Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier: 9ZRyYT/53EsGduIYQsPM3whz87cWRV1QBZG0F5HVIrY=
Subject key identifier: 3F:23:94:98:F3:9D:05:71:9B:BD:B2:4B:D4:54:8E:A1:CC:CF:77:5F
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 01969DBE47880A20AAB2CB282DE65652B6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 00:00:15 +0000
Manifest this update: Mon 05 May 2025 00:00:15 +0000
Manifest next update: Tue 06 May 2025 00:00:15 +0000
Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: M48Cr/YgEzNdb4xq9pNHhqDcZrWm+Gz8roYk8PdqwVY=)
2: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (hash: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:47:88:0a:20:aa:b2:cb:28:2d:e6:56:52:b6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: May 5 00:00:15 2025 GMT
Not After : May 6 00:00:15 2025 GMT
Subject: CN=3f239498f39d05719bbdb24bd4548ea1cccf775f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:28:db:42:b6:3f:61:e6:45:5a:f0:9a:25:
60:be:8f:fc:55:be:fb:26:36:c6:b3:e5:79:89:2e:
71:56:be:4c:fc:95:35:97:f7:81:71:33:d9:19:ff:
c9:ca:e6:2c:6a:bb:61:52:91:1d:8b:eb:cf:6d:87:
94:b1:a7:88:fa:74:e2:b9:d5:ee:54:69:57:b7:70:
5a:7a:28:f4:40:66:52:3d:a0:a2:7f:40:09:d7:d6:
f9:d6:22:d7:33:62:37:03:9a:06:76:c3:59:bf:dd:
62:ab:c7:e1:f2:98:b3:de:88:18:fc:ae:2f:6c:ba:
88:61:a2:e5:fd:08:62:66:aa:f0:26:14:0b:c2:f1:
9b:c6:a1:a6:d2:0f:e7:b7:9d:39:c6:af:b6:73:79:
c8:35:a6:97:df:d1:f4:06:bc:cc:6d:6d:6a:30:54:
17:bf:ff:86:2a:d5:0d:ee:ca:ec:e0:0d:77:e6:c4:
d4:81:38:c5:80:79:3b:7a:71:f9:c4:c1:46:fe:34:
d0:d9:6e:9a:8a:60:04:fe:35:9b:9f:58:30:f1:1b:
ad:fc:de:99:74:2a:4e:cf:1c:0b:d1:75:92:5f:e5:
5e:47:85:0f:ea:0a:69:77:75:75:9d:19:a4:22:11:
0a:d4:1f:4c:05:11:d4:e7:ae:b6:2f:9b:40:50:c3:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:23:94:98:F3:9D:05:71:9B:BD:B2:4B:D4:54:8E:A1:CC:CF:77:5F
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:88:a1:16:75:d8:1d:35:a1:0e:13:a4:70:9d:9b:74:33:db:
25:04:21:a4:bf:30:eb:46:de:af:d3:03:76:b7:3c:a2:80:a4:
37:16:05:26:21:6a:64:3c:5a:fa:37:89:96:ac:87:41:99:7f:
39:3d:2c:03:00:c2:54:59:e4:4c:59:08:cb:90:09:ae:9b:7d:
79:10:67:a2:1f:30:e2:22:59:fa:79:03:8b:7c:74:e6:4a:42:
a7:50:eb:e0:a4:a6:1a:d7:c9:56:90:ca:00:5c:95:be:a0:9a:
ba:36:aa:98:89:02:54:1b:9e:e9:3b:ba:ff:f1:55:c9:17:27:
c4:96:c7:3b:dd:38:54:a9:0b:bb:42:1d:d9:2c:fc:9d:7b:bd:
ec:e8:ab:08:89:03:9e:d3:74:11:8a:ed:ae:45:07:5f:8d:52:
a0:b9:fc:f0:9c:41:d9:e1:1e:b4:93:d7:75:0e:2e:d0:5f:77:
08:d5:dc:98:f4:eb:3d:2f:3c:a5:2d:cb:29:f7:49:54:ef:da:
e5:ed:43:76:0d:a8:c1:16:07:ba:93:48:2a:fd:b5:b5:a9:a3:
2a:78:d9:3a:c6:0c:d5:20:54:5a:58:71:79:7a:c4:e1:5f:3e:
3e:f2:5e:ba:2e:e0:9a:e0:c8:dc:3e:88:80:4d:c5:18:ce:a2:
00:18:8d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:12:09 2025 by rpki-client