Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
File: JBOjQZZ67b5SqLEcecsTkRpKn3c.mft (raw, json)
Hash identifier: +dg3hRF4WF7NRfgrXmqojuRS6+8x4EerANM7nm13OvU=
Subject key identifier: 04:48:88:C9:A3:0A:44:9A:1E:65:FC:97:0E:CF:C2:1D:2D:D0:AB:1F
Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
Certificate issuer: /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Certificate serial: 01964B90529DE3163444DA87C652DEBC516E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 01:01:11 +0000
Manifest this update: Sat 19 Apr 2025 01:01:11 +0000
Manifest next update: Sun 20 Apr 2025 01:01:11 +0000
Files and hashes: 1: JBOjQZZ67b5SqLEcecsTkRpKn3c.crl (hash: qkANfJ065emwQgHYCsDRQyulR6JXucudXoF4kgEzl5k=)
2: Q9tpjWUnZ29Md-50Kxu_HQRQ-Mk.roa (hash: zHTjqQivC3Wds3ZRsFbwTssRdBvxgxtLcNo5p+QkSKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:52:9d:e3:16:34:44:da:87:c6:52:de:bc:51:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Validity
Not Before: Apr 19 01:01:11 2025 GMT
Not After : Apr 20 01:01:11 2025 GMT
Subject: CN=044888c9a30a449a1e65fc970ecfc21d2dd0ab1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:91:96:63:ad:03:5f:71:8e:2e:c1:e0:00:
d8:fc:9e:10:17:a7:61:13:e9:eb:58:10:0b:ba:e6:
1a:11:02:e7:71:96:81:cc:78:77:df:2c:f9:a3:b1:
df:06:83:18:3b:94:b2:74:e3:12:dc:7d:1a:e2:6d:
7c:54:9c:67:b1:dc:f1:84:b8:ee:74:9c:de:f5:9b:
f6:a7:7c:1a:e6:f2:24:02:0b:bd:88:a8:e6:ad:fc:
48:fc:27:94:be:86:00:b8:d8:4b:6d:3f:bc:9f:8d:
5d:00:f1:47:41:26:a8:d8:b3:f9:61:3e:7e:e9:3d:
bf:4a:6f:85:4d:f6:fe:f0:d8:5c:ce:bf:3f:aa:5b:
96:4a:91:21:06:9e:8a:f2:29:94:9e:ad:3e:3c:4e:
89:a0:cb:ae:e8:0e:1e:31:f5:c6:67:33:5c:ef:5d:
87:17:5f:97:88:98:7b:d9:53:cb:d1:6d:99:8e:6c:
c9:f9:81:a1:66:48:e9:da:ac:9f:20:24:c3:80:48:
b3:28:6a:2f:51:b7:31:fd:60:71:cb:d6:94:c4:82:
f6:f5:f8:24:76:6d:52:03:0f:d2:4c:52:50:4b:e6:
e7:80:9a:f5:35:cd:a4:4b:0b:12:87:5c:ca:47:39:
f8:64:3b:42:23:c5:ac:f1:a1:93:a2:63:c7:96:4a:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:48:88:C9:A3:0A:44:9A:1E:65:FC:97:0E:CF:C2:1D:2D:D0:AB:1F
X509v3 Authority Key Identifier:
keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f2:af:f1:70:0f:71:5a:c5:c3:13:38:93:6f:9e:f4:74:4c:
20:b3:8b:49:06:4c:3b:0c:f0:f8:a0:0f:8f:78:7b:a7:f7:cc:
a6:0a:5e:4d:18:ac:0e:b3:d7:45:f7:a5:d7:4a:2a:a4:bb:93:
6f:dc:03:94:f1:ad:51:b2:70:59:91:cf:3d:06:3b:86:ce:ec:
2f:9f:65:70:39:a8:04:47:ef:84:65:9f:d8:65:c6:37:36:6e:
d9:6b:44:87:90:fb:b8:82:bb:48:be:4b:19:d9:bf:72:72:39:
33:2c:04:a3:f7:c9:97:26:77:b7:64:fd:9d:ce:f9:24:d7:cd:
2a:de:0e:87:73:80:44:1d:13:39:5e:b2:ba:68:12:d1:5b:57:
0b:85:8b:59:39:06:4a:6f:d3:ed:9e:e5:8e:5b:d1:73:53:91:
f2:eb:59:e6:3d:dd:c6:a1:c2:d3:91:da:dc:34:69:65:ab:25:
fa:04:fd:ac:7f:b9:cb:3c:78:ca:16:49:ab:7e:3e:35:71:c0:
26:64:3f:57:14:01:85:3b:ce:e5:be:59:5e:d4:52:b5:e0:92:
32:d1:4c:07:90:fa:88:07:55:07:67:75:3e:54:4e:90:d6:d3:
43:04:f8:d9:68:ab:23:67:8d:c2:33:66:2a:13:d5:dd:df:ee:
c9:0c:13:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:35 2025 by rpki-client