Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft
File: Jjw1B3YMW4KVGjB875MrCk02s2M.mft (raw, json)
Hash identifier: 3OqFfWYyUU+ZpF1YYtYUsQseMo57nf9anQjqXl3DMZ4=
Subject key identifier: BC:D1:BB:C6:FD:AE:17:BD:3E:91:8D:0F:CB:BD:41:E1:9A:49:EF:31
Authority key identifier: 26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63
Certificate issuer: /CN=263c3507760c5b82951a307cef932b0a4d36b363
Certificate serial: 01967C0E635FD90BEB3D308EE5A1DC738B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft
Manifest number: 0F82
Signing time: Mon 28 Apr 2025 11:00:39 +0000
Manifest this update: Mon 28 Apr 2025 11:00:39 +0000
Manifest next update: Tue 29 Apr 2025 11:00:39 +0000
Files and hashes: 1: Jjw1B3YMW4KVGjB875MrCk02s2M.crl (hash: cohNNkt5cLSpEUPISgdoGmqvpWLhDfVaOnQA68vWVHY=)
2: w_RZsVQnV5c6Jlesd2-orRCXsVU.roa (hash: wXbhIxP+hDaVa5GS4+mSO9iYIDEjwaRB2ZNKaMWBSnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:63:5f:d9:0b:eb:3d:30:8e:e5:a1:dc:73:8b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=263c3507760c5b82951a307cef932b0a4d36b363
Validity
Not Before: Apr 28 11:00:39 2025 GMT
Not After : Apr 29 11:00:39 2025 GMT
Subject: CN=bcd1bbc6fdae17bd3e918d0fcbbd41e19a49ef31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:92:44:e5:ae:40:ac:ef:59:3f:12:63:5e:
f4:e9:8a:af:59:3e:a4:d4:af:ef:50:d2:b7:1e:70:
19:3b:8e:bf:f8:1a:f4:74:ac:5b:5f:be:17:71:d5:
cc:45:b9:91:57:fd:39:f5:cb:03:b8:e1:fe:9e:a5:
50:ba:a9:1d:65:4d:9c:8f:55:cd:37:87:9a:1b:3d:
32:f6:ef:ea:6c:dd:6f:90:60:12:69:fe:88:4c:43:
89:73:ad:8b:57:9f:94:17:c0:ee:85:f1:aa:02:22:
7c:bb:35:42:ad:c4:d6:5f:3b:fd:d5:54:96:31:69:
46:9c:81:df:c2:44:84:f4:e4:a4:15:8a:dc:c4:f3:
fa:df:ab:73:65:d3:17:bc:82:0e:e1:c4:5f:2a:2a:
9b:61:1a:37:7c:98:10:72:3a:85:30:b8:da:96:e1:
35:62:e3:22:57:66:d7:9b:3a:90:dd:e9:84:dc:4f:
08:c3:05:df:32:ce:9b:93:81:49:4f:c7:02:3c:b0:
b1:cc:18:b7:62:0e:76:5d:20:f8:d1:83:fc:48:8a:
08:e5:ca:08:d2:1b:5b:5e:a4:da:43:31:0b:63:60:
6a:7a:e3:88:58:b4:3a:82:2d:51:69:35:9a:d0:b4:
95:dc:e9:f9:86:ee:b5:97:28:c5:a1:c1:7c:5e:f8:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D1:BB:C6:FD:AE:17:BD:3E:91:8D:0F:CB:BD:41:E1:9A:49:EF:31
X509v3 Authority Key Identifier:
keyid:26:3C:35:07:76:0C:5B:82:95:1A:30:7C:EF:93:2B:0A:4D:36:B3:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jjw1B3YMW4KVGjB875MrCk02s2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/01e613-9bb6-44d0-8e75-90b4f2d4c556/1/Jjw1B3YMW4KVGjB875MrCk02s2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d9:81:e5:59:3b:59:ec:2d:9a:9f:d2:36:31:bb:20:e2:61:
d4:eb:15:0e:ac:a2:ad:ba:4a:47:6f:e4:d9:e5:35:c1:11:cd:
88:6a:5c:6b:9a:40:3d:36:b3:41:1d:4a:53:f7:55:d8:7d:57:
3b:d2:c6:d9:64:96:cc:10:82:b2:f5:94:ad:4d:65:78:d3:cb:
e8:a0:7c:37:f5:87:06:4e:e9:c9:d6:fa:01:d7:ef:96:e2:b3:
f5:23:db:2a:f5:50:47:9e:97:2b:14:74:3d:7a:3f:80:59:e6:
f9:b9:83:f6:ba:f6:75:1f:d6:b0:f3:2e:c1:e7:10:7e:28:85:
93:b5:98:3d:40:ce:2e:d7:96:e4:c6:c1:e1:a1:52:7c:1c:44:
98:74:b9:ba:00:3e:e9:bf:42:5b:02:a0:5b:97:fe:72:d7:33:
87:45:26:64:c8:bd:24:c0:af:08:4f:06:e5:0b:46:6d:17:a2:
c5:fa:ba:0e:a4:cb:62:f1:6c:ec:9d:52:4a:ea:48:e2:6d:a3:
d6:1c:2b:80:99:b5:23:35:e7:29:f9:26:c3:3c:7d:d9:f5:63:
1a:11:b9:2e:63:83:9c:0e:2f:6f:93:3e:19:f1:ac:49:94:a2:
73:06:5c:f5:5e:fd:de:d8:aa:ff:96:ba:bc:ff:c2:29:69:18:
bb:58:aa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:27:11 2025 by rpki-client