Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
File: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json)
Hash identifier: 7QOu1zDva1gsQLfllp0FA4g5wQGZ0w53qDvqcGSh6zU=
Subject key identifier: C2:15:28:6D:FC:F2:BF:0A:F8:19:76:BD:D6:A4:CE:67:28:FA:DB:65
Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
Certificate issuer: /CN=25717849a69ad8df87088da658b2305b8594c8c4
Certificate serial: 0196789F6D2CA9C9A955ED66620D6C299A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
Manifest number: 0F2D
Signing time: Sun 27 Apr 2025 19:00:36 +0000
Manifest this update: Sun 27 Apr 2025 19:00:36 +0000
Manifest next update: Mon 28 Apr 2025 19:00:36 +0000
Files and hashes: 1: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: ewPAMNoW+5I/FsWw3hq+RoMsMBDz24VJXVRq7k75EVc=)
2: lBGL9p4jnzQMYNOwvgWWIRMR64U.roa (hash: 3FeAIvuJzpUiBU31icxKTzpDUG89bC33mLCDCqaCBw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:6d:2c:a9:c9:a9:55:ed:66:62:0d:6c:29:9a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4
Validity
Not Before: Apr 27 19:00:36 2025 GMT
Not After : Apr 28 19:00:36 2025 GMT
Subject: CN=c215286dfcf2bf0af81976bdd6a4ce6728fadb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:4a:25:2b:db:4e:14:0c:56:5a:bb:9a:0b:
ac:62:c9:38:bb:b7:1f:7a:1e:dc:46:62:90:75:b4:
b3:e6:02:f1:05:12:7e:d6:79:93:76:46:51:fb:39:
d4:6e:61:c1:09:dd:88:70:6e:dd:84:8c:f2:20:06:
48:b0:9e:99:2d:0c:a2:75:49:01:eb:a4:5e:65:94:
9f:1b:18:06:21:0e:c8:12:96:1a:f6:ec:3d:24:b1:
ce:4a:d7:54:b5:d7:d7:b7:cc:66:37:de:f1:9a:21:
b0:ec:0a:dc:77:64:b9:59:f2:ed:ba:92:09:35:c5:
e3:ea:1b:7d:1b:33:db:63:80:e2:73:d7:aa:3f:f1:
a1:6c:7c:99:55:5d:f0:6d:53:de:23:a2:b8:ef:88:
8c:4d:1f:bb:28:e9:e3:25:1e:82:33:a3:6f:3c:76:
ed:8a:79:13:43:8e:e6:a0:0b:d5:c6:20:01:d8:b5:
d8:cf:32:b5:38:86:f2:16:88:56:9b:9c:2e:d4:c0:
fa:4e:58:66:24:c4:71:fe:d2:da:af:99:e0:e8:33:
a5:f7:9a:2f:33:cc:c5:1f:79:49:47:d1:0f:9c:43:
46:6a:47:87:8d:4d:07:62:2b:07:a4:a9:6e:e3:17:
ea:7c:b9:53:ff:ee:11:c9:8c:7d:0b:91:ba:b7:f4:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:15:28:6D:FC:F2:BF:0A:F8:19:76:BD:D6:A4:CE:67:28:FA:DB:65
X509v3 Authority Key Identifier:
keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e5:6c:37:c0:91:02:a9:96:16:54:b6:65:a6:f7:0d:14:c0:
bb:6a:62:63:b6:ab:ab:c6:3f:cf:28:3e:83:2e:8e:8c:45:f5:
e3:e1:19:a7:1d:8a:66:1a:98:cf:f8:bb:d9:83:52:78:a4:13:
e5:2f:95:1a:e3:ae:10:91:3f:53:e9:c4:c7:bb:34:88:a8:c1:
37:20:99:2a:6d:79:00:f1:ff:f1:7d:fb:c8:b3:43:93:c2:3a:
24:0f:c4:22:33:da:df:41:b3:b6:17:aa:22:2b:a3:ae:53:3c:
92:da:d6:81:59:7e:56:f8:bb:55:22:21:33:8d:bc:ed:8a:f1:
11:44:e0:8f:96:b8:ee:1d:7a:8c:60:8c:18:af:f8:c2:6e:8d:
e0:52:14:b3:4e:ea:44:34:92:8b:86:aa:fe:5c:e0:ea:3b:87:
f0:46:03:6e:39:4b:47:32:7a:70:c8:9a:8d:ff:8c:e6:df:7c:
a4:47:73:7a:01:30:fd:89:b7:56:4c:ff:e8:de:a9:90:89:50:
7b:ca:e6:37:0c:a8:8f:c5:72:4a:a4:49:f8:f8:88:5c:a7:39:
41:3d:bc:66:6b:a2:52:0b:d0:a0:d2:d6:fc:5a:09:2c:20:fb:
36:7b:7c:22:e2:39:5f:a0:30:0c:c1:a3:e9:5b:8b:34:47:a6:
11:cc:9a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4n20sqcmpVe1mYg1sKZomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NzE3ODQ5YTY5YWQ4ZGY4NzA4OGRhNjU4YjIzMDViODU5
NGM4YzQwHhcNMjUwNDI3MTkwMDM2WhcNMjUwNDI4MTkwMDM2WjAzMTEwLwYDVQQD
EyhjMjE1Mjg2ZGZjZjJiZjBhZjgxOTc2YmRkNmE0Y2U2NzI4ZmFkYjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNlKJSvbThQMVlq7mgusYsk4u7cf
eh7cRmKQdbSz5gLxBRJ+1nmTdkZR+znUbmHBCd2IcG7dhIzyIAZIsJ6ZLQyidUkB
66ReZZSfGxgGIQ7IEpYa9uw9JLHOStdUtdfXt8xmN97xmiGw7Arcd2S5WfLtupIJ
NcXj6ht9GzPbY4Dic9eqP/GhbHyZVV3wbVPeI6K474iMTR+7KOnjJR6CM6NvPHbt
inkTQ47moAvVxiAB2LXYzzK1OIbyFohWm5wu1MD6TlhmJMRx/tLar5ng6DOl95ov
M8zFH3lJR9EPnENGakeHjU0HYisHpKlu4xfqfLlT/+4RyYx9C5G6t/TExQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIVKG388r8K+Bl2vdakzmco+ttlMB8GA1UdIwQY
MBaAFCVxeEmmmtjfhwiNpliyMFuFlMjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTct
ZmUyNGVkMmFkY2ZmLzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTctZmUyNGVkMmFkY2Zm
LzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuVsN8CR
AqmWFlS2Zab3DRTAu2piY7arq8Y/zyg+gy6OjEX14+EZpx2KZhqYz/i72YNSeKQT
5S+VGuOuEJE/U+nEx7s0iKjBNyCZKm15APH/8X37yLNDk8I6JA/EIjPa30Gztheq
IiujrlM8ktrWgVl+Vvi7VSIhM4287YrxEUTgj5a47h16jGCMGK/4wm6N4FIUs07q
RDSSi4aq/lzg6juH8EYDbjlLRzJ6cMiajf+M5t98pEdzegEw/Ym3Vkz/6N6pkIlQ
e8rmNwyoj8VySqRJ+PiIXKc5QT28ZmuiUgvQoNLW/FoJLCD7Nnt8IuI5X6AwDMGj
6VuLNEemEcyaVw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:47:27 2025 by rpki-client