
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: LxCl9fX7j7T28Mpv1fPPRpEqeJP2+4C5rQ8Lsz8sDZM=
Subject key identifier: 3F:03:00:35:DE:E9:95:AF:5C:91:11:36:A9:EB:F7:50:CB:8E:34:AB
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 01967CE9BA978EB8108D113B2C518632F027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 0D86
Signing time: Mon 28 Apr 2025 15:00:14 +0000
Manifest this update: Mon 28 Apr 2025 15:00:14 +0000
Manifest next update: Tue 29 Apr 2025 15:00:14 +0000
Files and hashes: 1: iVIbS2LxmtBFtz1_IM2nGzPQpUE.roa (hash: tzf09d7UopXNcvR8NL3fhh4Pys9GVj3aQxT6Ly8ih98=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: 10TPeIGFG+JANvtt755N5vlyM4Dw9zLvaDGRwE1SNM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:ba:97:8e:b8:10:8d:11:3b:2c:51:86:32:f0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Apr 28 15:00:14 2025 GMT
Not After : Apr 29 15:00:14 2025 GMT
Subject: CN=3f030035dee995af5c911136a9ebf750cb8e34ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:d8:34:f6:60:37:d3:da:a8:f7:a5:e4:74:
1c:00:61:32:14:f0:69:c4:2a:0c:fd:de:5f:5c:7d:
92:70:bf:b5:3f:bf:60:51:23:8c:aa:13:ad:7e:97:
b7:1b:b5:e8:30:73:07:7e:05:8e:b7:08:e3:4f:1b:
3d:3a:cf:ab:14:7d:fb:a0:50:ed:bb:bb:dc:af:88:
d5:29:f2:aa:aa:06:f9:d0:50:14:71:82:9c:12:6a:
97:e8:c9:98:2f:8c:c3:8f:73:2c:4f:99:f3:9e:c2:
4c:bb:03:05:e7:ef:be:88:4d:ad:41:f6:45:c6:d7:
8c:1a:f4:85:75:87:10:f1:06:6a:3d:e9:d6:ac:0e:
d9:54:51:3f:ea:ab:15:37:6c:1e:5e:49:0b:cd:69:
0d:b6:ff:c1:4c:0b:77:34:a6:f7:7d:33:4a:2a:f4:
3f:0e:ea:f0:7b:5f:b9:3a:65:63:1e:a6:d0:35:4c:
c4:e1:31:5b:41:db:12:75:4c:24:37:f6:80:fc:9f:
49:a6:e2:17:2e:0c:ab:08:bb:d4:f3:85:41:33:9e:
8c:e3:6a:c3:3c:e8:6d:25:a3:30:ec:06:c2:45:be:
1b:06:26:96:aa:b0:b9:a8:a9:af:9f:8c:e6:e7:5a:
5d:f5:33:5d:8c:1f:86:94:fa:e8:17:39:1c:72:9d:
b2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:03:00:35:DE:E9:95:AF:5C:91:11:36:A9:EB:F7:50:CB:8E:34:AB
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d2:71:e5:5d:8d:80:e0:28:99:15:b6:5d:e2:83:78:ee:36:
c1:c4:d3:14:97:05:f3:c4:a6:32:ea:db:ab:f3:55:ca:6e:f3:
93:25:c2:da:f7:9e:c2:6d:e5:93:ea:f0:7d:1e:d6:42:62:f9:
c2:fc:2b:d0:e4:bc:d8:35:b9:bd:7b:7d:6c:e4:a8:41:1b:eb:
7a:b9:95:ee:b7:f1:fb:64:41:1c:b7:51:30:6c:22:d9:c7:45:
22:bc:df:d2:f5:fb:04:61:07:72:15:d0:06:39:3c:14:d7:91:
44:91:f6:d3:77:af:bf:a8:6f:8b:a3:d8:91:99:bf:5e:03:5d:
0e:ac:c8:07:5e:71:9a:31:32:d2:0b:f5:ba:84:8b:dd:88:1c:
11:1f:bd:2f:d9:93:64:cf:5d:dd:04:cf:7c:d8:db:34:44:35:
77:54:7c:fa:3b:45:d4:87:ad:03:c1:f8:79:77:9e:5d:3d:a6:
16:2c:99:79:dd:87:27:9a:23:9c:c8:c1:fa:1c:8e:53:a0:79:
21:9b:3e:3e:35:14:0d:94:2f:5e:6a:6d:09:d9:61:c5:e3:44:
63:dd:2b:2b:c4:d3:d8:0a:97:8e:c7:17:c1:dc:c5:aa:c1:5d:
16:74:79:ae:e9:ee:fe:33:d4:4b:f8:d4:44:94:32:ed:e5:f0:
c8:0c:72:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:31:10 2025 by rpki-client