Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: uGjrho4+K4Qo4ijRqGnFJsxB3qK0U5tyz55pJ1HiuoE=
Subject key identifier: 95:6B:87:D1:8F:B3:1A:2D:8A:75:80:33:2C:4B:34:0B:43:31:A4:76
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 019656EEDA63E3B34F6BC8DB1084A5BFC51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 03C5
Signing time: Mon 21 Apr 2025 06:00:16 +0000
Manifest this update: Mon 21 Apr 2025 06:00:16 +0000
Manifest next update: Tue 22 Apr 2025 06:00:16 +0000
Files and hashes: 1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: lJhIm0pUF75yqo+aS8ZVnOmfx+9qoZajqNlw0Z7CDfU=)
2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ee:da:63:e3:b3:4f:6b:c8:db:10:84:a5:bf:c5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Apr 21 06:00:16 2025 GMT
Not After : Apr 22 06:00:16 2025 GMT
Subject: CN=956b87d18fb31a2d8a7580332c4b340b4331a476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7d:9b:bb:62:f3:7d:d4:d0:22:68:a6:38:25:
ce:a0:0d:be:1c:ff:59:b6:44:51:f7:ca:8d:f0:fe:
bc:29:da:58:df:b7:ac:74:7e:40:b6:e5:89:8f:04:
df:6c:1f:fe:58:91:64:10:c2:43:be:0d:7d:6a:9a:
91:7e:6c:9d:3c:3a:78:e3:16:9d:2c:31:b5:4c:cc:
48:81:dc:5f:eb:08:2b:71:8d:1e:ca:ae:3a:0e:11:
a0:8e:61:63:27:e8:d4:25:7d:34:10:89:73:04:03:
90:2d:87:e1:06:3d:49:74:86:94:7d:ef:59:91:9b:
b8:5e:79:a4:d4:9b:be:e2:a3:b3:8d:a9:07:9d:f6:
20:78:23:9c:d2:be:3b:38:fb:2f:d1:41:fa:a0:d1:
07:02:f2:79:c8:ea:a8:5b:74:4c:84:34:31:36:b7:
09:60:94:4a:2e:fb:4b:9a:fc:c5:e2:5d:1b:ec:4d:
ca:35:15:01:78:1c:3e:1d:ab:42:09:02:6a:81:61:
88:ea:11:3c:3a:19:e5:a9:d3:66:f3:09:75:68:7a:
0f:db:d4:49:22:68:ec:18:ff:95:6e:a1:0f:b0:ec:
2b:86:04:02:3a:db:57:0d:9c:8f:dd:b9:cb:ae:5c:
34:5c:99:86:09:8a:23:fd:ba:85:b5:05:6f:54:23:
58:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6B:87:D1:8F:B3:1A:2D:8A:75:80:33:2C:4B:34:0B:43:31:A4:76
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b2:b6:17:96:36:96:a3:a7:5e:7f:d2:0e:55:50:e5:d6:bf:
22:93:69:24:34:27:49:21:43:03:4f:89:32:80:47:f0:cf:f5:
ba:43:4f:a1:b9:35:48:28:9f:ac:30:15:46:7f:b2:45:b3:db:
96:f7:44:c7:e6:23:80:32:76:23:47:e6:f9:3b:29:cf:7a:50:
c4:50:45:22:46:43:06:b2:c4:c1:34:20:b3:3f:6e:65:d3:5c:
5c:b8:2b:83:95:f9:c8:61:5a:3c:27:53:e9:9b:6b:bf:92:0c:
eb:55:cb:ec:c1:0d:b8:30:f2:8e:43:b7:4c:b1:77:be:a3:85:
58:1e:85:3c:9f:5a:5d:54:54:7f:b7:02:4f:2c:b3:58:f5:48:
57:76:9e:92:95:f9:b7:d2:b7:56:6d:74:d7:ac:0d:b7:eb:19:
83:97:9e:5d:97:68:39:92:21:2d:20:fe:16:15:18:ec:12:5e:
a1:5d:e3:71:0f:1f:6c:5f:19:03:dd:aa:75:31:a6:5d:28:89:
87:02:73:36:4d:cf:c5:e2:e6:4d:66:03:87:a3:a6:6b:85:22:
93:bd:a0:d1:d6:24:90:b0:f4:14:bf:46:0a:ac:22:3f:cc:ed:
99:94:39:a0:57:4e:a4:73:5b:48:e1:c7:8b:17:a0:7a:60:ac:
e1:0e:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:39 2025 by rpki-client