Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier: FzliWcEZ///I2oEtpBkhT105DCfjwfQ3nYMEiTJca9I=
Subject key identifier: C8:7B:0E:BB:E9:65:6E:50:D6:E2:61:64:81:4E:EC:E6:D1:87:4C:EB
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 019612B3930342619651DB96D29DFDBF3216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number: 0497
Signing time: Tue 08 Apr 2025 00:01:20 +0000
Manifest this update: Tue 08 Apr 2025 00:01:20 +0000
Manifest next update: Wed 09 Apr 2025 00:01:20 +0000
Files and hashes: 1: GBWUujhw8eL9ZQ-pESyjXqFWT28.roa (hash: t+QjroMr63PmLVQ1g3FZpryd+p1Rm7jgWOEl8kpZfl4=)
2: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: lQ9YWN58H2r2rUlpEn5frYQUvRSCut2tAEJrPMhXRrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:b3:93:03:42:61:96:51:db:96:d2:9d:fd:bf:32:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Apr 8 00:01:20 2025 GMT
Not After : Apr 9 00:01:20 2025 GMT
Subject: CN=c87b0ebbe9656e50d6e26164814eece6d1874ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:85:da:ca:c6:1b:13:d3:4d:81:e3:12:d5:
c1:db:95:db:df:ac:e4:6e:29:e8:08:e0:d0:f2:88:
7e:da:c8:3e:9f:4a:54:0b:e2:b8:80:b4:94:de:52:
0e:bc:c7:a9:0e:86:3b:a9:ff:bf:c4:79:2d:a5:ba:
8d:e5:6c:cb:18:01:99:7d:bf:9f:b7:ed:7c:91:72:
a7:60:19:5c:63:c6:23:e1:db:21:2f:3e:d5:0d:f8:
d2:b3:5b:86:b3:d0:59:85:3e:6b:bf:ed:26:5e:c3:
5d:23:ee:b3:b5:72:bf:14:71:1c:89:bd:59:3b:8e:
50:42:e0:f0:a0:7c:19:63:8d:63:05:36:80:54:73:
29:0c:8a:c9:7f:20:cd:a9:4f:b8:cf:2f:0e:f0:f7:
04:d3:41:09:37:c8:67:d2:9d:05:be:6d:32:2c:9e:
d2:3c:8a:7f:e9:15:4c:a9:ee:11:db:67:4b:8f:bb:
c4:99:cc:3a:33:fb:3e:40:65:f4:8e:83:6b:fa:f4:
11:99:f9:cb:1b:16:45:4d:50:b7:7b:56:6e:e6:d9:
c9:ea:13:fa:c9:24:14:d9:3f:85:15:88:e4:e3:0f:
fd:8d:f5:7d:7e:2b:70:c9:9e:61:ea:e0:71:82:64:
22:78:da:6f:74:93:ca:4f:a3:de:74:cd:1c:8e:09:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7B:0E:BB:E9:65:6E:50:D6:E2:61:64:81:4E:EC:E6:D1:87:4C:EB
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b2:ef:54:e1:2f:23:da:57:4a:7c:0e:e5:2b:6e:5c:03:d3:
b5:59:70:c0:de:32:fa:89:8e:ab:c1:d4:f8:5c:fc:6f:e1:91:
55:e9:d7:00:42:7f:e5:de:60:13:d1:1c:15:14:69:9e:10:60:
70:ff:ea:d5:93:0b:aa:e6:21:bd:94:55:13:ec:73:d2:68:88:
a0:d9:ef:32:80:64:77:d5:1d:7e:a6:95:a8:49:15:e4:2d:ab:
ac:b2:da:f1:a7:14:7a:22:10:46:2c:bd:e4:e7:06:84:85:a8:
2c:b1:70:71:ee:15:18:ec:c8:6b:74:f5:87:ee:60:10:1d:80:
a8:74:cd:1a:bf:4a:75:04:aa:f7:ec:4d:56:f2:26:f5:0f:a4:
4b:84:9b:99:da:73:02:59:d5:62:ca:64:60:0c:ca:7d:5a:80:
bf:d4:ee:21:f5:54:40:2f:64:7c:80:0f:74:99:3e:54:c8:1e:
8c:a0:06:48:70:8f:59:9c:e3:6f:8d:53:d4:c7:78:1f:31:bb:
74:06:51:ee:a0:0b:26:fb:10:46:1b:10:bd:93:b8:d9:20:49:
ec:58:5b:d4:8d:18:4a:ac:f7:2c:da:9e:e8:96:82:e6:4e:d0:
3c:13:df:42:95:00:00:6d:d3:8a:e6:40:11:d5:1f:46:43:10:
07:d4:b0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:21:29 2025 by rpki-client