Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File: jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier: IOV+dOlzL72Ps0P4vHVETpkOJv4iTNZnuavdkfXV4Lo=
Subject key identifier: 48:A5:C6:C9:96:5D:01:43:10:CA:40:05:55:C9:41:AA:CF:F6:F1:77
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial: 01964C6B33B10C795EB76F0A11B630538219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number: 0C09
Signing time: Sat 19 Apr 2025 05:00:16 +0000
Manifest this update: Sat 19 Apr 2025 05:00:16 +0000
Manifest next update: Sun 20 Apr 2025 05:00:16 +0000
Files and hashes: 1: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (hash: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=)
2: IYzUtQ8hFOs-8VOGgxs_H-lj6EQ.roa (hash: KeusAo7L8fplwbm6NqFFjZfIEQ3ioDWGVykS8TkpQn4=)
3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: IezQiy7A02+gXmD2HN5xBz4MBUDn8kjYE0lryXZYIWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:33:b1:0c:79:5e:b7:6f:0a:11:b6:30:53:82:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Validity
Not Before: Apr 19 05:00:16 2025 GMT
Not After : Apr 20 05:00:16 2025 GMT
Subject: CN=48a5c6c9965d014310ca400555c941aacff6f177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:6c:15:04:9b:30:29:10:93:86:d0:4f:e8:
d5:1d:ec:f6:41:9b:d8:c5:4e:e6:e5:88:81:49:e2:
a9:cd:99:46:b8:fc:26:f0:33:56:9b:ba:3d:23:92:
b7:54:c6:f6:57:d8:ce:32:07:24:e9:10:40:7a:2f:
b6:3e:20:11:72:33:93:fc:9c:34:0f:8b:5b:c1:c6:
95:c5:27:59:ed:c9:fa:35:91:ff:9e:f0:47:82:80:
71:c3:fc:38:a0:7a:3a:77:e5:33:e1:99:ae:c5:88:
e6:8a:fe:b0:01:93:6b:9d:0e:a0:a1:e5:79:38:08:
ee:59:f1:ec:ea:08:0f:42:cb:f3:5a:a3:73:b3:db:
70:61:c2:e3:33:45:9d:4d:97:f0:13:a8:96:6e:f5:
35:eb:37:a7:b6:eb:95:bc:45:85:59:61:f0:c0:ce:
15:59:f0:e0:77:ed:40:bb:18:50:46:fc:a1:7c:f5:
9a:b7:e4:0d:26:5f:41:43:20:b1:34:3e:bc:ef:c2:
66:29:7e:97:76:54:db:f2:e0:12:42:c7:b3:e1:c7:
a1:2a:df:ee:5d:fc:1b:ff:e1:fb:6f:52:1c:dd:1f:
59:40:83:f6:ee:dd:9e:48:77:c6:27:cb:69:24:24:
2e:2d:2c:be:99:07:d7:1f:cb:22:83:40:67:c5:83:
76:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A5:C6:C9:96:5D:01:43:10:CA:40:05:55:C9:41:AA:CF:F6:F1:77
X509v3 Authority Key Identifier:
keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4a:36:22:8b:ab:66:6c:9c:99:cf:f7:16:bd:59:aa:4a:ff:
7d:ee:80:4d:70:77:a3:08:ec:23:12:8e:c2:08:c1:a3:87:7a:
74:9c:f7:92:ef:5f:cb:f3:59:e0:da:c5:b7:3d:3b:8b:f0:83:
70:a7:f2:4d:7d:23:59:81:14:24:19:f5:10:5a:46:dd:8a:07:
3e:dd:cc:fe:04:3f:f8:1e:0f:5b:19:9d:0e:02:cf:f0:fa:31:
de:fe:b0:e6:68:08:1a:72:25:b0:d2:8d:7c:4a:89:0a:d8:30:
ed:b1:52:d9:4c:02:6f:34:7b:2c:c7:5d:b4:b6:73:ed:d9:90:
fa:c2:4c:69:81:b7:31:ba:6b:e7:4e:e0:6c:f0:46:29:a2:b5:
9b:08:52:35:6e:aa:8c:65:05:8d:ce:5b:a1:c5:be:e6:4f:77:
10:58:7c:b6:cc:9b:21:fa:1a:f8:16:6f:2e:7a:f9:ed:79:80:
1c:21:7d:c0:1a:5e:cb:6a:33:41:d8:54:d3:40:d6:64:af:69:
19:da:dd:f6:5a:c8:9f:48:8c:21:d2:d3:e8:33:c4:b4:78:ea:
a1:4d:c7:ff:9c:5f:b5:0d:af:45:6c:92:26:db:62:98:9b:e3:
c4:3c:d2:1c:eb:35:e2:40:62:82:c7:f3:53:eb:3b:8e:4b:71:
8a:bc:c9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:06:43 2025 by rpki-client