Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: qnAEn1aK7vdyq5mrdEkr5i/eCM1AlG1PnUhVBFDQ4uM=
Subject key identifier: DF:92:51:DE:16:9E:E2:06:06:42:D6:DE:5A:E3:D8:42:76:1C:AC:E6
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 01976C2AAEA7AC65B1F1C3780FC7CA0D4DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 0435
Signing time: Sat 14 Jun 2025 02:00:25 +0000
Manifest this update: Sat 14 Jun 2025 02:00:25 +0000
Manifest next update: Sun 15 Jun 2025 02:00:25 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: UXDelp358hlzYLRnSIssF2t4QjepkklMsOqDmpBW5aM=)
2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:ae:a7:ac:65:b1:f1:c3:78:0f:c7:ca:0d:4d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Jun 14 02:00:25 2025 GMT
Not After : Jun 15 02:00:25 2025 GMT
Subject: CN=df9251de169ee2060642d6de5ae3d842761cace6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:ce:32:7b:fc:31:75:a2:09:0d:29:f7:78:
9b:89:ce:77:7b:7e:b6:9b:39:ea:96:f1:4b:e8:20:
29:2a:c1:38:b6:02:2c:0b:5d:de:50:76:73:ea:f7:
46:b3:d4:a3:6c:af:cd:bc:70:f1:cb:2f:08:1f:76:
60:8d:17:0d:a8:e4:02:b2:8e:0c:94:2e:36:64:fb:
be:2e:7c:46:fb:72:3b:c9:b8:8a:77:20:fc:63:f2:
d4:24:18:97:da:56:26:e7:58:08:90:10:6a:9d:92:
44:37:80:1f:6e:7c:d1:25:b2:6a:0e:73:8b:44:0c:
44:fc:30:c2:21:90:8b:45:d5:65:00:93:8f:f0:92:
83:a5:40:36:78:ad:53:f3:3b:73:a4:60:12:00:a6:
bb:ea:bf:46:9e:2b:92:5b:28:a7:4b:7a:13:53:05:
a4:dd:1e:e6:cf:6d:28:51:59:8e:44:07:27:e2:d2:
a6:29:f3:3a:28:99:84:80:be:44:49:9b:75:e1:ab:
31:d5:29:e7:85:68:49:76:f9:60:0e:94:ce:9c:77:
a5:1a:77:39:15:ab:e7:db:2a:4d:66:cf:0e:48:d1:
32:26:d1:ea:7f:38:9e:54:a7:57:37:b9:89:51:d8:
72:2c:b4:1e:2e:25:eb:34:53:34:83:bf:dd:db:35:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:92:51:DE:16:9E:E2:06:06:42:D6:DE:5A:E3:D8:42:76:1C:AC:E6
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6b:e7:dc:0f:8c:42:9a:bf:9d:b9:d9:15:9e:ab:a1:06:96:
99:66:f1:2d:93:71:31:a8:4e:9b:7a:25:31:89:c6:3f:02:8e:
c6:3f:0f:80:e3:2d:5d:58:86:cf:e3:3c:96:5b:56:fe:77:91:
8a:d1:be:63:0a:2e:05:ed:3f:3e:e0:0c:44:26:e1:76:00:31:
af:18:5e:c0:ee:51:c8:40:08:1e:f4:53:38:c9:d9:90:fd:fd:
48:89:de:da:2d:98:09:f4:6d:4a:c7:0d:d0:38:03:01:36:b1:
3f:20:90:f6:1f:a0:e3:7f:03:4a:34:c2:96:27:d6:c6:db:1d:
a3:73:51:0b:f6:dd:cf:d0:c4:27:ab:4e:18:9b:d5:8a:0c:c0:
04:9f:f8:01:4c:3d:88:08:03:4b:0d:25:87:cc:47:16:bd:f8:
24:82:7d:4c:94:60:29:8f:d9:fe:98:50:32:81:cf:73:46:bd:
15:57:b1:ef:69:76:f0:97:c1:db:c0:fa:13:bf:7a:f4:82:56:
81:57:ea:0a:b9:2f:90:75:b0:7c:d7:17:dc:77:1a:11:f8:83:
7b:db:fd:27:34:b2:94:b0:fa:20:53:68:26:12:5b:23:40:c2:
cd:bd:8e:76:e5:d0:eb:ae:9e:d4:01:23:8a:6a:b6:7b:31:20:
99:8e:50:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:36 2025 by rpki-client