Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: 47WQWa7BjKo8oRINLk85Th77PvItk77iv4XFmIbpdIM=
Subject key identifier: 35:18:92:15:2D:61:B7:BC:CB:E5:E4:A0:E4:0D:C3:A2:0F:86:9C:FA
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 019611D7FD4D424466950C681BF786260A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 0BC2
Signing time: Mon 07 Apr 2025 20:01:29 +0000
Manifest this update: Mon 07 Apr 2025 20:01:29 +0000
Manifest next update: Tue 08 Apr 2025 20:01:29 +0000
Files and hashes: 1: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: A2oNLRBNmEB4zhOagVVGfvpPdHyWLhUAqbV28oXiHg8=)
2: yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa (hash: zRJvfuooLD1ukObnKFMb0zFwDQ9keCDuprZkYYzC4qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:d7:fd:4d:42:44:66:95:0c:68:1b:f7:86:26:0a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Apr 7 20:01:29 2025 GMT
Not After : Apr 8 20:01:29 2025 GMT
Subject: CN=351892152d61b7bccbe5e4a0e40dc3a20f869cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:5e:44:73:66:c1:fc:b7:26:5a:35:18:39:
1f:81:16:ec:54:64:b6:52:ca:b0:88:7a:da:85:1e:
2e:89:f7:b0:08:2c:e5:8e:9b:70:14:70:4f:22:88:
d1:9d:f7:ff:a8:f2:7a:2f:07:d7:ae:42:3e:81:44:
32:bf:4d:88:2c:d9:40:9d:83:e6:90:3e:a7:26:47:
50:d8:cb:f4:1b:ef:90:5a:b0:ad:35:39:7c:f0:ad:
91:80:e0:62:e3:56:8b:ef:8e:5c:ae:e1:80:79:ca:
35:8f:d0:7f:32:a6:78:35:b7:85:fb:0c:b8:d0:ef:
c8:01:55:ee:86:23:28:25:c3:58:52:2f:01:00:87:
0b:2b:c4:de:99:7a:fd:99:dc:fb:46:ea:e5:4d:f0:
be:36:42:1c:6c:6d:b5:e7:85:90:2e:b6:c7:13:19:
3d:be:b2:6b:e1:63:5f:99:fd:6d:91:5c:2b:26:db:
c1:13:fd:85:df:a6:09:b3:07:b9:ac:19:56:90:2d:
42:48:0f:ba:9e:fe:4c:fb:81:5c:b8:58:11:a1:c9:
c8:a5:46:2c:a2:b3:34:65:3c:0d:15:37:10:6c:9d:
03:82:16:10:da:ac:f1:4c:79:44:75:ae:f4:6f:b1:
c5:da:42:1e:9c:e7:18:e6:51:f4:79:d2:e2:9f:49:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:18:92:15:2D:61:B7:BC:CB:E5:E4:A0:E4:0D:C3:A2:0F:86:9C:FA
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e9:9c:eb:45:f3:58:69:ee:9c:de:d8:3e:b8:53:84:11:5e:
6a:a0:72:f9:9e:62:c4:37:94:d9:8a:79:d0:93:45:b9:ad:00:
26:9d:de:e6:6d:29:24:09:88:c7:5c:92:2c:32:38:53:ba:78:
ec:be:15:f2:09:db:19:8b:a6:f5:56:a3:bb:db:09:b8:44:31:
e9:2c:47:d0:ac:ec:e9:e9:8e:a7:ae:b2:d6:c3:f4:99:cf:2c:
64:12:18:2d:1b:31:57:c6:93:e3:5f:4a:2d:38:99:61:92:6c:
2f:5f:d1:da:63:20:18:54:bf:1d:18:5d:d8:a9:41:3e:6e:4e:
61:f4:90:a8:e0:68:5c:8b:78:c9:0f:b0:af:90:d0:44:5f:fe:
43:0a:3f:7c:ea:b1:1a:20:0d:4e:d5:34:cc:b0:21:2c:d2:1e:
81:91:8b:19:bd:8a:3d:78:d0:0f:44:04:f0:d4:e2:bf:a8:19:
95:6c:2e:53:a6:1f:f9:c0:55:e8:00:87:86:d3:ae:de:39:56:
06:e7:a6:99:3f:36:28:02:b4:54:fb:da:9a:18:03:23:75:31:
68:73:1c:86:ac:43:34:f9:4e:c3:4d:47:58:bc:cc:db:bd:cd:
98:51:9e:68:fe:63:16:1e:02:08:bf:b4:1d:80:ef:66:64:a8:
99:b1:4b:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYR1/1NQkRmlQxoG/eGJgp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTJkYmZjNDY2YmQzNDgwOTBlZGMxYWUzMjkyNTIyZTlk
NzNiZDkwHhcNMjUwNDA3MjAwMTI5WhcNMjUwNDA4MjAwMTI5WjAzMTEwLwYDVQQD
EygzNTE4OTIxNTJkNjFiN2JjY2JlNWU0YTBlNDBkYzNhMjBmODY5Y2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKZeRHNmwfy3Jlo1GDkfgRbsVGS2
UsqwiHrahR4uifewCCzljptwFHBPIojRnff/qPJ6LwfXrkI+gUQyv02ILNlAnYPm
kD6nJkdQ2Mv0G++QWrCtNTl88K2RgOBi41aL745cruGAeco1j9B/MqZ4NbeF+wy4
0O/IAVXuhiMoJcNYUi8BAIcLK8TemXr9mdz7RurlTfC+NkIcbG2154WQLrbHExk9
vrJr4WNfmf1tkVwrJtvBE/2F36YJswe5rBlWkC1CSA+6nv5M+4FcuFgRocnIpUYs
orM0ZTwNFTcQbJ0DghYQ2qzxTHlEda70b7HF2kIenOcY5lH0edLin0mUJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUYkhUtYbe8y+XkoOQNw6IPhpz6MB8GA1UdIwQY
MBaAFI8S2/xGa9NICQ7cGuMpJSLp1zvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgt
NGIwOWJkOGVkMDRhLzEvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgtNGIwOWJkOGVkMDRh
LzEvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOmc60Xz
WGnunN7YPrhThBFeaqBy+Z5ixDeU2Yp50JNFua0AJp3e5m0pJAmIx1ySLDI4U7p4
7L4V8gnbGYum9Vaju9sJuEQx6SxH0Kzs6emOp66y1sP0mc8sZBIYLRsxV8aT419K
LTiZYZJsL1/R2mMgGFS/HRhd2KlBPm5OYfSQqOBoXIt4yQ+wr5DQRF/+Qwo/fOqx
GiANTtU0zLAhLNIegZGLGb2KPXjQD0QE8NTiv6gZlWwuU6Yf+cBV6ACHhtOu3jlW
BuemmT82KAK0VPvamhgDI3UxaHMchqxDNPlOw01HWLzM273NmFGeaP5jFh4CCL+0
HYDvZmSombFLsw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:03:49 2025 by rpki-client