Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
File: jzASR05qobNrQgZN0XWzDtgi5zU.mft (raw, json)
Hash identifier: Byb7Q0m5Z1kAUABbBWhEzs4UjlB3iIAslx454DMLiLU=
Subject key identifier: ED:16:7A:0D:8A:D5:0F:0E:0E:D8:F7:08:9C:F2:55:0B:8B:C0:D0:6C
Authority key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
Certificate issuer: /CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Certificate serial: 01967CEA2477698F3FA8793CBE1747EFC1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
Manifest number: 1322
Signing time: Mon 28 Apr 2025 15:00:41 +0000
Manifest this update: Mon 28 Apr 2025 15:00:41 +0000
Manifest next update: Tue 29 Apr 2025 15:00:41 +0000
Files and hashes: 1: hSeJLXUeQJLgsdHt2Swy2Krt_5Q.roa (hash: 1r4uFqSNgKddi8IkUrdMVRZBEoRqwJZMemm/bbM90fE=)
2: jzASR05qobNrQgZN0XWzDtgi5zU.crl (hash: 9jiYTrIgKmzfVu6671s6D6gtWKfju1in+n4PsOGK13Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:24:77:69:8f:3f:a8:79:3c:be:17:47:ef:c1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Validity
Not Before: Apr 28 15:00:41 2025 GMT
Not After : Apr 29 15:00:41 2025 GMT
Subject: CN=ed167a0d8ad50f0e0ed8f7089cf2550b8bc0d06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:72:d2:b2:e4:c9:5c:7a:92:90:6a:6b:a6:
bc:8d:4a:43:b0:05:8c:f4:a3:df:6c:cb:d2:7a:96:
68:66:f1:0a:a6:2c:03:ad:97:bc:bb:9e:5b:f0:21:
ed:69:b3:49:ed:fe:0e:ee:9b:7a:13:65:97:9e:89:
94:cc:c6:f8:bc:f5:27:f5:a5:f8:72:de:43:90:38:
f8:1f:09:10:4c:8d:c7:5b:02:96:42:c8:62:03:a4:
e1:9a:27:8a:f4:f2:d5:b7:ed:cb:1e:e7:0d:c4:a0:
fb:24:16:78:28:49:53:08:8f:2a:e6:81:24:17:dd:
47:09:b4:2e:6d:84:e2:92:6e:8c:c0:c8:dd:e4:38:
d5:45:ed:13:dc:69:6a:58:8c:1b:17:56:40:a1:a3:
28:95:51:2c:25:f4:b8:f6:23:ac:97:fd:e7:59:b3:
9c:86:61:2f:24:b8:c9:5e:f5:e0:a5:31:99:87:5f:
fc:cd:cc:a3:ee:ee:b2:53:4b:56:74:84:fa:64:b1:
dc:12:d4:f7:70:60:a7:c1:8c:81:7f:be:f8:3b:7d:
6c:6e:1c:c8:8e:1a:ad:2d:84:83:98:2b:46:ee:79:
c4:59:90:a8:b5:45:fa:3e:bb:96:2f:ba:c5:a5:93:
d9:69:af:91:f8:86:fe:51:c4:a0:a3:df:04:bf:5e:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:16:7A:0D:8A:D5:0F:0E:0E:D8:F7:08:9C:F2:55:0B:8B:C0:D0:6C
X509v3 Authority Key Identifier:
keyid:8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:06:cf:c4:71:55:94:5c:46:1b:c6:73:2d:8c:55:22:ab:d0:
e5:e6:fa:5e:24:95:56:08:e3:a0:28:d4:8e:1c:28:bf:3f:9b:
7a:d0:46:a0:63:78:ac:92:4c:45:6c:3f:ad:49:8b:32:7e:7f:
2d:76:b5:cb:ac:46:45:e9:f1:96:1f:b0:ec:1e:78:ef:0c:9d:
90:f0:50:42:12:4e:01:90:a5:a2:fe:cd:a0:ea:98:a2:0d:5e:
46:87:61:72:6a:a6:70:e9:6f:75:0d:b0:19:0c:e8:1a:ed:3e:
c0:eb:d8:17:1b:91:d8:51:8d:d6:c4:06:85:31:05:77:6e:80:
3c:6d:3c:20:bd:44:27:a5:a3:a2:67:42:fc:24:ee:d3:01:33:
50:23:04:ab:2a:d7:5b:2e:f2:c7:3d:6c:19:3c:fc:a9:cf:b0:
7f:da:24:07:18:68:4f:50:0c:4e:4b:a5:aa:e3:47:f8:9d:02:
53:f6:74:5a:82:3c:16:cf:66:25:5f:eb:f4:64:89:09:14:2b:
86:98:26:f9:2f:04:67:52:4f:87:8f:80:53:8b:2c:b3:50:b9:
2d:7f:4f:06:f9:18:63:c2:81:94:82:18:08:54:73:14:35:1c:
35:cb:97:ad:46:37:d2:fb:2f:5c:34:a1:c9:8e:0d:0e:08:2c:
05:03:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:34:03 2025 by rpki-client