Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: uCbZew+lj+SC/1by3PNREiA30ZhfyyhtL6Z389h8ymw=
Subject key identifier: 15:DF:74:D1:35:35:2D:13:AC:CC:2C:79:CA:36:45:34:B9:F9:C1:93
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 0196526DCAB5A96ACB3E43C88F2EFD2EA80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 0D70
Signing time: Sun 20 Apr 2025 09:00:49 +0000
Manifest this update: Sun 20 Apr 2025 09:00:49 +0000
Manifest next update: Mon 21 Apr 2025 09:00:49 +0000
Files and hashes: 1: iVIbS2LxmtBFtz1_IM2nGzPQpUE.roa (hash: tzf09d7UopXNcvR8NL3fhh4Pys9GVj3aQxT6Ly8ih98=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: R9MmVIXGEjO5c+QUiKmIlPy0h+q7ZGKJ57b411LKaPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:ca:b5:a9:6a:cb:3e:43:c8:8f:2e:fd:2e:a8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Apr 20 09:00:49 2025 GMT
Not After : Apr 21 09:00:49 2025 GMT
Subject: CN=15df74d135352d13accc2c79ca364534b9f9c193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:ae:06:e7:82:bb:7d:c6:b6:7e:a0:56:d6:
f8:d2:ce:11:59:5a:30:b7:72:f6:dc:b4:f8:fa:3c:
49:35:18:99:27:34:76:4d:4f:09:a8:3a:d8:08:0d:
01:73:42:94:57:c8:2b:3e:5b:65:68:dc:e7:64:1c:
e1:c1:b0:b1:04:7e:c0:19:21:57:24:5f:f3:f0:0b:
2f:52:95:10:ea:d5:9d:8a:b8:26:89:52:1d:56:98:
b1:f3:76:7e:5d:24:f5:3a:18:31:f0:12:9c:14:24:
01:7d:89:b9:7c:12:29:aa:99:a4:f6:dd:d8:5e:c7:
55:3d:bd:f2:51:68:07:b1:77:d1:92:5e:ee:f4:e2:
70:62:be:d6:8d:6b:12:62:00:00:3a:9f:35:ef:93:
cd:00:7a:b1:0f:35:d9:56:e3:a5:84:70:74:0c:78:
f8:57:1b:11:75:d7:c6:1a:c7:8c:e6:83:7a:79:cf:
ad:4c:66:f7:a3:12:b2:57:f1:89:8b:b4:94:b3:e9:
4a:d2:f6:f6:28:ba:d9:f5:d0:c8:e7:e7:f4:0b:b7:
a2:a2:fd:d3:f3:25:e0:fa:ba:59:40:c6:6b:17:67:
d0:60:a9:bf:4c:d8:b6:26:a5:b0:e2:aa:86:98:92:
fb:74:1f:a3:82:78:16:e4:b0:e8:bd:35:f8:b8:4c:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DF:74:D1:35:35:2D:13:AC:CC:2C:79:CA:36:45:34:B9:F9:C1:93
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6e:b9:da:0a:c5:e4:5d:67:a6:78:e4:db:2f:ca:ad:18:1c:
41:96:72:88:6f:3b:fa:17:ed:ec:cc:77:0a:a0:6a:7f:7f:e7:
51:cb:b2:91:68:87:8a:0e:e5:f2:79:0d:4e:a0:df:d2:00:a4:
9e:ae:07:0b:c1:da:54:19:8e:f0:46:f9:21:0f:67:60:99:79:
67:aa:0a:32:4c:c3:ad:26:ec:92:66:06:2e:f3:5e:d6:0f:42:
03:0e:5a:81:50:c1:83:ac:69:73:80:d9:24:66:13:17:dd:70:
64:39:52:92:f4:c7:51:d9:16:a0:08:83:b9:42:07:74:81:fa:
9c:87:0f:92:c9:55:44:4d:3a:68:49:74:8e:62:54:98:3f:54:
20:d0:fb:c0:f9:87:aa:26:17:8e:32:7f:ee:d3:eb:64:67:a8:
dd:62:b3:53:e8:58:bf:57:05:cc:4d:80:c5:6a:e6:50:dc:36:
12:93:a9:6e:4b:f7:6d:22:b2:e4:b3:12:b3:d4:02:e9:d7:67:
57:31:f2:81:fe:72:cf:45:ec:5a:e7:ec:e6:4f:11:a2:2e:7a:
6b:7e:0a:32:8f:c0:ed:07:4f:81:e4:9d:fb:f6:48:fc:56:29:
09:37:db:94:2d:c7:7f:27:0d:91:08:79:6b:8a:c1:63:d1:c7:
7c:73:8a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:52:17 2025 by rpki-client