Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: xe6puMRz2oTdEzT4h5VY3Piwx1rVeIxpaeiSUJqla74=
Subject key identifier: 46:E1:6E:71:57:99:D2:74:3E:B6:46:2B:55:FB:71:4B:73:58:78:7C
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 0196C7CCE802FC04E39A98D81E7DA2189F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 04:00:16 +0000
Manifest this update: Tue 13 May 2025 04:00:16 +0000
Manifest next update: Wed 14 May 2025 04:00:16 +0000
Files and hashes: 1: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: Nxg9vLHUxArfd6p+wG04mJVa9kzvHhS29Fo0/nH68YI=)
2: z839WIkF-YRPS5QNYpBIYDtN3Cw.roa (hash: zP6mCwiE2/gg1MEmkXLbZLBNeMsMnTOwcbXXhGjusFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cc:e8:02:fc:04:e3:9a:98:d8:1e:7d:a2:18:9f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: May 13 04:00:16 2025 GMT
Not After : May 14 04:00:16 2025 GMT
Subject: CN=46e16e715799d2743eb6462b55fb714b7358787c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:68:8b:a6:31:35:c0:c3:fd:ce:ca:aa:a2:
01:91:1a:43:f3:f9:33:e5:44:e3:67:87:62:b7:1a:
f1:0f:fe:de:e0:12:15:8e:ae:da:9a:89:82:79:a0:
c5:ae:c4:8c:cc:24:a1:f4:94:a8:22:e8:7b:7e:1d:
ed:7f:0f:5d:15:b0:40:6e:fe:44:58:f8:75:6b:cd:
5e:be:e6:6f:0b:1d:1f:da:b6:2d:76:dc:59:06:99:
6e:1d:8f:1b:34:e1:34:34:81:18:70:71:25:d3:56:
4c:20:6d:05:6e:1b:05:6e:28:c6:ed:8d:3e:48:c1:
2a:ab:3c:52:78:60:52:5b:3e:e6:8f:fe:9c:3f:cd:
3c:96:15:0e:88:f9:7e:76:f1:33:cd:28:e3:c9:92:
c5:40:60:49:0d:5f:7d:98:06:c1:55:2d:57:e4:12:
1d:8b:f8:9a:88:c2:f0:0c:5e:56:1b:67:e9:92:eb:
11:47:25:66:67:02:3c:a8:dd:57:9a:1e:ec:1e:25:
5d:41:92:9c:6d:b3:d6:ac:13:67:3b:8b:9f:d1:d1:
2d:2a:b9:eb:49:92:b3:69:d3:c2:52:40:58:62:71:
9e:23:a4:4e:78:08:cb:da:de:60:52:03:b8:3d:46:
ea:0c:92:26:d6:9a:a9:82:2b:6f:d5:f9:21:05:18:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E1:6E:71:57:99:D2:74:3E:B6:46:2B:55:FB:71:4B:73:58:78:7C
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d6:58:c5:dc:a2:b4:4a:81:58:05:ac:d5:9f:94:25:7d:76:
ba:6d:7a:89:59:fd:cd:32:02:e3:cf:c7:ea:ec:2e:13:c5:28:
63:35:e2:35:1b:2b:13:d5:67:fe:95:43:5a:f1:a7:4b:07:53:
97:3e:32:27:43:cd:16:67:74:16:6d:82:db:a8:95:06:73:d9:
52:a4:63:41:6e:20:6b:aa:57:fb:94:fd:ab:26:26:2c:81:f2:
dd:9e:b9:8d:b7:4c:bb:75:72:78:ae:81:fd:f3:51:b8:8e:7a:
a3:fd:38:46:fc:84:dd:5d:ea:4b:87:d8:bb:5c:87:c8:28:a1:
79:c8:02:85:b3:cc:09:95:b2:2a:9c:af:f6:1a:0f:7f:e6:99:
fe:e9:c1:e2:1e:48:3e:f2:ab:4c:ab:8c:2b:26:8d:bd:74:1a:
dc:b1:bd:42:c9:36:9c:a0:63:f3:49:6c:0c:ad:e6:d7:00:29:
0f:5f:c9:46:91:26:d7:1c:44:20:05:6e:37:c8:8c:b3:16:4c:
83:d8:0a:f8:40:5c:95:7e:66:f1:bd:98:c9:58:a0:20:06:04:
ff:cb:24:c6:b0:77:76:fc:6b:90:30:80:48:eb:4b:91:7f:7d:
8a:69:b4:af:83:4a:64:19:d7:e2:11:c0:25:a2:8d:76:aa:12:
fe:49:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:32:41 2025 by rpki-client