Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
File: JxlBKRimYn-ZzOVcesoTkFe4V04.mft (raw, json)
Hash identifier: 9lb9sLGvGNF2NzIEEAckcTcPfzddhrsSCKUdKDwVoSE=
Subject key identifier: 09:FD:9A:2F:8D:09:01:DA:57:A6:EC:68:97:6F:36:05:17:F1:BC:DD
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 01967A8DEC211FD98FF28AC740896418B6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
Manifest number: 0857
Signing time: Mon 28 Apr 2025 04:00:43 +0000
Manifest this update: Mon 28 Apr 2025 04:00:43 +0000
Manifest next update: Tue 29 Apr 2025 04:00:43 +0000
Files and hashes: 1: 0egOCEDjjfjwdPmizCh3Cu6NbrQ.roa (hash: RjxfFq3fmsFbepGKowirBDzmyu+RZ3fSC5NUINYgMYU=)
2: 35WlNYoicXeTaUW3mWXsagVOnPc.roa (hash: vhlE4c9NYewGiei7QNQOzx0MpfEcyu07VzFHTp1o4sI=)
3: 8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa (hash: 2qr0DY7SshfmBWBMPElwvi/+AJH/67rJ01N4KKU7q1A=)
4: C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa (hash: KoYq60161i4xpC6NqHZA/Q8w9Njte/PcskDc5lUbshM=)
5: JxlBKRimYn-ZzOVcesoTkFe4V04.crl (hash: dNagNctD8crv7guUq+V6bZkWvE4AM9SV8605P2qwfk8=)
6: Ntn0KC9hNBdEOU4APTAFvwKoJWM.roa (hash: Nm8YrLspYKdECPfNk4gMXsfWH7pa2i2J/txkaQvcJKs=)
7: UAFcUuKvgonvhSs4MdOglxDeP9A.roa (hash: cBXXRFGKUV+6kMfUTrzWb6w7ZuBP1z44qOPAvbDDmRo=)
8: XP9c9FnVM83t2BcVhUGYjki34JA.roa (hash: 9MjxmhRyp3W6rmd2o7KozYAfmVW00slDjc1CHV4YtKA=)
9: _3swtCefveYwZMovOeZXllr31i4.roa (hash: nFadkNQONx0EZ0a70RD073DgpyU0gMaLe+ajpjA05V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:ec:21:1f:d9:8f:f2:8a:c7:40:89:64:18:b6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Apr 28 04:00:43 2025 GMT
Not After : Apr 29 04:00:43 2025 GMT
Subject: CN=09fd9a2f8d0901da57a6ec68976f360517f1bcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:ae:95:d6:1c:8d:57:c6:26:23:d1:9d:b4:
24:40:2a:dd:ab:09:bb:70:b6:89:11:88:da:54:91:
91:3f:19:35:24:d9:5e:f7:37:4d:df:56:49:d5:a3:
27:81:15:3a:30:b6:78:a0:c0:f9:e2:c4:f0:0e:37:
f1:4f:87:a2:b4:86:fc:74:70:d4:d7:67:dc:f2:75:
e9:07:50:96:b9:e9:6e:1e:7b:78:74:e8:7a:be:97:
3b:68:66:8f:8e:f1:06:f3:e8:d7:d8:7b:51:a3:8c:
95:a4:ed:a5:dd:be:f2:13:48:29:23:7b:b0:88:69:
f4:b4:72:65:52:91:c8:ea:79:92:2b:f5:dc:3b:82:
d8:17:9b:b2:af:61:81:be:0a:29:9f:45:c5:ec:4c:
43:c2:3a:1d:6c:4f:0b:20:20:91:6a:73:b8:00:6b:
7e:a3:fc:58:77:a6:bf:76:4d:48:65:7e:3a:e2:03:
37:8c:50:da:1f:9d:a9:f0:fd:52:2a:5b:f6:21:65:
f2:c8:33:cd:70:f0:9a:31:57:32:83:0b:00:66:39:
b8:d0:4e:ff:35:55:54:c0:ba:6b:e5:2b:4f:3d:22:
ea:d7:cc:a6:48:69:79:75:ff:3f:4a:0c:6a:0f:d7:
d6:78:99:9d:8d:39:51:5a:6f:98:64:34:a1:c5:d0:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FD:9A:2F:8D:09:01:DA:57:A6:EC:68:97:6F:36:05:17:F1:BC:DD
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0e:56:08:95:ea:1f:75:91:7e:c7:b2:25:53:02:0f:13:d1:
25:71:cc:a3:9a:03:44:0b:34:92:9f:cc:f5:be:3f:b3:f4:16:
52:8a:e0:2d:97:75:77:78:a7:a5:95:63:9c:c0:15:1a:f9:7b:
5b:ea:fb:bb:c0:4b:e9:94:34:de:2d:b2:28:92:cb:52:c2:91:
df:dc:20:6e:71:0a:e9:da:eb:1e:62:5f:75:f1:71:b9:2b:d0:
a5:9e:63:d5:59:be:b4:0e:94:04:b8:b3:ba:f4:7d:be:41:86:
c9:fd:4c:6a:a9:5c:ad:b7:e1:fa:b5:33:c7:c1:bf:8a:09:bf:
94:26:de:b1:18:10:dd:af:4e:41:ff:f2:79:d0:44:6c:43:ab:
26:29:a8:dc:7d:48:fc:e6:ac:0c:95:cf:02:c5:43:eb:ff:d3:
ca:91:d6:01:47:b7:f2:21:d3:6e:5a:c2:38:6c:a9:54:f7:ad:
47:82:30:13:c0:75:39:7e:9d:78:e8:d9:87:69:c0:10:e3:a1:
2a:50:f1:4d:ed:de:87:c1:83:2f:65:a2:18:a7:fc:d9:4c:26:
6a:e4:59:c7:44:3b:d9:43:ca:e6:6f:ed:77:6f:1b:42:9f:d1:
73:0d:e8:bc:ca:5b:6c:4c:21:dd:f4:d2:5b:cd:fd:5b:99:56:
be:34:87:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:42 2025 by rpki-client