Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
File: jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft (raw, json)
Hash identifier: YYcix1DUnMdPBzvR7EjE/r33SkNQeP14cpOO6fNtpAs=
Subject key identifier: 92:BA:E1:F6:B2:A5:10:5F:73:DB:5B:D6:64:FB:DA:D5:B4:28:48:89
Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
Certificate issuer: /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Certificate serial: 01967D20DF47C8B168A9F2C3EE0CA3BA6466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
Manifest number: 0B12
Signing time: Mon 28 Apr 2025 16:00:28 +0000
Manifest this update: Mon 28 Apr 2025 16:00:28 +0000
Manifest next update: Tue 29 Apr 2025 16:00:28 +0000
Files and hashes: 1: Q2J036IozgyoNBJgrr_DVZbFeDo.roa (hash: 8JbN1rBzCDIs6MxiLB09FrHxCFN8hIMN9eyZ3xxwJNI=)
2: jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl (hash: vFAD8WfcMncE4oK5Mk3/xr69WMASdQX7qlQlQHQjdsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:df:47:c8:b1:68:a9:f2:c3:ee:0c:a3:ba:64:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Validity
Not Before: Apr 28 16:00:28 2025 GMT
Not After : Apr 29 16:00:28 2025 GMT
Subject: CN=92bae1f6b2a5105f73db5bd664fbdad5b4284889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:e9:11:f7:bf:ee:5a:c7:2d:83:cb:dc:1a:
aa:b5:4d:92:1c:53:ed:bd:2f:69:80:d5:c9:4b:a1:
83:be:12:70:40:d5:af:98:62:2a:9c:89:b5:5f:73:
3f:35:0b:b4:6f:28:dd:e7:fc:74:22:11:47:04:96:
f4:49:e4:24:a4:5a:a8:82:fe:c9:28:64:11:ef:38:
19:05:ec:cc:07:d4:f6:9d:b8:84:16:7a:64:44:b4:
fa:fb:11:af:a9:3c:cc:88:fc:ad:ee:34:51:51:bd:
52:18:00:19:d5:cb:dc:64:ee:df:1a:6c:62:82:b8:
b8:e0:79:84:59:5a:8b:1b:ee:3b:34:19:83:80:b0:
a4:f1:0b:e1:7b:e9:e2:33:92:00:53:fe:2c:78:da:
ca:03:f9:d3:18:d5:18:76:bc:92:20:15:d4:42:75:
9c:cd:bc:57:3b:2b:5c:dd:98:44:70:b0:c4:9c:a6:
5d:ea:46:07:e1:a7:ed:dc:74:81:a1:aa:a0:5b:4c:
9b:07:70:5d:8b:d9:11:cc:a4:57:d2:7c:53:15:f4:
0a:56:fa:62:8d:3a:18:1a:c3:58:fc:03:5b:5f:ea:
24:e9:7e:7e:be:4b:4a:1b:af:cd:b6:d5:22:47:db:
6c:8b:99:fc:af:95:18:b3:ff:aa:9b:e9:9e:67:ee:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BA:E1:F6:B2:A5:10:5F:73:DB:5B:D6:64:FB:DA:D5:B4:28:48:89
X509v3 Authority Key Identifier:
keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:59:d5:06:bd:7e:0b:2c:8a:20:99:55:02:8f:0c:94:ac:7b:
b6:09:1c:e4:2e:16:51:43:f3:4a:5f:b1:ce:b9:76:4d:00:6f:
02:26:07:65:d0:0e:31:18:c1:62:44:9c:63:0d:5f:80:71:b0:
76:6b:39:ab:05:b9:44:f7:1a:f4:15:a4:ee:96:14:78:3f:0d:
0c:2f:31:57:d3:af:ab:2f:7c:7c:02:1e:cd:69:e3:3a:5a:0c:
1c:66:a2:4c:02:d0:71:25:00:eb:48:d7:1d:80:59:3d:dc:e4:
19:22:fc:7d:ea:87:92:52:ce:f0:e3:1f:b9:08:c2:fd:4f:d2:
34:59:e7:8b:e3:f9:b7:96:50:07:90:b4:35:21:ab:9a:73:78:
b3:f5:cc:17:93:70:80:25:91:c0:8b:24:43:db:75:ab:f6:e4:
91:ee:4a:b2:41:2f:e2:db:0e:51:7d:bb:15:22:98:90:32:ed:
6d:c4:73:87:f6:81:4e:29:66:cd:3c:1b:42:cb:70:98:42:97:
3a:ae:9d:91:46:26:3e:49:9d:75:32:07:53:64:66:68:f5:0d:
50:e2:00:a9:81:e5:54:7b:b4:f6:2b:5e:3e:7a:d7:ac:f1:dd:
42:6d:54:e4:bf:8b:01:c2:0a:44:e7:ec:f1:46:7f:ea:4b:36:
48:19:90:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:18:03 2025 by rpki-client