Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
File: JojvNz-PAOAcJc-SS08ujsaiGdE.mft (raw, json)
Hash identifier: mUBXP+ghbcGhB3e6DVrNcn2VUpQL4sQSLdSZxVKbK3U=
Subject key identifier: 00:14:CD:38:5A:80:92:E2:09:D8:D0:E6:3E:34:26:C0:CE:EF:A2:E1
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial: 0196AE0E737749C9A92EF19B3671A6D9D92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
Manifest number: 152F
Signing time: Thu 08 May 2025 04:01:44 +0000
Manifest this update: Thu 08 May 2025 04:01:44 +0000
Manifest next update: Fri 09 May 2025 04:01:44 +0000
Files and hashes: 1: 9QhEtvzl2xj1SVoQsDQ0WEDHjak.roa (hash: wwuZ4oEoEOc/Uq5HjzgRuotY259BWR4HTpXNj9bkQ/g=)
2: JojvNz-PAOAcJc-SS08ujsaiGdE.crl (hash: Yjqg+zTAldDsj1BC1GsIc02ASTAD8xYmFVAewU3pxIc=)
3: NLlq8DiYVFJMYAJlr9NHDav50Bs.roa (hash: 1feCq5rXN2U803Ez7sUO8zgEL070beNeKBUwCwKwE5Y=)
4: V9TCe7mXJBH58d-15AGeUYfc0cM.roa (hash: hoxc5Dur4oAZR+SCmAqnZb+/Hrq6+3AzAIRJJu/YQd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0e:73:77:49:c9:a9:2e:f1:9b:36:71:a6:d9:d9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Validity
Not Before: May 8 04:01:44 2025 GMT
Not After : May 9 04:01:44 2025 GMT
Subject: CN=0014cd385a8092e209d8d0e63e3426c0ceefa2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:f3:2d:a8:f3:18:b9:7e:4b:1f:6d:81:b4:
ab:a6:01:cf:45:c7:87:64:15:1d:fb:9b:a4:a2:47:
b4:02:30:46:09:a0:c0:62:95:0b:2f:bc:72:0a:1a:
dc:83:8b:b4:4a:0d:2b:bb:7c:11:e6:c4:6a:fd:ed:
79:d5:9f:09:6c:07:bf:67:56:26:7f:14:f6:4c:2c:
34:ed:cc:82:12:c2:67:e1:9c:e0:9b:8e:bc:08:f4:
e3:5e:a6:38:1a:50:ad:84:86:65:dc:22:fc:2e:17:
6d:a2:c4:1e:26:97:8b:90:22:a8:78:b7:b2:11:db:
97:ce:f2:79:82:e2:80:d9:86:79:59:82:43:8a:fb:
e9:74:e7:2e:f6:94:3d:5e:fd:ae:b6:32:1e:97:c2:
5e:f5:07:2a:f5:39:71:27:bf:98:58:37:80:61:83:
f0:f1:2f:00:da:cd:61:f9:78:19:0f:e9:4d:66:73:
64:a5:02:ac:08:bc:7a:f5:c8:b6:50:df:4d:57:bd:
5a:9b:5d:76:29:3d:f3:44:03:ed:cf:43:15:21:a1:
62:73:ab:50:78:ef:f3:21:75:76:1d:16:d8:22:22:
cf:10:ad:3d:ed:45:23:07:41:23:0f:80:98:5a:23:
a7:0d:26:af:e3:aa:a2:31:ae:18:0d:8a:c6:07:aa:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:14:CD:38:5A:80:92:E2:09:D8:D0:E6:3E:34:26:C0:CE:EF:A2:E1
X509v3 Authority Key Identifier:
keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1c:db:bd:04:5e:d5:11:65:87:aa:0d:75:49:19:3b:f2:70:
7b:80:75:81:de:fb:80:74:52:dd:52:17:b2:56:e0:a3:f1:b9:
9c:70:b0:b5:29:a6:72:b8:af:de:20:4f:4b:85:4e:a1:f6:40:
82:29:02:73:71:bf:91:ec:90:1f:2b:4c:fa:5d:91:f4:1e:1e:
11:d7:57:16:db:31:b1:26:64:62:68:9e:f4:95:2c:7e:a9:fd:
52:64:49:dd:d6:f1:bd:74:c4:bc:21:f3:61:1b:27:12:8b:73:
85:34:60:b3:18:b1:8c:fb:bf:5a:60:56:9c:f9:dc:57:c5:9b:
13:3a:62:85:cc:ed:db:93:c3:77:45:8c:e5:cd:5f:ee:3e:5c:
fa:99:1b:9a:56:d1:13:60:b9:12:b2:15:74:bc:4c:02:9d:90:
49:76:1d:a7:8d:7d:9b:e7:fb:0b:b5:f3:af:98:7d:ad:b3:3d:
19:bb:c3:f5:17:75:ef:b6:65:44:ae:28:b7:a9:dc:12:ef:c3:
f2:49:20:a2:73:77:15:34:99:a6:b0:a9:06:1b:1e:77:db:f9:
df:18:0f:ce:04:9c:7d:62:0a:be:71:3f:15:6c:05:e4:fd:20:
5c:03:ff:77:1b:3d:4c:d1:08:be:52:aa:50:52:78:df:54:5a:
ce:14:fe:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:40:14 2025 by rpki-client