Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: njbc46B0N8a/dHP8ukFcAyuJAfwi5rCBTSZODzIz5vg=
Subject key identifier: EA:B7:D0:A1:B3:56:64:DD:61:56:84:87:65:F2:12:57:56:18:A1:8D
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 01964EFED9CD0C4FE02744A924CDDD02607D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 1242
Signing time: Sat 19 Apr 2025 17:00:46 +0000
Manifest this update: Sat 19 Apr 2025 17:00:46 +0000
Manifest next update: Sun 20 Apr 2025 17:00:46 +0000
Files and hashes: 1: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: P3P1MVk9exv8ZWrv6j0gEn4ucoxHDxFu1jBbJT3kvxM=)
2: vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa (hash: mmQc628tPl3bs34ALUnwk7MYS2YDfpoBWJfmEYCNwMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:d9:cd:0c:4f:e0:27:44:a9:24:cd:dd:02:60:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Apr 19 17:00:46 2025 GMT
Not After : Apr 20 17:00:46 2025 GMT
Subject: CN=eab7d0a1b35664dd6156848765f212575618a18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:be:21:a5:e1:99:ce:e3:77:69:ad:e5:44:40:
50:9a:c1:89:85:c3:83:00:92:ae:43:0c:7e:06:81:
35:73:6b:6d:22:f0:e2:c1:fa:6f:1b:f9:51:86:00:
76:3d:2f:11:21:21:7f:99:be:71:ca:22:82:80:ce:
3a:0c:a8:fa:0c:bc:62:43:21:9c:70:3f:15:76:c9:
ca:0c:21:ed:08:38:e0:53:26:2c:75:da:fb:5e:c5:
57:58:c9:a5:2e:d0:89:2b:8b:c2:31:f4:8c:71:95:
cb:cc:26:87:85:77:a7:96:a4:e9:7d:02:fe:a2:cd:
f1:31:a4:34:68:d7:f2:39:d7:29:d1:15:2e:31:dd:
19:a6:bc:f5:48:91:b0:9d:32:8b:ef:35:5e:78:f3:
33:da:c6:f8:c0:0c:69:72:67:1a:0b:56:20:ce:dc:
08:f4:58:81:e1:a7:5b:38:e1:79:a4:49:ef:41:ce:
5c:9d:c6:1f:6c:ec:c4:97:7e:59:5b:4d:ec:45:71:
f9:2c:af:c5:a2:40:31:68:08:31:e2:16:b7:1c:f1:
12:08:30:db:86:d9:18:ec:d4:d5:71:4c:03:cf:d9:
71:4c:7e:ae:9a:5a:68:85:7a:3f:2e:a4:f7:09:dc:
a0:c9:1f:e8:82:09:31:f3:54:5a:d1:a8:2e:b4:e9:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B7:D0:A1:B3:56:64:DD:61:56:84:87:65:F2:12:57:56:18:A1:8D
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:31:36:5e:27:4d:9a:1c:4b:18:4d:af:fe:66:5e:b1:2f:5f:
8f:de:ab:17:38:64:38:0f:6b:2a:48:9c:1a:3e:fc:cd:d1:4f:
92:d0:d4:00:ac:d4:70:16:eb:0c:6c:70:67:33:d8:8a:9a:e8:
d2:7a:4e:a5:be:4e:ec:b1:70:7a:3a:1f:bd:ce:8c:21:b1:75:
03:2f:a6:32:9d:f1:35:ae:9f:e8:57:69:74:66:b1:f5:e8:aa:
cc:b8:7d:94:d7:a3:b2:c2:ef:be:54:ec:76:48:39:09:93:d1:
dd:71:d9:8e:5c:83:92:03:3c:2c:6e:6c:10:67:2e:e5:b6:74:
96:38:ea:b6:98:5c:d3:dc:8f:b0:28:58:1e:b3:a4:54:95:4e:
68:a7:73:40:97:84:d6:2c:aa:1d:f4:f9:9c:a1:15:69:20:16:
67:fa:2e:b5:b9:1e:24:5e:93:4d:2e:20:47:63:e8:2f:9e:77:
65:2b:87:34:4b:42:3d:54:c1:3d:e1:7e:7e:65:73:e2:35:b3:
9e:35:c0:2c:3d:aa:03:84:c4:dd:17:c2:e4:d2:26:5a:ce:ac:
fb:d7:af:52:72:bd:50:5b:a9:fa:df:35:48:30:5f:ed:a9:f2:
7b:36:e9:07:24:9b:2f:23:44:67:5c:bf:e6:ae:af:24:f8:61:
7c:cd:ee:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:34 2025 by rpki-client