Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: XTIRJmoDZXnnrfelkZvExg6qC0QyaJLxdYZZcI3Fgu0=
Subject key identifier: E6:6B:50:FC:3D:0C:95:D7:FA:44:85:C7:C0:82:C3:39:9A:4E:4B:2C
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 0196526D6760D343C76AD84B100E2C10AB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 09E1
Signing time: Sun 20 Apr 2025 09:00:23 +0000
Manifest this update: Sun 20 Apr 2025 09:00:23 +0000
Manifest next update: Mon 21 Apr 2025 09:00:23 +0000
Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: NqW2V5GeIAfiZ3Yq4YVRjhAIjdSFEH0H3Jcr59/EMqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:67:60:d3:43:c7:6a:d8:4b:10:0e:2c:10:ab:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Apr 20 09:00:23 2025 GMT
Not After : Apr 21 09:00:23 2025 GMT
Subject: CN=e66b50fc3d0c95d7fa4485c7c082c3399a4e4b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a8:54:4d:81:f6:a0:50:b6:6d:a6:0a:21:31:
93:30:bb:92:cd:72:cd:e3:56:fa:f0:65:1b:ce:50:
e8:55:e0:e7:4b:c3:ee:87:fe:86:c7:ed:a8:35:82:
85:87:f1:54:b8:23:b9:54:78:b0:94:a9:82:f6:b0:
62:b3:20:62:01:78:51:a8:18:e5:1e:37:6e:92:96:
8e:9e:21:b7:49:32:ea:64:95:24:2e:77:57:e4:85:
86:a6:33:fd:ae:a3:5d:31:15:89:3f:f2:39:12:4a:
30:3b:84:87:ed:a7:28:de:79:a3:1a:66:b1:63:44:
db:d6:97:fb:fa:c1:ed:7b:f1:8b:14:eb:a0:1d:56:
e5:56:bb:ed:4c:43:9e:3f:37:68:dc:5e:d1:dd:e1:
42:44:8b:2a:88:7f:e8:82:cf:50:ed:75:ff:99:1a:
94:94:d6:95:36:b5:50:05:70:4a:c5:46:fe:34:0d:
1d:d6:50:4c:b1:14:f7:40:82:91:f9:02:ed:53:f1:
0c:4f:91:9c:d5:7b:14:ed:1d:c7:c8:cd:82:51:45:
1e:ba:54:d8:2e:ac:e8:68:e3:01:d9:0b:c8:8d:ab:
9c:54:10:6d:17:bc:d5:c4:e7:a1:1e:ad:5b:f3:2a:
f7:68:27:cc:a7:80:c3:51:e2:5c:91:dc:ea:0e:ee:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6B:50:FC:3D:0C:95:D7:FA:44:85:C7:C0:82:C3:39:9A:4E:4B:2C
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:af:6e:38:82:58:2f:69:73:93:74:cc:b4:8e:5d:a1:6f:a8:
b6:89:55:2d:18:4d:19:6c:9c:d8:73:1e:e4:7a:30:a9:df:de:
76:16:51:58:5a:43:ac:67:28:0c:8a:16:ca:6a:70:2e:ff:c5:
9e:50:e0:11:e0:3b:3a:7c:5d:28:69:3b:0b:78:b8:c9:d2:81:
43:7a:45:32:37:be:55:55:e4:c8:fe:d4:2e:8c:41:aa:dc:df:
d2:3b:ee:84:ca:ed:6f:f6:0c:04:16:82:3a:95:a1:59:6d:b6:
b7:c2:8a:a0:dd:9b:05:a9:be:41:ed:79:53:09:35:58:c2:9c:
91:f4:a6:e8:be:82:08:56:ed:39:0a:3c:ca:1a:9d:0d:02:dc:
6e:12:8b:9d:6f:8e:88:3f:d8:04:61:9b:89:5d:ef:d6:b6:31:
a2:39:e6:9a:b7:50:80:fe:92:78:73:b1:8a:84:3c:09:34:e3:
83:ee:ef:2c:ab:c1:b0:ea:76:fd:49:90:08:2a:6f:21:30:d7:
1a:90:f0:5f:7b:1c:61:33:a8:81:36:63:89:ad:18:79:77:1b:
f3:3e:fc:2e:c7:cc:49:7a:dd:af:21:6c:20:a7:37:c1:ed:b3:
7d:5b:30:a3:ef:bc:ac:5b:32:82:ee:ec:3e:81:ed:a1:b3:c9:
01:d5:3c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:02 2025 by rpki-client