Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
File: JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft (raw, json)
Hash identifier: UQ1xPvlQbwp3VyeS5c1V9mAs9NtTA/4QVcaA+B1VaYo=
Subject key identifier: AF:53:64:4E:32:BD:55:CC:15:C8:DF:78:08:3A:BE:DB:9B:34:1B:13
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: 0196B9DA592F5CCA79B4B16CB26A3FD2E5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
Manifest number: 0D27
Signing time: Sat 10 May 2025 11:00:16 +0000
Manifest this update: Sat 10 May 2025 11:00:16 +0000
Manifest next update: Sun 11 May 2025 11:00:16 +0000
Files and hashes: 1: JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl (hash: hwNgHf52j+rvlLkPf4tkaSZU7XvlNgdKan+Y67r3mvY=)
2: t5KH1FGaAuB50jIyv-mWsCV4YiY.roa (hash: WmKRabvhJ8d8xujyGtrgZuJ7rkW86Ru4hgJL7uZhjLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:59:2f:5c:ca:79:b4:b1:6c:b2:6a:3f:d2:e5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: May 10 11:00:16 2025 GMT
Not After : May 11 11:00:16 2025 GMT
Subject: CN=af53644e32bd55cc15c8df78083abedb9b341b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:45:68:f2:89:1f:ec:e1:33:be:7d:f6:c4:
15:df:ef:e5:88:1e:da:04:5c:d7:38:50:01:08:6a:
fc:5f:c1:2c:4e:a8:09:5b:1c:1f:ee:7c:0e:f3:24:
ee:96:5a:d0:98:d4:33:68:54:ac:67:53:ad:2b:15:
5a:82:60:83:53:be:15:cc:a0:e1:d2:7a:7f:06:ed:
d8:19:29:7b:1a:b3:f8:17:1b:cb:8b:2f:66:bb:40:
dd:eb:81:1e:63:24:79:29:24:37:7d:0d:06:5d:e2:
9c:17:7d:f3:90:d6:e2:83:9c:f1:66:7c:14:63:08:
e8:37:00:45:75:3e:f6:39:a4:78:4a:60:02:35:d3:
bb:b8:e7:9c:4f:12:b4:2f:09:92:87:27:9c:fb:5c:
fd:a1:0d:90:17:93:26:26:d2:1c:02:80:03:fd:c7:
82:a8:d8:7d:b6:b1:cb:33:0e:05:fa:3e:7b:46:5e:
55:81:91:a7:68:32:e7:8d:05:84:b6:ff:c4:23:04:
83:ad:39:9c:de:dd:9b:ee:56:19:1a:07:1d:de:4e:
16:78:ae:50:c4:70:65:3c:23:62:73:66:c6:38:2c:
80:19:d5:80:7e:7f:0f:01:99:b7:f5:36:b2:3d:8f:
b5:5f:2b:0c:e3:d8:68:e7:f6:3d:e7:d7:70:b7:cb:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:53:64:4E:32:BD:55:CC:15:C8:DF:78:08:3A:BE:DB:9B:34:1B:13
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:70:47:1e:5d:14:af:a8:40:de:80:a1:68:c5:1e:10:a6:d1:
f3:de:68:b5:26:8e:e9:75:e9:2a:a4:56:4d:c6:5d:e2:11:87:
33:82:ce:97:b8:bb:01:99:a1:48:94:90:8d:fa:0c:01:b7:07:
e9:d7:0a:2b:6d:a5:19:63:76:5c:11:28:eb:fc:4c:9b:4c:68:
de:e4:ea:54:81:71:64:10:2a:ea:d8:96:aa:28:9f:02:43:0e:
a2:ec:ab:3f:f4:8d:fd:34:cc:ed:6b:de:7b:8b:e8:fe:84:8d:
6d:65:15:6b:e0:72:31:db:c7:fc:d2:01:ce:b5:a5:43:59:e6:
45:d5:4d:52:9a:23:1a:0d:33:e0:1d:5a:5e:30:4a:76:5c:4a:
c6:b1:0d:88:9e:12:bc:46:9a:f3:5d:4c:33:3a:be:4b:db:07:
08:a7:2e:93:b7:97:de:be:34:a4:9d:03:f9:11:23:df:ab:0f:
6a:f1:46:78:ab:7a:35:1a:1a:a4:bf:9c:6c:9e:d1:09:d3:a5:
23:8d:5b:8f:26:70:48:61:3e:c3:14:d4:1e:8f:a4:b9:d4:46:
11:df:71:9d:f8:27:66:38:54:aa:2b:c8:96:29:f0:d4:ff:11:
90:45:93:ab:f8:14:6c:dc:96:3f:5a:f8:14:9a:81:22:82:38:
6b:52:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:56:22 2025 by rpki-client