Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier: aLahMc2V28UG3qsakZ/V68KIGjuU9P2qyyNgj8EOtYk=
Subject key identifier: 19:25:8A:2B:5B:95:FA:75:A1:E4:F4:99:4F:8D:97:32:6C:48:3F:82
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 01967AFBCA80AED32E00886784FC0D825EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number: 0BA6
Signing time: Mon 28 Apr 2025 06:00:43 +0000
Manifest this update: Mon 28 Apr 2025 06:00:43 +0000
Manifest next update: Tue 29 Apr 2025 06:00:43 +0000
Files and hashes: 1: DdP_Bqbhgl16gdJsvkBhi1YcDjQ.roa (hash: I6Jh8sH5S9Q2lg3Ub1gkdbdEGtUo1NZqfvOrCbSIvmc=)
2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: Jj62gBWuB7p/sF4VF7NGB9bz4vdgvPjikY6/M+20rWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:ca:80:ae:d3:2e:00:88:67:84:fc:0d:82:5e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Apr 28 06:00:43 2025 GMT
Not After : Apr 29 06:00:43 2025 GMT
Subject: CN=19258a2b5b95fa75a1e4f4994f8d97326c483f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:fb:d5:fe:89:df:b6:49:5b:b1:c9:16:4e:
37:db:c2:de:2d:b0:a6:8f:4e:b3:06:de:e7:ed:7c:
74:8c:35:99:a2:12:fb:ab:e1:1f:46:b8:01:61:8c:
ca:f2:18:4b:ed:ab:08:56:38:ab:a2:79:65:42:19:
7f:0d:a5:82:51:1f:36:c9:3e:9a:f2:50:4b:be:1b:
a3:81:52:a5:b5:ed:53:6e:78:79:4e:61:17:94:ca:
54:07:8b:84:7c:b7:32:66:a2:78:a3:f0:8b:39:f0:
59:da:ee:da:6c:10:62:19:ca:e2:59:47:a4:81:ff:
90:56:f8:92:b8:b8:b1:4e:47:34:82:c4:22:4e:87:
13:f5:1e:ae:29:ee:85:81:d2:cf:7b:83:97:59:11:
3b:67:8b:c2:66:40:a1:6c:d6:bc:d6:ac:30:14:de:
20:31:89:ed:48:72:5c:42:cf:fc:42:41:a6:1f:d1:
15:63:49:0b:bb:de:62:39:08:25:be:36:7d:ec:c3:
e2:88:0f:6f:3d:b4:24:69:43:7e:7d:b1:97:19:8a:
f9:52:26:c4:18:df:0b:76:ed:7f:bd:18:93:45:24:
32:57:89:a9:36:25:48:2a:12:31:95:6c:5c:5c:f5:
ed:a8:9c:0f:63:4b:10:f8:b1:a3:cf:6f:a8:bc:56:
76:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:25:8A:2B:5B:95:FA:75:A1:E4:F4:99:4F:8D:97:32:6C:48:3F:82
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d7:e7:52:c4:bc:24:17:9c:82:ca:74:b1:df:1e:d2:8a:58:
35:06:29:10:d2:2d:5d:94:c0:9d:1f:8b:30:67:fa:d1:ea:fb:
83:0e:c5:6c:76:74:99:41:29:29:b8:21:bf:f1:af:9b:8d:55:
ed:7a:27:ac:1f:ac:3e:7e:16:37:cb:d3:ad:20:4d:48:12:93:
8b:13:d1:ed:32:2c:d0:ea:0a:01:c3:52:9f:09:7d:4f:84:6b:
f5:61:91:a5:2f:4e:7c:85:e2:d0:78:be:d3:e6:1a:6c:6e:98:
6c:2f:5c:b5:a7:f6:44:f4:31:51:30:c5:2c:25:db:16:72:b9:
15:38:77:80:ea:56:e2:68:0e:08:a2:21:39:8c:23:65:70:a4:
b6:cf:ee:de:5c:a5:67:8e:90:17:88:28:38:ea:60:1f:5a:c5:
a5:97:32:ae:ba:b9:5f:b2:15:03:b6:ef:3e:10:aa:d2:c2:eb:
28:9a:49:ff:ed:35:0b:77:38:98:24:9c:19:83:b9:89:5f:49:
65:d4:c8:f8:89:61:4b:63:cd:2e:52:d8:13:2c:5a:5d:09:fe:
2b:1e:cd:54:88:79:fe:7a:8e:7c:a7:ac:ed:ab:e4:ea:4a:d0:
8d:5c:cb:c8:44:9d:67:6b:a4:93:be:9d:94:39:e5:34:e2:65:
41:00:b3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:25:45 2025 by rpki-client