Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
File: crjVM-JRm2ityzt741m5M1fiscs.mft (raw, json)
Hash identifier: iN+MXkUpdrk6ne6ljgU3ep3HtugnY8kZClgqpWM6+jw=
Subject key identifier: 1B:0D:75:ED:A5:F1:B0:8C:93:A5:8A:17:1B:B3:71:64:9E:1E:37:E6
Authority key identifier: 72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
Certificate issuer: /CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Certificate serial: 0196409E2B7D6D4B55EA07995848A2F896A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 22:00:29 +0000
Manifest this update: Wed 16 Apr 2025 22:00:29 +0000
Manifest next update: Thu 17 Apr 2025 22:00:29 +0000
Files and hashes: 1: JmXCpQWdSoFCP6yn-CKJyKpMmAM.roa (hash: Yy6MwGTUuS17SwLg+SYCwv3ZIWFTtcSoLxcVcFhPV/Q=)
2: crjVM-JRm2ityzt741m5M1fiscs.crl (hash: nw7EryDRQM4zCVcLUk3aRZHgbXm54UaYPvANiWtUTUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:2b:7d:6d:4b:55:ea:07:99:58:48:a2:f8:96:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Validity
Not Before: Apr 16 22:00:29 2025 GMT
Not After : Apr 17 22:00:29 2025 GMT
Subject: CN=1b0d75eda5f1b08c93a58a171bb371649e1e37e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:2d:b7:bb:6b:5c:5f:b4:0f:ad:b8:df:e4:
64:11:0b:6d:d4:a5:68:44:82:67:bc:a8:30:c9:ae:
e7:6c:de:0d:6d:59:07:73:08:7e:c5:9e:d9:d0:ea:
14:3f:f8:2a:1b:86:1b:78:05:c0:db:5d:07:20:9b:
81:a6:2e:9c:32:66:f9:4d:0d:ba:c6:91:33:67:8c:
ab:40:60:96:f5:b2:e5:99:3a:fa:26:f4:6a:9b:3a:
cf:5a:53:55:6f:50:0f:84:b2:05:9e:c0:65:0f:12:
52:cc:f2:5f:4a:69:10:f4:22:5b:8b:59:e6:bf:46:
50:c4:c2:9d:d8:84:3b:c4:12:46:db:dd:74:3f:fc:
11:7a:4b:ff:00:51:58:41:24:ea:15:94:82:d3:bf:
9f:df:c5:7d:a6:42:cc:0f:61:00:8b:0f:b2:fe:f1:
63:00:7a:9c:34:6a:45:b5:81:cc:96:e7:f1:fe:0d:
98:61:c7:ca:9c:87:b7:72:65:a9:67:34:da:40:25:
63:68:20:19:e7:f9:21:06:1e:9b:f2:79:8d:7d:f9:
56:d6:0f:2e:90:16:54:e8:17:b5:57:9c:69:19:e8:
e6:72:4d:de:69:78:7a:49:3c:ed:89:12:92:5c:8e:
1b:4c:8d:da:dd:18:86:92:9a:53:a1:10:4f:28:2b:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0D:75:ED:A5:F1:B0:8C:93:A5:8A:17:1B:B3:71:64:9E:1E:37:E6
X509v3 Authority Key Identifier:
keyid:72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:47:69:0d:ca:59:a1:60:d2:35:e1:80:b8:66:a1:8a:a9:d9:
63:18:9a:0b:cc:84:ec:3b:82:5d:8d:f3:de:53:6c:b7:4a:03:
f6:68:db:2a:f3:06:1b:6c:fd:c9:77:58:11:55:b6:fe:10:f6:
bf:e5:45:36:5a:67:d0:ce:64:00:54:ae:ab:3d:7e:61:fd:c1:
b5:4c:01:42:65:40:ba:f2:50:ea:aa:7a:ec:14:c1:1d:77:05:
86:1d:de:6c:bb:ca:28:72:51:35:f7:4d:40:66:60:b5:f2:31:
74:ff:aa:9d:46:21:da:a4:85:3a:61:a3:c4:d2:8e:39:5f:ea:
c8:50:3c:33:2f:d5:1b:3a:13:71:7c:21:d0:6d:b7:1d:d6:cd:
12:d1:98:ac:84:17:20:d5:09:be:b2:d2:c3:03:93:e9:ce:0f:
2f:4a:ba:cc:a1:d5:c3:bc:e1:8f:0d:cd:f5:ac:90:8c:f9:3f:
8f:9e:b6:ca:19:84:fd:f4:79:f2:2e:77:28:5d:08:f0:65:c7:
72:32:bd:e9:2c:2b:6b:83:f9:55:70:5c:50:a9:51:99:d7:c0:
03:2e:9c:7a:c6:48:56:f7:b2:3e:5d:df:55:41:77:a3:ca:b6:
51:3e:2c:e9:27:3c:f4:b2:c2:ff:4e:bf:7f:e5:c6:22:91:ee:
73:a7:7e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:20 2025 by rpki-client