Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
File: Jowu3BO7KjxjJiEhueqtGIvtuuk.mft (raw, json)
Hash identifier: q3TvERCJanCwdLALaccHsoHbaV63Nj0nPTewsJVIs+s=
Subject key identifier: 98:9C:2B:31:2D:54:AE:AA:1D:A0:23:C4:59:A9:9E:23:3D:20:43:E1
Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
Certificate issuer: /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Certificate serial: 01964E2345E6D80B1B8EB7E020C2E3B01D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
Manifest number: 111D
Signing time: Sat 19 Apr 2025 13:00:56 +0000
Manifest this update: Sat 19 Apr 2025 13:00:56 +0000
Manifest next update: Sun 20 Apr 2025 13:00:56 +0000
Files and hashes: 1: DpA6vqU4LJr5KoLtREWlTrMePeU.roa (hash: JzcSaxZjM50huCWTepEHWuRTcnth93I21P4Hl6vppKc=)
2: Jowu3BO7KjxjJiEhueqtGIvtuuk.crl (hash: Gp8k6UmgrAW1KZE5mhNDA3XtJ6Mi94L9Xx/Ydy9NgJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:45:e6:d8:0b:1b:8e:b7:e0:20:c2:e3:b0:1d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Validity
Not Before: Apr 19 13:00:56 2025 GMT
Not After : Apr 20 13:00:56 2025 GMT
Subject: CN=989c2b312d54aeaa1da023c459a99e233d2043e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:15:de:62:f9:9a:66:ae:58:af:ac:61:bc:
0a:29:19:4c:ef:35:b1:cb:ed:6b:fa:95:71:87:7d:
db:08:95:0f:44:35:97:9e:9a:ac:d4:ab:e3:cb:53:
16:da:e9:24:af:51:4c:43:a0:70:4b:86:c3:35:5e:
8d:cf:cc:f5:a7:1f:17:ff:e3:10:16:40:71:03:c8:
b5:d3:8c:6d:70:db:ae:88:46:4c:c4:1a:9f:93:48:
68:da:ec:a4:7e:ef:47:94:9e:f4:34:0f:b6:f0:3b:
92:04:3c:cb:12:b4:9f:19:29:3f:b4:da:b5:3b:69:
30:12:8d:03:6e:62:b1:a3:63:0f:27:4b:56:f2:1b:
66:c9:87:88:e8:24:64:a3:e1:76:19:57:b0:aa:b5:
b7:f7:a4:10:3f:35:91:69:ba:95:f5:3a:96:2e:3d:
d5:90:d1:0f:6f:51:45:c8:12:f6:be:91:d5:41:f3:
2f:b0:90:db:ca:da:e5:ae:f2:02:bb:0f:db:2d:fa:
e3:e9:6b:3b:16:e5:3c:1c:71:ea:78:47:40:2c:1c:
7d:f4:f1:d4:d7:5f:0a:1a:76:1a:e5:7b:79:56:68:
f0:87:18:ca:11:ce:ce:95:3e:dd:9b:7d:09:3b:cc:
60:de:fe:65:22:97:e4:5f:63:36:fd:c1:6d:9f:4d:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9C:2B:31:2D:54:AE:AA:1D:A0:23:C4:59:A9:9E:23:3D:20:43:E1
X509v3 Authority Key Identifier:
keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:64:61:e4:d1:e8:16:6a:95:c3:e7:9b:45:74:7f:aa:0d:47:
47:af:5c:b1:ee:8b:0b:88:b5:f5:b7:45:93:05:7b:13:09:cf:
dc:97:10:34:61:74:30:aa:9f:c4:15:8d:30:02:fa:c3:eb:ec:
e3:2f:70:1e:3c:96:26:b0:d4:52:ce:e2:07:6c:f3:e3:56:b2:
24:33:79:75:77:f6:33:73:e2:c3:b5:6f:21:f2:3d:56:d9:7e:
43:e0:ca:e9:da:bf:a7:14:39:98:54:db:a5:9a:e3:1a:94:d8:
aa:a8:ee:f7:59:f8:ef:d5:e8:8a:83:c1:94:2f:0e:7a:ea:6e:
85:e0:ce:f2:c5:b0:c9:49:f1:a3:ae:78:18:9a:c0:f3:3a:00:
00:5a:8e:5d:8d:a1:ac:6d:68:af:8a:0e:c7:d4:79:ef:9b:1e:
60:b2:a5:35:6d:9a:5d:39:4a:87:ea:29:d6:50:f8:7c:a9:a9:
a9:36:02:14:a4:3a:91:ff:0b:bf:80:02:b8:ac:6f:72:14:46:
be:e2:8c:f9:db:73:60:77:38:cc:be:bb:26:ee:18:15:68:64:
59:61:00:02:73:42:f1:bb:85:4b:bb:12:f5:64:79:f8:71:cd:
25:2b:05:49:98:32:c5:fd:53:c0:07:5c:8c:70:22:9b:7a:29:
7d:b0:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:12:43 2025 by rpki-client