:cd:
6e:86:55:e1:21:10:95:3d:08:e1:88:e9:81:58:6e:
9c:1e:56:99:36:a7:63:0b:d1:2a:a8:a8:2f:38:d1:
e4:26:34:1d:24:d3:43:b9:ce:21:b9:ea:45:98:dd:
83:08:6c:41:e2:71:7f:4e:a2:d0:fe:f7:00:60:6b:
59:1e:33:1b:53:87:58:de:d9:40:bb:9a:c0:c4:e2:
25:67:ca:38:b3:46:80:34:9b:41:22:bf:71:ff:4d:
94:65:41:b1:b1:15:7f:bf:31:a3:c3:ef:63:a9:4e:
f3:7a:ae:97:e1:8c:6e:19:33:7e:a4:72:80:d9:55:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:0D:48:12:99:91:6B:0F:5F:2D:43:85:8D:74:09:11:64:27:40
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4a:79:65:ae:c9:c6:7c:4e:5b:3f:df:2d:86:3a:d5:7d:cd:
8a:26:e9:cd:da:ba:0b:f0:aa:a1:40:2c:a7:39:6f:88:c2:6d:
6a:27:81:2c:97:5a:ea:70:e8:d4:af:eb:ae:b5:7c:b5:72:ea:
0b:d2:6c:ae:73:37:01:9b:3c:e9:99:1a:5d:53:ad:7a:2c:98:
a6:78:25:a2:9d:6e:65:a7:87:db:3c:64:f5:68:78:c2:d3:7a:
08:c2:52:84:5c:e2:36:5d:7c:90:67:79:9d:f2:54:4c:89:7f:
eb:42:56:ee:dc:26:04:3b:42:32:79:18:f0:57:46:01:a8:9e:
34:96:ac:8a:67:95:8e:cc:6c:ab:cf:84:44:17:29:4e:f4:1e:
72:14:95:b6:b5:0c:ec:40:97:9c:40:61:72:6f:1e:59:f9:27:
76:86:57:fd:96:95:e6:ed:3d:de:f9:0b:65:9e:f4:e8:49:47:
31:de:4a:fb:fa:d7:b4:3e:3b:48:01:05:60:58:59:23:4c:45:
66:9a:b8:cd:2b:e3:a6:cc:6c:d4:70:34:a7:6c:bb:ad:0f:8a:
bf:f6:df:3d:29:77:7f:22:23:08:47:d2:38:fd:fd:42:5f:fc:
7f:c5:f8:21:d7:4c:33:e5:6f:3f:9e:c7:d1:ee:3d:be:ed:ba:
35:1e:e9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:55:34 2025 by rpki-client