
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: P1dnMQYET1INBixrUPXS/E6hTgoV9+wVn+bn3QQSeIA=
Subject key identifier: A8:39:F2:C0:2C:09:7F:93:E7:29:BA:95:3B:1D:F2:E3:A5:47:82:8A
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 0196759E4728D68FF04023CC89820CA631A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 0344
Signing time: Sun 27 Apr 2025 05:00:29 +0000
Manifest this update: Sun 27 Apr 2025 05:00:29 +0000
Manifest next update: Mon 28 Apr 2025 05:00:29 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: YsQhDrFsOlBNoKaJHolSmzeL3+G58DVUJ8/jWrFkXT8=)
2: cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (hash: pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=)
3: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (hash: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:47:28:d6:8f:f0:40:23:cc:89:82:0c:a6:31:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Apr 27 05:00:29 2025 GMT
Not After : Apr 28 05:00:29 2025 GMT
Subject: CN=a839f2c02c097f93e729ba953b1df2e3a547828a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:cc:f5:4f:bd:54:21:40:6f:3f:b0:c9:0b:
da:37:e0:01:ae:d3:27:a6:23:72:3e:92:e9:1a:12:
ab:73:18:3d:f7:28:d9:dc:68:ec:a6:cd:58:76:81:
d2:5f:3f:b1:b5:a9:09:d2:92:7d:df:7f:13:18:d8:
50:db:bf:5b:2c:47:f7:b0:1b:4e:18:3d:17:06:96:
ec:3a:41:c0:8d:dd:1e:c0:1c:ad:91:1d:2b:fb:e0:
64:5f:22:06:5e:95:38:64:0c:7a:ae:59:40:e2:e6:
a2:b1:21:48:c2:36:e4:34:6c:25:13:6e:95:6e:42:
8f:7b:c0:ed:a6:fb:da:0e:3a:ac:3f:57:a7:c7:e2:
7f:6f:6d:21:5a:02:b2:84:68:ed:18:23:12:c3:4c:
bb:06:7e:b2:f7:af:1b:44:da:84:83:de:4d:f0:40:
eb:f3:74:6c:f9:18:34:80:c9:87:26:69:6a:72:c9:
20:57:0d:5c:31:10:cf:19:dc:e2:ca:c7:2e:20:37:
73:6c:c4:cc:a1:37:4b:2b:ca:27:cb:ae:51:77:6d:
79:05:3f:42:bb:38:53:8f:b0:4f:1e:a0:0d:6c:ac:
97:a6:76:51:7e:62:a5:f9:e8:b3:23:76:36:1d:49:
8e:dc:c7:9a:09:cf:40:72:e7:15:c7:0c:b3:b3:df:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:39:F2:C0:2C:09:7F:93:E7:29:BA:95:3B:1D:F2:E3:A5:47:82:8A
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4a:cc:3e:13:4f:83:0c:d6:7e:fa:e0:ef:df:29:37:43:eb:
f4:8e:5d:9a:13:5a:87:f9:0a:3e:17:9b:e8:8d:f7:37:af:1e:
aa:3a:90:2e:81:a9:4d:61:f3:93:49:7e:0b:89:69:19:f3:55:
36:10:ea:00:61:12:53:76:f7:75:13:46:1c:94:a6:8b:8a:09:
eb:df:a1:d7:2d:40:8a:51:de:c4:37:ee:ad:31:d3:e8:9d:83:
f3:0e:a1:87:fe:0e:64:c2:22:36:5a:47:b5:49:08:4e:61:16:
3c:57:83:86:0f:26:7f:1b:ba:79:05:70:05:63:98:66:15:61:
4b:0e:95:3b:42:5b:c3:19:f4:99:d0:02:d9:7b:a8:b8:cf:12:
a2:3c:d6:69:a2:19:2e:c5:f3:0c:96:78:a7:a5:15:bf:17:24:
8b:70:81:4b:b9:30:2a:31:e6:6e:60:63:ff:06:c9:df:73:da:
21:97:fe:d2:ef:92:6e:91:65:cf:af:3e:0d:bb:9d:72:e2:79:
e7:8d:35:a2:50:82:6f:b1:f3:7e:6d:e8:34:4b:a5:90:90:74:
0d:e2:14:17:27:5e:e6:cc:f9:de:3e:20:cc:06:f5:65:85:44:
89:ad:ae:b8:f9:7d:c4:d6:a9:ba:d9:63:28:53:32:6b:0c:bb:
a6:9b:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:38 2025 by rpki-client