Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier: jAEScdWzj102psg3Gb1CbNtZLw/ee15QGBdsfU/ZaG0=
Subject key identifier: 1D:42:A4:A6:54:D3:57:18:89:3B:EA:61:FD:9E:D7:C3:74:0E:3D:2F
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial: 01965500EE7CD6EBF796F5FDD6A1CA77118D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number: 1090
Signing time: Sun 20 Apr 2025 21:00:46 +0000
Manifest this update: Sun 20 Apr 2025 21:00:46 +0000
Manifest next update: Mon 21 Apr 2025 21:00:46 +0000
Files and hashes: 1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: YoskJl5LxsZQpbBwYab+nWXNTQXZTr+MgL7jL/bTAQY=)
2: Y2PRIXlvoLUvaJRI_Do9j4XcqPk.roa (hash: 5PYmU1FMb9SDbJhCU1KiV8VGC7stgGinp2hnu0BY1I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:ee:7c:d6:eb:f7:96:f5:fd:d6:a1:ca:77:11:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Validity
Not Before: Apr 20 21:00:46 2025 GMT
Not After : Apr 21 21:00:46 2025 GMT
Subject: CN=1d42a4a654d35718893bea61fd9ed7c3740e3d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f2:d1:9d:7c:d2:fb:49:4d:13:88:57:e0:e3:
ce:f6:f7:05:72:b6:c2:3c:2e:be:65:51:b3:8b:ce:
a0:84:56:e8:e9:91:65:73:18:9d:cb:11:1e:27:7a:
52:35:7e:b6:b4:1d:28:68:89:93:2c:18:ab:ce:2a:
c7:4c:f6:01:64:1c:e0:60:f6:b1:7c:09:5c:e6:4b:
89:27:92:16:2a:8d:d6:fd:41:a5:d6:9f:49:6a:3f:
6b:b2:3c:24:ff:a8:9b:7e:47:a5:13:36:85:7e:4d:
0f:b8:86:21:1b:5a:ef:29:6b:ad:ef:4a:da:ed:6c:
51:af:61:e2:2f:9d:a3:32:10:5e:74:7b:6b:a2:14:
ca:94:34:62:a8:62:a0:b9:a3:0a:10:d4:55:9a:5d:
c1:a9:59:e6:b6:6b:be:67:35:80:8e:68:50:8a:74:
3c:21:14:88:13:ee:92:b0:e4:3c:14:b8:45:1b:cc:
d6:cb:84:7c:07:5c:dc:c8:28:26:02:3c:57:1f:a8:
9d:09:6e:35:cb:29:4c:d5:d0:c6:39:9d:38:36:6c:
87:fc:98:9b:db:c6:d8:89:8f:4a:b1:a3:50:6a:55:
6d:df:48:94:cc:84:49:97:06:3c:48:94:49:f2:eb:
ff:38:5a:10:62:fa:98:77:fb:87:99:f0:f7:57:a2:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:42:A4:A6:54:D3:57:18:89:3B:EA:61:FD:9E:D7:C3:74:0E:3D:2F
X509v3 Authority Key Identifier:
keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:da:a0:8e:5d:1d:52:67:d8:a5:ff:0e:a6:aa:ee:cc:82:18:
83:17:12:e6:36:cf:f3:55:c5:89:33:8d:70:8c:2c:70:da:90:
3d:f1:82:50:49:41:50:ec:f1:e0:da:6a:bb:da:7c:21:96:78:
3c:98:4f:bf:f9:04:cb:4b:ea:43:8f:4d:32:c9:76:bb:2f:e9:
0a:1f:04:9b:27:38:34:aa:a9:1e:f7:46:34:51:c5:8e:9c:92:
cc:b4:84:0f:90:3f:b0:80:01:51:e2:f8:00:60:b9:87:42:26:
04:54:24:85:c6:e5:0e:57:9d:ac:64:7f:55:eb:31:09:36:91:
86:8a:27:34:1b:ca:03:51:d8:37:50:26:20:2b:48:23:b5:7e:
e3:8f:95:eb:41:45:3f:23:55:a7:bb:46:fe:6b:ae:45:29:66:
36:9e:5a:32:3f:7d:00:74:f0:e1:b4:eb:24:22:de:3d:d4:43:
88:b5:8f:43:56:3e:6b:34:a3:0b:10:3e:25:21:76:6d:37:1f:
73:1e:5d:c1:ab:3f:55:27:17:80:56:fb:32:0f:34:ff:a4:90:
60:09:af:76:fb:a8:f7:87:70:1c:08:dc:99:07:36:64:26:4d:
31:82:9c:86:d0:b4:c6:07:72:54:69:ec:cb:fe:66:e7:b1:1f:
52:25:46:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:31 2025 by rpki-client