Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File: jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier: 5nZnvDw6nXgbiOHADlEA/mfI1CpV4D5zlqrpAuNc9os=
Subject key identifier: 54:FC:60:A4:F4:3D:90:73:1A:20:94:2A:25:FC:07:EE:F3:39:83:C0
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer: /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial: 019675D5594A228654E3FC1AC15CBFE839CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number: 04B4
Signing time: Sun 27 Apr 2025 06:00:38 +0000
Manifest this update: Sun 27 Apr 2025 06:00:38 +0000
Manifest next update: Mon 28 Apr 2025 06:00:38 +0000
Files and hashes: 1: 9gswIUnAaS1IBv5fuNBqUKNMfqs.roa (hash: lylk+NlcGPhSxgLHOS7jiDLjzNF20oemeodaYXlxSEQ=)
2: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: N/tf8f0yGSmWN3LAgrKcuSSIgwgDIjQu+aSFU6HnHG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:59:4a:22:86:54:e3:fc:1a:c1:5c:bf:e8:39:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
Validity
Not Before: Apr 27 06:00:38 2025 GMT
Not After : Apr 28 06:00:38 2025 GMT
Subject: CN=54fc60a4f43d90731a20942a25fc07eef33983c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:f3:72:9f:16:e0:90:86:5b:a9:b7:3a:a1:
15:03:53:94:14:46:53:c6:f3:15:d9:ae:4b:b0:6c:
75:5f:d6:ce:8c:a4:f1:3a:dc:7c:a2:a4:0e:b5:68:
05:15:da:08:36:eb:63:f4:09:85:55:63:2b:80:cb:
ed:86:db:00:c2:14:e8:48:5d:4b:35:4b:59:ad:27:
9a:bc:ac:26:20:67:d1:9a:aa:e0:87:52:46:e2:63:
1b:7e:a4:bd:b1:e5:6b:03:71:bc:b4:49:06:60:41:
9e:6d:4b:94:b1:1d:aa:16:c4:7c:49:45:14:ed:e4:
09:ef:e9:5c:42:bf:f7:43:0b:a7:03:ab:59:e6:df:
b8:3a:fb:9d:c5:a5:4b:97:8c:44:4d:df:d0:dc:1d:
09:64:2b:e6:e2:14:d0:2f:be:54:db:d5:dc:93:44:
71:d3:7e:ca:2b:59:65:d6:4f:d4:5e:a1:14:17:56:
e9:0a:f2:87:3c:97:51:f5:da:e1:10:7e:e2:80:31:
a8:10:27:cd:c1:1d:91:22:48:70:43:76:06:8b:43:
87:48:9b:ab:33:ff:c2:14:09:02:93:04:d7:b8:23:
a7:02:b8:d9:e5:33:0f:85:03:bb:51:28:6b:a5:4c:
ef:ff:83:3e:7f:a7:bd:cf:de:31:25:a8:1f:83:b0:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FC:60:A4:F4:3D:90:73:1A:20:94:2A:25:FC:07:EE:F3:39:83:C0
X509v3 Authority Key Identifier:
keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e8:e1:7b:6e:18:31:96:20:4d:f2:5a:98:2a:52:7e:8f:5f:
11:db:6d:3f:cf:d1:67:38:04:c2:a0:94:dd:3a:5b:72:3a:10:
14:7a:6f:a8:66:04:5e:49:c5:8d:4b:0c:18:6b:0a:f2:02:f3:
7f:f5:47:2e:ec:60:77:59:f1:77:1a:ae:cd:d7:4d:7c:cb:c8:
d2:e3:5c:2e:6f:db:57:a0:bf:cc:3e:6f:16:2f:89:4b:a0:29:
3b:b9:eb:5a:cf:12:4e:a7:ae:d6:e1:1a:e6:14:f7:c1:cd:d8:
6b:eb:6e:86:e6:b4:df:e6:46:62:8d:54:d8:e0:9f:73:ea:a2:
5e:f7:c6:99:e4:e6:06:1a:69:32:8c:c5:21:0a:8c:1a:34:ca:
12:9f:96:89:25:17:7a:b1:fc:71:e3:96:33:52:70:3a:a9:73:
84:27:d1:6c:25:78:17:6f:9b:32:f3:3b:ce:eb:1c:35:db:5b:
14:17:73:19:d1:c7:1f:67:3b:92:b7:61:19:ea:c8:05:bf:3c:
66:76:b9:6f:bd:63:c5:cd:2d:3b:0f:03:6a:3a:3c:64:d5:c5:
c7:88:21:24:1a:cb:e7:35:fa:32:83:a9:22:8b:d7:57:b7:e3:
54:e8:0f:32:76:06:7d:74:60:18:e7:87:bc:e3:b6:69:53:9b:
1d:ab:c9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:19:05 2025 by rpki-client