Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: DcWENg7tkI7g4JdLzNidq71aebOH/HyVYVeZzzBOK0Q=
Subject key identifier: 11:F6:0A:40:AD:A4:2C:1A:C9:F7:5D:77:E0:3F:F3:86:16:16:9B:A1
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 01958B4DF88E335375C36CDAF745D6DCA8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 1499
Signing time: Wed 12 Mar 2025 17:01:37 +0000
Manifest this update: Wed 12 Mar 2025 17:01:37 +0000
Manifest next update: Thu 13 Mar 2025 17:01:37 +0000
Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: BPWjOca95TYfklxCZ2tJGpJ53aya1xQHl26Q0php34M=)
4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:f8:8e:33:53:75:c3:6c:da:f7:45:d6:dc:a8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Mar 12 17:01:37 2025 GMT
Not After : Mar 13 17:01:37 2025 GMT
Subject: CN=11f60a40ada42c1ac9f75d77e03ff38616169ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:5e:a6:07:b3:82:04:a8:a1:f8:93:dc:e8:
09:a5:cf:4d:1f:7b:97:7d:5c:a2:16:e9:ab:87:4b:
28:5a:a9:e1:84:fd:86:8b:11:47:1c:da:a2:99:b3:
5a:0b:d6:cd:8a:2e:53:8f:58:6b:cf:a7:ea:02:6a:
18:4f:c4:4e:a6:31:9a:cc:4a:9a:f5:63:87:16:2a:
f1:a3:1a:19:27:ae:1e:8d:1c:d0:9f:49:e3:87:a2:
12:ec:ce:b8:2e:d1:9c:99:e7:28:80:63:c6:ab:e9:
f5:14:6f:39:95:2a:e7:7e:0e:ed:7e:70:e6:65:ba:
54:59:56:1d:30:34:27:dc:12:f3:6d:0c:bc:f8:0a:
eb:a3:72:d7:01:8f:c6:73:47:db:f9:bd:ac:54:9b:
25:1c:72:78:04:85:ed:66:20:39:c5:cb:de:00:93:
af:6b:92:0d:76:41:66:9d:06:d2:31:a0:60:7b:19:
3c:a1:2b:f3:b0:9e:58:bb:7c:45:da:bb:3b:3e:e2:
5e:07:67:c4:b3:1e:07:d8:f2:d3:5a:ea:fa:b0:f6:
67:d2:e1:42:08:94:cf:a6:dc:8e:d2:7a:e7:9b:ac:
0c:e4:6e:23:5b:83:79:59:d4:c8:7d:a8:4f:c6:02:
df:31:6f:69:d5:4b:08:78:80:b3:f5:9d:a6:fd:38:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F6:0A:40:AD:A4:2C:1A:C9:F7:5D:77:E0:3F:F3:86:16:16:9B:A1
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cf:83:7f:13:a9:0e:51:37:3c:90:55:eb:10:36:55:f0:0f:
6b:e3:57:f4:b5:68:5d:c2:0c:e4:74:fb:e7:5d:60:5b:2d:70:
cd:45:93:26:89:bf:d4:8f:77:58:c6:89:bb:2e:5a:0d:3c:f5:
9b:a3:0a:d3:2d:0c:ab:63:a0:ef:42:ce:3e:dd:10:0c:c8:1e:
57:03:b8:4b:9b:d3:f2:ff:8b:1b:ee:65:cc:67:8e:13:43:bd:
61:32:7b:d4:06:ad:fd:ca:cd:f1:64:77:e5:24:ae:7a:e6:58:
aa:78:59:d4:fb:c4:19:7c:4b:dd:2b:fd:77:fc:12:8c:32:9a:
91:ed:0b:9f:10:1d:e4:31:e7:74:af:88:24:b2:f2:ea:5c:73:
80:45:d2:da:d2:b3:a1:b9:ef:1a:5f:11:e5:8a:7c:8e:57:35:
f6:e7:36:59:60:eb:dc:0d:8e:2c:13:fd:b3:4c:fe:b6:49:36:
4d:57:29:f3:62:58:d7:fa:04:fa:01:2f:c0:d2:32:b1:d9:23:
01:14:21:09:47:07:68:0a:56:15:be:f8:c1:c6:e4:a9:80:38:
8b:a3:3d:5f:b7:7c:55:5c:5a:86:b9:d0:f2:c2:01:d4:ba:4c:
f2:fb:1e:0d:9c:4e:fa:0d:cc:c9:52:26:19:28:7f:8d:16:49:
3a:a5:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:00 2025 by rpki-client