Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: 1w7Qhrd72cmCrCti6FzeUEG18LQAa64HKYaCaKLJ+Qs=
Subject key identifier: 4C:2E:E1:3C:AB:38:5E:77:8E:3A:CD:FB:1B:B3:0C:A4:CD:DB:DE:3C
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 019579B4642C9533CB7AFB061436D7FE1583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 06F0
Signing time: Sun 09 Mar 2025 07:00:19 +0000
Manifest this update: Sun 09 Mar 2025 07:00:19 +0000
Manifest next update: Mon 10 Mar 2025 07:00:19 +0000
Files and hashes: 1: BU1YFwzPITRJs7Qej4xcLZpPD5M.roa (hash: VsXDY2e9w0zN+nUNkUBmRlpbBzNwCWexC0/Pv60Tz48=)
2: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: a2biNbeNa5fRP5TucrbYIQUX9mVyHkVO9u/IDtWuitY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:b4:64:2c:95:33:cb:7a:fb:06:14:36:d7:fe:15:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: Mar 9 07:00:19 2025 GMT
Not After : Mar 10 07:00:19 2025 GMT
Subject: CN=4c2ee13cab385e778e3acdfb1bb30ca4cddbde3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:3e:af:a1:2d:80:77:26:cb:75:bd:cb:c2:
39:0a:86:3a:7e:cd:a9:9f:bb:7e:9a:ce:20:60:5a:
33:9f:83:56:fa:40:11:43:70:d1:bd:63:5e:18:c4:
dd:31:3c:18:f3:76:cc:b9:a0:fb:a4:ca:45:29:e2:
e0:9d:7c:c9:a2:e2:28:5c:69:a0:05:81:e2:4a:31:
19:95:34:b0:e4:79:25:65:ad:19:14:24:4f:28:e8:
13:60:f7:aa:3a:2b:2f:5c:55:20:15:1a:3b:3f:dd:
5e:84:fb:ea:d6:9a:70:82:25:ed:88:97:80:81:44:
0c:3a:21:30:81:b7:a7:77:e0:8b:d8:6f:86:42:a1:
2a:e9:59:17:94:0b:cc:eb:55:39:93:c6:b1:1e:05:
42:67:4d:fd:e9:c3:6d:2d:c7:a6:a5:99:af:ff:58:
80:1c:9e:a1:65:94:7b:93:7a:8a:6d:3b:78:fe:92:
6d:bf:6e:e0:8f:31:b5:d4:c7:c2:bf:5b:49:ba:2b:
56:c1:73:0e:d3:28:96:20:13:93:72:b0:45:1f:a4:
29:19:a8:c2:b2:36:9f:6e:f7:9b:42:25:22:a6:84:
ac:e6:0e:cc:2d:78:73:e6:84:e5:76:d4:53:5d:b7:
70:a9:de:04:9c:4e:a6:23:17:c7:53:81:fa:2c:77:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2E:E1:3C:AB:38:5E:77:8E:3A:CD:FB:1B:B3:0C:A4:CD:DB:DE:3C
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1a:1d:e2:d3:ee:3c:ef:f7:c1:cf:32:df:dd:0e:85:0b:cb:
cb:8f:0f:21:b6:4c:91:88:f0:d9:68:c9:7c:ad:0f:19:60:33:
8e:73:1e:e1:21:85:16:47:9b:4d:08:4e:12:da:da:fe:81:97:
64:6c:00:7f:a3:37:b0:5b:7e:c6:eb:f0:95:28:74:3c:14:fb:
e8:bc:f6:33:26:9f:3b:ad:30:83:e7:b0:d3:31:5c:f6:8d:1d:
60:f3:7b:68:cf:24:62:3e:5e:bd:bc:42:3f:4f:3a:93:5c:dc:
f3:cf:15:87:da:d5:93:90:4a:56:2e:db:d0:0d:16:f5:8f:4e:
8e:5b:f7:fd:f1:85:51:45:f8:10:7a:95:fe:27:2c:09:d0:fb:
aa:8a:f2:a8:16:85:29:54:55:63:22:fd:c7:8b:a9:79:a4:7e:
de:94:5f:e2:29:51:50:d8:7f:5c:14:9b:cc:c8:1c:d9:5e:ef:
28:97:c3:a9:63:28:a2:38:e9:46:95:37:63:23:25:ea:a9:a4:
db:96:7e:1b:3f:4d:5a:c8:e1:71:1a:e7:50:f7:6e:d8:60:1f:
b5:c9:11:29:6b:6f:c8:c5:92:3d:5c:b3:5e:15:5a:7c:f7:97:
f9:27:c7:3c:96:1b:a9:a8:9a:87:38:32:af:6e:73:bc:57:d5:
aa:2c:e6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:05:06 2025 by rpki-client