Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
File: jw23m-h704ZVurcDpg53TE1sI1c.mft (raw, json)
Hash identifier: JYQzhP2tkUJK0shl1wdD04/U2h0Zao3BXWEyhLGDjN4=
Subject key identifier: F2:84:3C:FE:F1:67:D3:8D:A8:90:CF:FD:17:50:B7:5C:1E:D6:1C:22
Authority key identifier: 8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
Certificate issuer: /CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Certificate serial: 01967C45C5F75390DC0B0DF159F7DF49F212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 12:01:09 +0000
Manifest this update: Mon 28 Apr 2025 12:01:09 +0000
Manifest next update: Tue 29 Apr 2025 12:01:09 +0000
Files and hashes: 1: OF_w8skU7WRjWk0mpW9Xvj5C2nw.roa (hash: tQcSraFvFoIta1SmxEd+9qBZqJ+cQ+xPaOZSIV3iL4Q=)
2: jw23m-h704ZVurcDpg53TE1sI1c.crl (hash: yKdtPipqOlq7DILSjlkNkvN/jsQ2aaxuxIXKrY1NTvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:c5:f7:53:90:dc:0b:0d:f1:59:f7:df:49:f2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Validity
Not Before: Apr 28 12:01:09 2025 GMT
Not After : Apr 29 12:01:09 2025 GMT
Subject: CN=f2843cfef167d38da890cffd1750b75c1ed61c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8c:3e:10:f1:2c:de:f8:a1:57:ee:63:0e:ca:
a7:69:c0:ff:23:8e:b3:ee:8b:53:bd:30:fc:61:68:
bb:77:be:85:f5:64:3b:34:d8:99:53:c1:03:27:35:
7b:cb:57:c6:83:c0:63:5f:41:e5:1d:52:eb:0e:c1:
ed:5f:ed:57:14:46:b9:7d:38:f7:d4:d7:41:f6:6e:
2b:33:a2:b0:8c:2f:5b:23:55:0a:fd:93:30:1e:c6:
43:17:bd:13:7c:39:9e:c4:2b:b7:25:ad:1c:9a:25:
a1:2f:62:f4:30:9e:6b:a4:f4:a6:c3:b5:45:25:a5:
30:9c:5d:ec:aa:81:11:3a:50:32:d4:09:1b:b8:5a:
fb:30:04:30:1f:3a:09:4d:99:f6:9d:b2:6c:07:41:
f3:b8:24:e2:8c:79:9b:45:95:ab:e8:20:fb:4b:fb:
d7:b3:b1:9d:d7:3a:b3:f4:30:81:77:a9:cc:40:f8:
31:05:bc:8a:25:1e:87:92:3b:78:fb:7a:ff:29:c4:
b0:d7:07:7c:c9:75:ef:de:e0:b3:c5:68:05:88:c1:
6e:5e:b9:98:df:a8:21:fb:16:ce:64:81:5e:b3:01:
0f:9d:1a:96:5a:1a:32:72:09:79:61:16:ea:aa:89:
f0:a7:6b:11:25:23:84:40:1b:97:19:09:7b:c2:26:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:84:3C:FE:F1:67:D3:8D:A8:90:CF:FD:17:50:B7:5C:1E:D6:1C:22
X509v3 Authority Key Identifier:
keyid:8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e0:d3:c3:c5:ec:da:34:ea:85:9f:60:19:d0:e5:0b:a1:32:
15:f9:61:7b:68:94:16:28:bd:00:fa:0f:1f:69:11:5a:e5:b3:
e7:e1:5a:84:d8:26:a5:09:0c:e0:d7:11:b2:5d:1e:1c:60:bc:
78:28:41:86:61:46:d7:2c:e8:0d:85:5a:2c:75:43:b9:6a:cc:
53:16:05:2d:86:f8:87:24:e9:cd:ca:a5:3d:dd:9c:e8:10:f5:
ac:dc:dc:c3:93:d3:66:75:7c:6c:43:d2:6d:55:f0:90:71:07:
b7:a1:8e:da:ef:97:4c:bf:48:fe:0a:bd:95:78:1a:e3:02:bf:
03:12:48:d7:8b:e8:18:f5:fa:93:bf:7a:92:23:7c:3e:04:60:
7c:c2:54:0e:2e:21:a4:5c:e2:fc:f0:c8:4d:22:40:ef:71:00:
8f:74:b5:0c:cb:9f:72:fc:71:5b:0f:f1:1b:5a:6e:27:e0:1b:
27:62:5a:2d:6a:b4:6d:fe:61:42:22:b2:95:f9:36:80:b1:5c:
8c:a4:b9:cd:79:8f:65:5c:e7:55:42:4b:d4:8f:2b:8b:8c:fe:
6f:fe:d7:64:7f:52:70:50:df:4e:00:fd:85:a5:56:9d:45:94:
4d:f6:9c:ac:b5:7a:71:54:4e:d4:52:0c:02:02:76:98:78:81:
10:97:1b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:06:05 2025 by rpki-client