
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: TdrCYRuDaX7TtyfdIDswkLcQsjt6dS/lqJq3deEeIE0=
Subject key identifier: 40:90:19:5A:E5:77:C6:66:49:0A:46:64:3B:9A:2A:64:C3:97:33:C4
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 01964AB3E2D0F2677B11614D0F33451E9760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 148B
Signing time: Fri 18 Apr 2025 21:00:25 +0000
Manifest this update: Fri 18 Apr 2025 21:00:25 +0000
Manifest next update: Sat 19 Apr 2025 21:00:25 +0000
Files and hashes: 1: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (hash: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=)
2: Vp9dMAyfVmCM5zZQhLE8hK5dRc0.roa (hash: 5cnih+GaWo66TQ4L2W2BbOxLKl4dL4P027VTj45pMMU=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: t59BLurHeHXOBF/91MTOX0CZvO0ORafAzo7SQbOP/8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:e2:d0:f2:67:7b:11:61:4d:0f:33:45:1e:97:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Apr 18 21:00:25 2025 GMT
Not After : Apr 19 21:00:25 2025 GMT
Subject: CN=4090195ae577c666490a46643b9a2a64c39733c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:0e:68:e3:07:52:92:0a:28:a1:c4:be:30:
83:e1:b6:d9:ad:2a:a9:8b:b8:7d:fa:53:8d:2d:0a:
4a:d2:40:4a:46:73:4f:33:1e:77:0b:3a:ca:ab:1e:
61:a0:f2:ec:d9:d1:b8:c1:0d:38:4c:54:a4:d4:73:
55:8c:f5:fc:a1:4e:a4:cf:ea:82:fc:7a:eb:0f:4f:
39:2a:ea:4a:e2:48:41:76:4d:b0:b7:70:46:ab:fb:
4c:40:66:ca:60:8e:22:9c:4a:cd:56:04:10:d8:7f:
ae:9d:55:28:af:6b:27:3a:6a:7d:a3:a1:ce:4d:96:
18:ff:08:56:0b:6d:7c:d7:b0:56:b9:89:22:4d:ba:
1d:2f:a3:9b:52:4c:d2:c6:ec:d7:15:e0:07:4f:58:
46:1d:f9:0f:55:5a:77:fa:e1:a4:61:95:09:3c:67:
1b:f3:4b:a9:27:4d:c3:85:87:95:d2:68:a7:b4:64:
a6:43:e0:3c:9a:14:84:ac:22:59:cb:4d:8d:f4:1f:
c0:c4:96:f0:74:1a:f9:b4:ff:ff:1c:e4:3f:cf:a5:
9a:7a:be:fc:91:a0:bd:36:da:da:6a:55:8e:c8:7f:
1e:f3:31:74:93:72:39:e4:1d:49:ac:5d:fb:ee:45:
40:a3:ff:42:ea:ab:c5:9e:83:a9:27:2f:64:4f:05:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:90:19:5A:E5:77:C6:66:49:0A:46:64:3B:9A:2A:64:C3:97:33:C4
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2e:ca:02:ed:b2:4f:43:16:3b:b0:d8:e5:a4:42:f2:02:24:
55:01:94:20:4c:64:f4:77:07:c3:5a:73:07:25:9d:7a:26:e9:
70:a9:83:3e:e4:8c:d1:4c:78:ed:7a:02:4a:0e:38:d4:07:1a:
12:bd:65:0c:84:d8:3d:96:41:7a:0b:55:81:12:ef:71:fa:5a:
85:15:db:7d:65:de:ed:99:92:ec:24:87:d1:05:df:88:87:87:
54:0a:e4:75:c3:3b:a6:8d:17:fb:dd:ff:85:3d:e9:a4:3b:5f:
e8:6b:12:7c:51:0a:c3:6f:93:24:a4:4b:69:cf:39:86:48:d3:
50:e8:ea:b9:d5:ae:45:05:12:00:20:13:81:05:84:4b:20:21:
cc:42:df:da:12:c2:e5:6d:e8:c5:48:82:96:77:e1:e4:df:4b:
60:32:7d:7d:19:dc:d2:fa:fc:6c:fc:ac:fd:3e:a0:32:5c:c4:
9e:72:62:e9:91:84:27:f7:a8:60:eb:fd:b2:ca:7d:f8:d7:de:
60:7f:e5:96:a0:80:5e:59:5c:20:36:31:82:15:0d:a8:74:79:
6c:6d:1b:d9:30:22:6c:f8:e8:4a:ab:50:54:0d:db:3c:24:62:
d1:b8:51:f5:69:b9:22:44:08:87:09:c2:34:b0:be:ae:64:ca:
41:54:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:36 2025 by rpki-client