Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: J+5FxujT3P3VvEycDejSWrrIBfCzYLzLldWPb3rKpwg=
Subject key identifier: B3:CF:9E:91:37:4E:B3:13:55:20:20:4F:76:BE:F4:BB:2B:0C:FD:0B
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 01964CA24B9C32C29D63308D7773E5851CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 0BA1
Signing time: Sat 19 Apr 2025 06:00:26 +0000
Manifest this update: Sat 19 Apr 2025 06:00:26 +0000
Manifest next update: Sun 20 Apr 2025 06:00:26 +0000
Files and hashes: 1: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: FTkZd2kTsG86zL0I6KSNtaD9dWk/1MdZnVWhXVN5JOY=)
2: m7ILrNfOu-eUx2B6UsntAxtlq9s.roa (hash: /izsLpJMnyLjcBC/dWPj3hHlKW+Ou/8dO/Ifh1Ai218=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:4b:9c:32:c2:9d:63:30:8d:77:73:e5:85:1c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Apr 19 06:00:26 2025 GMT
Not After : Apr 20 06:00:26 2025 GMT
Subject: CN=b3cf9e91374eb3135520204f76bef4bb2b0cfd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:bf:a7:52:ec:66:da:73:66:f3:46:ca:34:
b2:e2:f6:3e:b0:79:32:5c:fd:c6:df:5b:0d:2e:75:
59:2a:be:a1:79:9c:af:e5:b9:c8:bb:2c:33:10:45:
cd:fb:48:c7:2e:97:97:08:23:dc:ae:34:93:4e:80:
5a:0c:ff:c1:f3:c8:48:29:7d:8e:e2:ea:9f:a5:41:
93:98:d6:b4:14:f3:12:9a:2c:fa:48:1e:92:41:0e:
0a:67:06:64:be:13:d7:2c:21:f6:76:98:1f:e6:a6:
76:1f:2b:7b:b1:bc:ec:d8:c6:50:92:99:58:41:c3:
2e:94:fa:8d:20:dc:32:1b:a4:04:c6:b0:fb:4d:86:
bf:c0:4d:0e:3a:e3:26:1f:61:2e:7d:be:ea:d6:1d:
c9:bf:aa:4d:50:37:8c:db:81:92:14:9e:e0:d2:0a:
c7:49:a2:b0:81:44:38:bb:2f:5b:a3:25:76:e0:6a:
2f:fd:cb:44:d0:d4:81:17:4b:34:36:94:ee:09:db:
5e:8f:d9:fa:96:1a:48:11:5e:25:d0:52:80:0a:a2:
1e:70:5d:f6:c0:46:21:ef:40:70:a5:48:f6:32:b6:
7c:5a:5f:88:82:4a:f7:d9:d6:03:b1:92:da:83:c5:
6f:2f:82:45:2d:3c:9c:93:34:bc:eb:4d:35:e0:28:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CF:9E:91:37:4E:B3:13:55:20:20:4F:76:BE:F4:BB:2B:0C:FD:0B
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8a:90:2f:75:8f:db:cf:78:a3:86:3d:63:4b:5c:d9:60:ca:
14:f1:b1:83:97:e6:64:e3:b2:7b:ea:6f:c6:e5:31:e6:bd:1d:
09:61:42:5d:aa:86:bf:0f:ac:c8:d1:d3:12:25:d1:85:15:29:
d5:88:d2:b4:2c:7d:7f:c1:a0:06:17:60:5e:dc:f5:99:4a:1b:
46:c4:a1:cd:b4:19:58:8b:62:21:f5:56:ca:7a:e2:f9:91:53:
32:31:bb:4a:2c:a4:e6:8a:a2:2e:5c:77:77:bc:8f:4f:73:44:
d3:7a:81:08:a7:89:73:ad:0c:4b:aa:95:1e:1d:1a:94:12:1c:
a9:c0:51:76:37:ef:28:03:dc:57:ab:7c:d6:ee:7a:3d:30:ba:
84:46:ec:b2:2c:30:29:6d:11:73:18:22:ba:0f:73:3a:c3:f9:
cb:95:10:bf:50:ba:d2:ac:51:37:01:41:ed:aa:38:55:f1:45:
0c:3f:af:06:39:b6:ce:6d:6a:20:90:5a:f3:b7:98:4e:9c:62:
09:58:0a:65:56:d7:f4:23:ba:bb:f9:2f:f4:cb:90:aa:00:7b:
74:ec:cb:df:19:e1:82:c6:89:9f:b2:f2:cd:c0:ac:90:81:17:
b1:d7:d6:31:f0:74:8a:2e:3d:35:fe:bd:7c:2c:d1:78:92:2b:
e3:cb:bb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:04 2025 by rpki-client