Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: +G51xhZBFsJAyUIgNOUOfdhiS1EvdjFVWRSmexPYnXs=
Subject key identifier: EC:9E:05:0A:C4:E2:13:AA:5E:C5:77:DD:F7:1C:A4:15:6C:52:74:C7
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 0196730B2E510FD3D10AE8888BA46C49178C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 03B4
Signing time: Sat 26 Apr 2025 17:00:34 +0000
Manifest this update: Sat 26 Apr 2025 17:00:34 +0000
Manifest next update: Sun 27 Apr 2025 17:00:34 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: M32jhf2Ifh/B11Tn4MAM8Wn5eeQBC6BhlGszrHk6alc=)
2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:2e:51:0f:d3:d1:0a:e8:88:8b:a4:6c:49:17:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Apr 26 17:00:34 2025 GMT
Not After : Apr 27 17:00:34 2025 GMT
Subject: CN=ec9e050ac4e213aa5ec577ddf71ca4156c5274c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:4c:98:01:e8:c2:f6:77:70:1f:c9:40:9f:
73:c5:ee:72:2b:7d:6e:9b:5a:7f:82:01:8d:da:6b:
88:1d:95:98:03:70:b4:da:c6:67:52:db:82:74:9f:
59:d7:ef:47:24:d4:d4:4b:6b:e4:1c:eb:8e:32:52:
e6:d8:b7:bd:85:9e:d4:c9:75:fd:38:33:0b:28:78:
5d:5e:b3:5f:02:d3:e8:7a:0a:1d:4e:c0:d9:3e:1c:
b0:59:e8:89:db:ea:01:12:8f:b7:a8:fc:1f:14:96:
e1:be:ee:8d:bb:74:9c:d8:d0:94:4f:4e:eb:f1:d8:
7e:0f:e4:99:94:fa:9a:97:8b:7b:94:04:7b:8d:e4:
60:0d:30:2a:74:e7:9e:07:d5:92:0d:b5:cc:f3:82:
e2:c9:fa:d8:a7:94:f5:02:4b:a1:6b:11:8f:26:8d:
0c:5c:0c:10:07:10:b9:6d:54:27:75:dc:2c:38:a7:
8e:53:13:13:3c:e2:a0:26:37:b5:93:50:c2:9b:54:
88:32:21:b6:45:8b:41:e8:02:39:26:47:a1:50:01:
10:07:31:52:d8:c5:b3:24:bc:f6:98:c7:ee:b1:df:
49:93:7a:a3:40:fb:7a:e0:e0:bd:83:20:e4:17:e3:
10:3b:2d:cf:b7:29:31:8e:2b:71:0c:8e:ef:27:82:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9E:05:0A:C4:E2:13:AA:5E:C5:77:DD:F7:1C:A4:15:6C:52:74:C7
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a9:14:78:1d:91:01:4f:69:97:76:a0:cc:4e:cd:56:36:79:
92:75:38:4e:ba:3d:08:ae:70:5c:ac:20:9e:d7:6d:72:64:ce:
b8:ac:fc:73:90:2a:e4:8f:2d:91:7d:eb:6f:02:15:e0:60:e8:
21:2f:3b:ab:9d:97:b6:76:5a:95:7a:ec:f8:6f:18:7a:62:22:
48:53:73:6a:74:25:16:9f:dc:76:e9:2a:05:3c:03:3a:e9:9f:
96:63:fb:30:0b:2d:fa:5c:fb:73:49:24:0d:5c:b0:eb:42:e4:
c9:b1:d3:51:0a:da:95:9c:af:5d:99:41:f6:ef:21:b3:38:8f:
15:4f:88:4c:93:5e:48:94:fa:20:e2:79:34:56:4b:05:18:c5:
0a:91:19:73:45:21:ef:8c:15:97:30:63:ac:c8:86:2c:a6:dc:
e4:d5:64:09:96:2a:3b:b3:3c:b6:45:39:d4:2a:f6:06:2d:d5:
0d:ce:78:2d:5a:95:0f:8a:fc:cb:43:b8:2a:47:eb:5c:29:a6:
cf:ef:7d:b5:12:a1:9c:93:8c:38:da:4a:9e:14:52:3a:e1:2d:
d8:87:3d:b1:57:b8:70:a2:d6:f0:d1:79:c7:e2:be:54:fb:c1:
d7:61:39:5e:25:eb:78:c8:11:b4:24:93:47:58:cb:92:aa:1f:
02:f5:f5:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzCy5RD9PRCuiIi6RsSReMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MTVlODc5MmE0MjRmZjcyY2MxNzkyOTc4ZTJjZDRjZGJl
ZGE0ZDAwHhcNMjUwNDI2MTcwMDM0WhcNMjUwNDI3MTcwMDM0WjAzMTEwLwYDVQQD
EyhlYzllMDUwYWM0ZTIxM2FhNWVjNTc3ZGRmNzFjYTQxNTZjNTI3NGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXFMmAHowvZ3cB/JQJ9zxe5yK31u
m1p/ggGN2muIHZWYA3C02sZnUtuCdJ9Z1+9HJNTUS2vkHOuOMlLm2Le9hZ7UyXX9
ODMLKHhdXrNfAtPoegodTsDZPhywWeiJ2+oBEo+3qPwfFJbhvu6Nu3Sc2NCUT07r
8dh+D+SZlPqal4t7lAR7jeRgDTAqdOeeB9WSDbXM84LiyfrYp5T1AkuhaxGPJo0M
XAwQBxC5bVQnddwsOKeOUxMTPOKgJje1k1DCm1SIMiG2RYtB6AI5JkehUAEQBzFS
2MWzJLz2mMfusd9Jk3qjQPt64OC9gyDkF+MQOy3PtykxjitxDI7vJ4LL+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyeBQrE4hOqXsV33fccpBVsUnTHMB8GA1UdIwQY
MBaAFCUV6HkqQk/3LMF5KXjizUzb7aTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzIt
OWVlZDlkNzVjMGQxLzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzItOWVlZDlkNzVjMGQx
LzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAakUeB2R
AU9pl3agzE7NVjZ5knU4Tro9CK5wXKwgntdtcmTOuKz8c5Aq5I8tkX3rbwIV4GDo
IS87q52XtnZalXrs+G8YemIiSFNzanQlFp/cdukqBTwDOumflmP7MAst+lz7c0kk
DVyw60LkybHTUQralZyvXZlB9u8hsziPFU+ITJNeSJT6IOJ5NFZLBRjFCpEZc0Uh
74wVlzBjrMiGLKbc5NVkCZYqO7M8tkU51Cr2Bi3VDc54LVqVD4r8y0O4KkfrXCmm
z+99tRKhnJOMONpKnhRSOuEt2Ic9sVe4cKLW8NF5x+K+VPvB12E5XiXreMgRtCST
R1jLkqofAvX1jA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:03:05 2025 by rpki-client