Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier: zMMfACmYHFQlcepCj3do5d3r5BF/zQ28QcXifYoFT+I=
Subject key identifier: B5:17:03:B6:36:FF:BD:C2:8B:F7:85:39:16:76:0A:57:9F:9B:37:68
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 0196BF6F1AAC26BB8C56AC9E53EA66B48966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 13:00:51 +0000
Manifest this update: Sun 11 May 2025 13:00:51 +0000
Manifest next update: Mon 12 May 2025 13:00:51 +0000
Files and hashes: 1: IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa (hash: U6eJPJn6v41NXuScfHVoxXiwmhNM1UGaum7aJQ+kl/o=)
2: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: gp2sUMvk9NzZSYWz6vDgYM3o/a1dGKP5JBQlE8W2FUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:1a:ac:26:bb:8c:56:ac:9e:53:ea:66:b4:89:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: May 11 13:00:51 2025 GMT
Not After : May 12 13:00:51 2025 GMT
Subject: CN=b51703b636ffbdc28bf7853916760a579f9b3768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:03:e9:a4:40:cd:5f:1d:a8:d7:a9:79:50:
ed:f8:3a:ec:83:55:d0:fa:a8:fb:d2:80:db:65:a7:
63:6e:e0:ae:33:0b:54:03:92:fc:32:fd:59:b9:39:
2d:40:9b:ba:d2:72:cb:bf:64:c7:ca:5a:43:64:ed:
a8:5e:ee:b9:a4:ff:30:29:40:da:21:f0:20:a7:a2:
58:fd:a1:96:b5:5f:5c:e6:dd:2d:6b:49:9b:5d:83:
69:f9:f6:9e:18:d2:ea:85:9a:81:65:cd:a8:5c:c8:
2c:18:77:82:12:de:9a:e8:ef:48:f1:e5:60:3d:9f:
79:c0:15:c8:5c:23:a6:ce:c1:97:70:40:30:7f:0b:
f5:81:11:48:f6:de:2a:82:bb:95:1f:83:ea:8a:14:
11:7a:ef:63:7b:37:49:0c:c4:f7:2b:84:e1:12:b7:
a5:1e:6d:66:94:2d:dc:5e:93:6d:a8:9e:bb:01:10:
2b:35:1d:51:60:8f:ec:4d:76:2d:fa:32:fe:cd:c5:
9d:c6:db:d8:69:05:f2:0d:56:83:a7:cd:e5:c9:3a:
6b:6c:d9:1a:9a:74:c1:68:5f:59:67:bc:5e:af:36:
8f:85:a9:1a:39:cc:9f:39:d1:12:d8:2e:19:96:73:
b8:08:32:6d:03:b9:d8:3d:5a:46:a9:e7:a9:ab:03:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:17:03:B6:36:FF:BD:C2:8B:F7:85:39:16:76:0A:57:9F:9B:37:68
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:78:f1:52:92:db:3c:53:4d:27:a5:83:61:f9:42:ea:3d:17:
3b:ab:b5:0b:2b:35:a0:0e:31:f7:79:bd:35:75:b2:5e:3c:2c:
38:b9:a7:9f:07:14:cb:c1:1c:d1:e2:c9:77:be:8e:f6:aa:be:
df:40:5d:86:f6:d3:77:71:e9:35:d3:64:3e:32:e7:4a:54:eb:
5b:d9:52:aa:94:6d:0a:c8:45:1a:2e:80:8d:0c:a2:a0:75:df:
22:ab:55:e1:3a:ea:d4:67:8a:56:58:fa:03:a4:be:0f:40:48:
eb:5c:e0:8d:08:2f:b5:15:6e:2d:b6:72:08:1f:8a:3a:55:bc:
24:1f:f2:d9:15:30:40:fb:76:99:45:60:74:46:63:a6:fb:31:
01:1d:ab:c0:f9:0a:c0:c4:c1:67:b5:6e:3b:80:30:68:b8:84:
c3:47:84:ea:e0:07:3b:bb:ac:12:af:4a:c5:ce:7d:f5:34:d8:
73:88:85:c1:4a:26:a9:7a:74:bb:d9:be:97:1a:c2:46:16:c8:
a1:5e:78:4f:f3:e2:83:b4:b1:64:91:58:af:d6:8e:8f:5e:a8:
d5:c8:88:ef:eb:95:9b:1c:63:21:0e:1a:a9:0e:de:d1:03:37:
0d:b7:52:df:2c:29:ff:9d:22:5d:f2:bc:1f:82:e3:4e:d9:ca:
7f:4b:0e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:20:49 2025 by rpki-client