Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: ZKNzx0n6L2sl14uy0py+QfKhr3gLh70c98R9/DEe9Z4=
Subject key identifier: 10:EF:96:9D:59:37:28:28:3A:44:2D:10:76:5B:A5:03:82:23:D8:41
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 01967C7C4B8BA160C582B2A9968BFB50A036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 0585
Signing time: Mon 28 Apr 2025 13:00:42 +0000
Manifest this update: Mon 28 Apr 2025 13:00:42 +0000
Manifest next update: Tue 29 Apr 2025 13:00:42 +0000
Files and hashes: 1: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: 79NNdjn7ZVW8zUUQ54C262FFWxr92Q9zyh4BadlIYGk=)
2: lHGrQ5ab4Wwh-Q0oJszTsf0BUdA.roa (hash: BJEIpPOdoxYjpK82/CR/sXoES/6zdTI5hZVWKdTDxHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:4b:8b:a1:60:c5:82:b2:a9:96:8b:fb:50:a0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Apr 28 13:00:42 2025 GMT
Not After : Apr 29 13:00:42 2025 GMT
Subject: CN=10ef969d593728283a442d10765ba5038223d841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:92:43:ba:f4:54:33:01:f2:1b:50:7a:7e:
75:04:45:7e:73:e3:7a:df:7e:a7:51:82:f6:7e:b5:
0d:5f:13:24:8b:f4:ab:4e:2a:11:9f:96:6b:d5:58:
9f:78:d4:32:03:a8:4a:49:90:de:cf:0d:1a:c6:e4:
c7:45:25:45:b8:12:42:01:19:62:b7:6c:5b:a3:fa:
c5:65:26:3a:ef:ce:29:f3:0a:4f:d5:0d:49:22:ee:
a6:5f:68:e7:c9:33:1f:64:58:36:04:05:dc:dc:17:
6c:f6:f7:6b:8d:1e:12:a0:e9:6c:3c:c7:93:7b:b4:
0e:82:3b:8d:c8:17:31:78:2e:0e:0f:b3:ef:a5:18:
66:aa:ba:96:0f:3e:db:50:a5:2d:9a:5b:d8:a8:1f:
e7:72:90:90:42:b8:e7:de:0d:95:d5:67:7a:15:3d:
3e:79:87:25:c8:fb:50:a0:3b:55:42:d7:74:cb:6a:
5c:f6:40:a0:27:78:e2:28:93:3c:28:43:84:3d:58:
e7:17:1e:2c:e0:d7:d9:8b:58:6b:62:cb:db:dd:13:
af:6a:51:bd:90:4e:04:a3:a4:6c:37:a6:ba:2d:c5:
5c:bc:5b:46:32:37:05:2a:17:59:2e:4f:36:3e:d1:
0f:52:6b:f0:67:ed:f5:16:ba:77:fe:09:50:5c:c2:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EF:96:9D:59:37:28:28:3A:44:2D:10:76:5B:A5:03:82:23:D8:41
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:de:87:b3:c9:39:5d:9a:dc:9a:30:8e:ed:89:85:04:2c:f8:
54:d7:3c:3f:05:3e:df:a2:13:16:ce:f0:17:eb:4c:af:f4:20:
c6:4c:56:90:41:37:a2:9e:8b:3c:b2:f8:99:f8:ab:e4:b0:61:
73:ca:1a:9b:1c:13:46:fc:09:94:d5:5b:3a:75:d3:ac:d5:ab:
86:1b:93:75:9e:7e:76:77:aa:95:07:69:82:45:1b:d1:04:1c:
2a:de:ba:f6:69:b6:32:c6:5c:1d:64:b1:e8:de:29:21:93:7d:
07:56:b9:fc:ed:2f:ba:87:fc:06:25:c0:a2:df:da:30:a6:fd:
57:ba:95:51:40:bf:e6:47:6f:dd:dd:28:c8:53:fb:0b:73:9c:
d0:62:1c:b1:3e:bd:7c:e3:4c:c4:9b:46:e4:be:c6:62:ca:4c:
f2:ae:dc:f6:ae:06:58:6f:2e:50:a1:28:4c:b8:7b:15:9c:1e:
e5:62:44:ca:6d:84:24:65:48:9d:34:78:cf:ed:e7:19:e7:05:
02:14:d1:74:52:40:48:3c:00:c3:1a:51:4b:91:3b:0e:9f:8b:
75:50:bc:a3:fb:7b:c9:13:95:63:e8:c3:ed:a8:b2:d8:39:6a:
b4:11:5b:7f:9a:29:d6:33:27:68:03:ee:e6:6e:45:02:8c:e1:
79:85:94:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:02:04 2025 by rpki-client