Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: Kxu2uhBWi7P2O8KiLmb6FjE0YQIsBJohH5w3d/zM3CY=
Subject key identifier: 59:6A:68:65:D1:86:06:A8:CA:86:FE:E0:16:67:7D:58:15:DF:CB:9C
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 01968A6EB8F3A39553CC0D74394C55DE2FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 14AC
Signing time: Thu 01 May 2025 06:00:34 +0000
Manifest this update: Thu 01 May 2025 06:00:34 +0000
Manifest next update: Fri 02 May 2025 06:00:34 +0000
Files and hashes: 1: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (hash: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=)
2: Vp9dMAyfVmCM5zZQhLE8hK5dRc0.roa (hash: 5cnih+GaWo66TQ4L2W2BbOxLKl4dL4P027VTj45pMMU=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: sgGuSpNc3htsAQ4c5+DKoLXXFw2MoaRkVnsAW60ZyoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6e:b8:f3:a3:95:53:cc:0d:74:39:4c:55:de:2f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: May 1 06:00:34 2025 GMT
Not After : May 2 06:00:34 2025 GMT
Subject: CN=596a6865d18606a8ca86fee016677d5815dfcb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:09:8c:00:b1:c9:4f:60:02:a9:3e:32:4f:
1b:1c:85:1c:87:ad:30:35:7c:ad:e6:08:6a:47:63:
04:2b:54:82:71:ed:8e:4f:b4:77:b3:c5:63:43:aa:
fc:65:bd:e3:a0:14:01:95:a6:f2:46:a9:0b:dc:e9:
ed:ca:90:97:75:db:c0:ff:12:68:9c:8e:e0:b6:fd:
9a:76:65:c9:2f:9e:af:56:9a:85:b2:83:e2:2b:81:
41:c1:ab:68:c4:40:ef:b0:e8:c1:95:4c:e3:24:3d:
2d:d7:9e:33:21:fc:9d:61:3c:bb:ce:00:3c:c2:49:
c3:02:f7:50:5b:59:1c:1c:41:e1:c1:94:cb:ec:01:
e4:77:97:b7:86:fb:5c:05:66:d5:d6:97:bb:54:04:
ec:35:9f:36:b6:8f:25:3f:b9:26:f5:a8:9c:46:32:
56:08:f7:cd:33:d6:1e:a2:fd:81:db:5a:7c:2e:75:
42:d1:6a:ce:dc:c9:c3:bd:a5:33:f7:14:fb:28:97:
1f:df:20:a3:83:9f:43:03:c3:64:48:01:61:f2:9c:
19:48:0e:35:0e:f2:b2:23:20:c8:92:b4:6c:8f:dd:
8b:c0:8f:c1:20:4b:b4:f4:10:90:0a:c0:7c:b7:15:
49:f9:a0:0b:d1:d1:32:a3:b6:12:a2:99:4a:f7:54:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6A:68:65:D1:86:06:A8:CA:86:FE:E0:16:67:7D:58:15:DF:CB:9C
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9d:af:15:20:a0:e0:f8:e7:18:4f:69:75:80:fd:60:69:2d:
07:cb:d2:27:25:e2:42:85:da:9f:08:b0:f1:ed:01:a7:7e:61:
57:30:c1:7d:e4:8f:ff:e9:b3:45:08:4c:09:76:5e:dd:a6:9a:
dd:e2:1b:0b:21:14:e1:56:d2:e7:60:7e:c9:da:e5:50:e9:96:
8e:fb:18:a1:4c:90:54:30:70:2f:a1:43:e6:a5:d0:7a:7d:db:
52:cc:cb:6f:da:89:a2:75:0d:35:2f:98:92:da:2f:99:5f:6e:
78:cb:1b:04:73:a4:92:23:1c:55:ec:ac:95:13:99:39:a0:56:
94:7f:23:83:0c:ef:54:4e:ad:48:60:23:15:c1:75:7c:d6:c1:
17:2d:e3:2e:8c:8e:28:4e:c1:b7:bb:51:af:c0:25:4d:3d:bc:
e7:2e:84:d6:55:39:0a:8a:05:da:72:34:b8:3b:f2:8d:e6:a9:
4d:6e:2f:5f:d9:f2:5d:f6:93:2a:78:06:f7:b0:09:b7:50:da:
dd:d3:12:86:58:2e:02:68:a6:31:67:dc:e4:7d:79:03:5c:d7:
2e:6e:eb:9a:37:a9:4b:a3:2e:36:a1:0b:d3:77:7d:0c:b4:55:
95:75:8c:a8:73:1e:dc:4b:47:3e:d5:8e:3a:bb:f3:9b:38:03:
c6:de:8a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:08 2025 by rpki-client