Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
File: jrsOsZ53d9cDgAD2wS053tEgQkI.mft (raw, json)
Hash identifier: muD/zFtE05a4SuIE1FYh6bzlflClOtZdnAZ3K9ljh/g=
Subject key identifier: 96:69:C0:37:85:2B:44:06:3C:D4:D6:1A:E6:72:40:B5:A6:A8:A7:14
Authority key identifier: 8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
Certificate issuer: /CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Certificate serial: 0196C502C5D45E8D7803E11596E9F9402A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
Manifest number: 0B72
Signing time: Mon 12 May 2025 15:00:15 +0000
Manifest this update: Mon 12 May 2025 15:00:15 +0000
Manifest next update: Tue 13 May 2025 15:00:15 +0000
Files and hashes: 1: 68-2o2gnqeFje-83JI2NL7vcFCs.roa (hash: 5XT1BGaZiWzYIBY9EJMQdD9z2CvFYvirF/G5S8/gceM=)
2: jrsOsZ53d9cDgAD2wS053tEgQkI.crl (hash: JnJjwZ2GvNRgZoD6H8cx90bSmzqm5u7y7xeX2TZb1Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:02:c5:d4:5e:8d:78:03:e1:15:96:e9:f9:40:2a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Validity
Not Before: May 12 15:00:15 2025 GMT
Not After : May 13 15:00:15 2025 GMT
Subject: CN=9669c037852b44063cd4d61ae67240b5a6a8a714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:ab:77:42:41:a3:8e:db:b7:3b:2f:98:e9:
e4:57:0f:3d:5b:b1:f0:fe:99:e1:4e:95:c8:37:e2:
e8:cc:d8:b8:21:85:24:79:2a:07:90:b4:4c:d0:61:
9f:83:88:b6:31:69:df:b5:73:cd:b5:59:db:13:72:
d4:e5:54:6c:ed:50:9c:37:50:69:9b:5b:32:7d:25:
fa:2a:09:c1:59:ce:a2:6a:85:ec:48:85:05:da:39:
05:00:2d:e0:94:f0:d2:65:da:fa:8a:cb:53:0b:da:
27:15:66:bc:51:8e:d2:4b:36:30:b4:b0:10:40:8b:
0a:6f:33:a8:4f:0f:85:db:b4:b6:f5:b1:1b:fd:c8:
96:aa:36:6f:73:11:b1:0c:fc:27:6a:c6:6e:22:e4:
8b:16:23:19:a7:41:81:55:d5:23:a2:e0:d1:fe:22:
25:99:09:d1:c8:a8:9b:ea:7f:09:3d:56:3d:f6:fa:
9a:10:bd:47:07:e6:fd:a8:73:8c:3b:17:f5:07:a6:
2d:3c:9a:40:0d:60:bb:89:cc:16:74:ce:e9:9d:1f:
57:53:cf:fe:e6:83:0d:bb:27:c5:3b:0e:c6:30:9f:
2c:53:a1:02:b3:f7:be:2c:3a:c5:de:7d:c0:84:15:
b2:a1:3b:fd:fd:04:88:ba:0f:c8:cd:1c:de:20:4d:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:69:C0:37:85:2B:44:06:3C:D4:D6:1A:E6:72:40:B5:A6:A8:A7:14
X509v3 Authority Key Identifier:
keyid:8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fa:6a:a6:30:bb:81:a0:e6:a5:9b:9c:a3:57:17:5b:ec:d5:
3d:27:3c:c6:39:b2:e9:04:0e:85:1c:41:60:ef:cf:2d:92:1b:
2f:58:b8:7f:b8:7d:a1:47:a7:e4:5a:df:4b:97:97:d8:98:bb:
76:01:2f:a6:06:eb:6c:25:8c:c9:7c:57:b7:57:5d:73:32:5d:
60:1c:30:17:51:14:2d:7f:1a:a3:e9:51:14:f5:60:0c:87:c3:
fe:97:a5:df:55:29:b1:4d:14:5a:b3:56:5a:83:31:fd:52:d4:
02:f3:66:0b:69:86:4a:db:f6:b1:ae:fe:6f:4f:37:b3:23:ce:
c2:57:3b:65:ef:3e:19:ee:a0:b4:63:b4:9b:01:cd:aa:16:d9:
dd:12:a3:67:4a:8a:d2:8d:77:3c:6c:fb:9f:83:b6:99:7f:b0:
a8:5b:e5:e5:80:d5:d6:b9:3d:24:6d:86:26:31:ad:1d:64:15:
01:82:36:f2:70:c7:17:04:92:f5:e2:10:e2:98:30:85:c0:91:
65:73:38:25:b0:aa:24:c2:fc:3a:ef:95:00:ea:1d:ce:1d:bd:
8b:a0:ed:47:16:07:30:50:3b:2d:e3:88:2b:11:31:b0:db:28:
9a:8d:fd:a7:94:8a:70:3b:e7:7b:ee:ae:72:d7:6f:a0:24:d4:
df:66:a1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:02:28 2025 by rpki-client