Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier: 6PITWX9KxBJ/7iECEJ8708ShpKex1SvJJNxoGjrHGhI=
Subject key identifier: 8F:15:B2:D2:78:E6:15:CA:AE:43:B3:48:EF:C8:2D:9E:96:FD:74:22
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 019682B566A153F3B9A119E5C9AC819A02DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number: 04D1
Signing time: Tue 29 Apr 2025 18:00:48 +0000
Manifest this update: Tue 29 Apr 2025 18:00:48 +0000
Manifest next update: Wed 30 Apr 2025 18:00:48 +0000
Files and hashes: 1: GBWUujhw8eL9ZQ-pESyjXqFWT28.roa (hash: t+QjroMr63PmLVQ1g3FZpryd+p1Rm7jgWOEl8kpZfl4=)
2: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: 6qawTdg0/lyn7E+09w/IPJZg8usuEL6aZuLmInlWPR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:66:a1:53:f3:b9:a1:19:e5:c9:ac:81:9a:02:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Apr 29 18:00:48 2025 GMT
Not After : Apr 30 18:00:48 2025 GMT
Subject: CN=8f15b2d278e615caae43b348efc82d9e96fd7422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:82:db:58:0c:97:a5:6f:81:aa:7b:5e:05:
c1:23:fd:97:51:be:be:9e:21:b3:75:9d:6a:c2:1b:
ba:17:07:f5:95:83:ed:97:c1:9b:a1:3c:09:40:0f:
54:74:4f:3b:1f:1f:a7:fc:95:25:7e:d7:4e:51:50:
c5:39:f3:4c:f9:b8:44:10:40:12:e4:8e:71:d4:e9:
b2:4d:53:05:d4:37:95:06:df:a4:8c:ac:bd:7a:13:
59:d5:58:eb:b4:99:08:94:25:f2:09:28:da:df:45:
39:38:c1:95:58:a6:ef:9b:0e:61:32:1a:5b:77:c0:
74:55:f3:dd:9c:c1:78:65:b8:77:fc:19:d7:55:af:
27:67:61:ed:ed:6e:f3:00:5e:26:7b:c8:1d:94:1f:
4f:29:fb:47:91:d1:36:1c:6e:b3:d3:6a:b0:89:9e:
dd:87:66:8d:d4:06:8a:71:c1:d8:38:b6:a4:97:8b:
79:57:b8:5e:94:46:08:1a:36:c6:08:9e:6f:72:2e:
f0:e5:26:92:2e:64:7c:fd:b1:67:2d:53:0a:60:54:
ee:fb:d5:50:e2:ff:c7:14:a2:1e:18:68:aa:df:ba:
aa:db:3a:c9:88:27:86:49:93:ed:4c:3e:a3:71:30:
ca:0a:ca:e5:89:06:6d:d4:29:92:f3:7f:53:1e:bd:
5a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:15:B2:D2:78:E6:15:CA:AE:43:B3:48:EF:C8:2D:9E:96:FD:74:22
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:64:f4:98:b5:2b:42:64:8e:6f:69:45:9d:52:1e:bd:9d:18:
6d:9e:0a:78:97:57:08:d1:bb:88:19:e3:8d:22:ea:52:c1:ef:
3b:3e:db:a8:0e:c8:f4:e4:cc:fd:99:32:01:d2:32:a4:ee:1b:
63:66:57:f5:3f:af:9f:92:14:d1:58:5d:7c:b8:fc:0c:5a:96:
9f:31:d6:3a:dd:b6:61:a7:85:7b:56:8b:39:03:7b:2c:b5:04:
ce:45:24:b0:90:8e:0f:f4:b4:94:78:ef:05:11:34:92:49:37:
1b:36:e6:15:9d:8c:1b:0f:cd:39:ed:00:9d:52:21:60:0f:42:
cb:6f:ce:8a:7a:22:ec:ec:0b:66:22:95:e8:c7:07:2d:e1:10:
8b:42:8a:98:7c:93:e5:85:d7:a5:6b:27:57:2d:18:46:95:fd:
dd:f7:9e:c3:27:48:a2:55:df:2b:7a:3f:de:d4:c9:20:66:f1:
eb:df:e4:2f:15:70:62:50:00:01:10:71:06:6c:ac:1f:e8:ad:
a8:6c:89:d8:48:9d:56:04:13:1c:20:47:59:fd:e0:22:02:04:
2f:9e:01:ed:c7:1a:8a:7f:a4:85:b9:f4:a6:f4:5c:f3:3c:0c:
be:7f:f0:39:7d:40:be:6f:98:1e:9d:74:61:34:0e:cf:f4:54:
35:e3:5b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:47:37 2025 by rpki-client