Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File: JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier: sNNNkD7EJ+kjUnG0wMWragRxfahyecIIe8Ai9BksBtY=
Subject key identifier: 98:84:19:6D:9F:30:E3:DA:05:73:AE:10:69:3F:8D:50:D1:B1:A0:52
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial: 01969E9B1C37E3A7C3100AEBF70A241BCEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 04:01:27 +0000
Manifest this update: Mon 05 May 2025 04:01:27 +0000
Manifest next update: Tue 06 May 2025 04:01:27 +0000
Files and hashes: 1: 1-GD2nsdz766uiKd1MTwnY1cAKLQ.roa (hash: NdaepvhGF4pwe1Tt+1kTP6lm7HfWQTHyJYxXLIGTqdM=)
2: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (hash: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=)
3: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: h65rMnqEWBSlT+XwABKyuRKhqvl8lJdCWfF4D8n6zaY=)
4: p8vANLQB0ph98njf_Ufjt4LTAPo.roa (hash: hC+vbzkDFnGFdm53OE/ymTBfwEaU7iAHH3KtWlLJ+q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9b:1c:37:e3:a7:c3:10:0a:eb:f7:0a:24:1b:ce:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Validity
Not Before: May 5 04:01:27 2025 GMT
Not After : May 6 04:01:27 2025 GMT
Subject: CN=9884196d9f30e3da0573ae10693f8d50d1b1a052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:91:6b:8f:13:be:13:3d:98:a0:e0:0f:13:
25:cd:b6:6c:75:f6:ec:d8:93:6a:69:b3:7f:5a:1e:
ce:d6:9f:75:24:29:53:f4:dc:a4:e8:9a:7a:96:0d:
fc:71:9c:8c:0d:52:b1:ad:29:24:4e:58:4b:ee:c6:
61:8c:30:da:55:6a:af:07:8e:47:a9:fe:89:6f:66:
f2:38:44:93:26:e7:99:fd:06:41:6b:8a:84:fe:eb:
2a:8a:d0:46:c6:df:77:eb:88:8e:ff:63:60:80:e9:
50:8e:12:76:68:f7:47:6e:96:57:c9:0e:5c:a0:ce:
85:19:29:63:bb:f9:42:e1:a3:ad:25:69:0c:c6:86:
6e:73:97:3e:be:f1:29:86:7b:af:0f:67:06:85:f5:
47:22:b8:11:02:8f:b2:3e:1b:94:bb:a9:2a:92:c6:
d9:36:d1:00:83:5a:23:4f:7e:33:ac:9c:de:3d:91:
0f:40:42:ca:a5:9b:ea:17:c4:1e:32:5e:85:77:45:
2f:04:e0:51:71:7a:64:e1:2a:12:91:73:c3:ab:c8:
0d:48:0e:5d:91:8a:c5:87:07:71:cd:44:95:29:fd:
24:a2:90:9a:12:3c:33:c2:a9:53:43:17:25:da:23:
f1:e1:b1:1d:20:35:65:f7:e0:3d:c9:99:e6:f4:72:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:84:19:6D:9F:30:E3:DA:05:73:AE:10:69:3F:8D:50:D1:B1:A0:52
X509v3 Authority Key Identifier:
keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:84:12:d9:b5:cb:7f:df:19:77:9b:76:dc:bd:2b:5d:db:5d:
1e:32:56:9d:71:df:d4:bb:8e:53:6d:54:3d:06:7b:75:b4:6f:
51:ae:b6:ef:d5:35:e6:81:3d:d5:a9:33:07:cd:a6:0b:e1:98:
fd:d3:cc:01:0d:41:d2:d1:6d:98:0c:8c:de:b6:5a:96:41:d1:
c8:62:21:d3:49:2f:e0:89:40:33:22:37:8c:81:86:47:91:1d:
6d:71:05:32:b4:63:ca:50:5a:5c:20:36:4a:b5:0d:60:23:c4:
ed:36:5e:12:b9:10:9b:ee:3a:16:00:d1:f0:a2:c3:ca:b4:7a:
c7:42:90:d7:36:85:a9:97:56:f1:36:3a:6c:1e:35:3b:34:3b:
a0:03:ad:77:15:16:74:b9:0f:eb:23:6f:5f:d3:f7:36:0a:30:
e3:62:f8:79:ab:1f:94:d9:b6:52:33:44:60:4d:b3:97:3b:71:
c9:92:d9:3c:99:67:8e:83:51:e9:30:d0:13:44:d3:e4:c3:9a:
43:21:a5:2e:5f:10:77:bc:26:0f:ec:67:27:4f:04:2e:2a:fb:
9a:d8:44:ff:b7:cd:2b:f0:d1:a1:0f:df:53:38:98:55:3d:ae:
c9:5c:c1:66:de:70:2a:0a:7d:ef:eb:9a:2c:dc:c8:81:70:15:
9d:d2:37:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:52:04 2025 by rpki-client