Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
File: jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json)
Hash identifier: fLfQTvWKbIslM/9YGiPPULGvHHvLTvb7Krhp1ntDY58=
Subject key identifier: 8C:37:29:B7:9B:80:2B:9B:6F:D9:DD:91:0D:4E:FB:4F:5A:B7:24:55
Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
Certificate issuer: /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Certificate serial: 0196BAED9B4A254AB383CF059FA2FDDC7907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 16:00:55 +0000
Manifest this update: Sat 10 May 2025 16:00:55 +0000
Manifest next update: Sun 11 May 2025 16:00:55 +0000
Files and hashes: 1: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: grjZMwBgRxXulIPKrdoLRzAlKtAlnE9w1dIH/UGV4+E=)
2: zomoxdAdOPcJkTkRQBtLj8THS7E.roa (hash: HywlERnXGDkjWEHTc4UIBFSfO9/yrJ9UtEQjc3ctIXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:9b:4a:25:4a:b3:83:cf:05:9f:a2:fd:dc:79:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Validity
Not Before: May 10 16:00:55 2025 GMT
Not After : May 11 16:00:55 2025 GMT
Subject: CN=8c3729b79b802b9b6fd9dd910d4efb4f5ab72455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:b2:8c:b8:7a:9e:cf:72:98:00:7f:68:63:
02:87:74:67:c8:8d:ae:bf:4f:ef:e5:c7:5c:69:ec:
0d:96:80:4b:cc:77:fd:40:ad:32:fc:3b:cb:56:23:
bf:98:42:5f:7c:35:1c:20:7c:a7:a2:70:41:e6:95:
ba:6f:0a:4d:4e:09:5c:72:e7:e7:fa:24:48:3f:37:
d7:1a:b0:ba:aa:e1:3a:7f:c6:37:70:4e:05:4d:bd:
76:1f:6f:62:9b:95:34:77:48:6b:4d:a3:7e:89:78:
5a:cf:8b:77:87:fa:32:26:2a:13:53:79:67:10:91:
f0:7d:a4:94:18:bd:2a:aa:62:c2:db:cd:81:eb:31:
b6:d6:3b:d9:ee:04:e8:33:5b:d9:be:2c:a7:50:37:
1a:fc:dd:4c:c6:9f:f4:7a:d8:39:d8:bc:cc:d9:ac:
a3:7c:7f:99:d8:4f:18:83:48:b7:46:bf:a9:0a:16:
01:29:d7:5e:4c:9d:34:e6:7f:4f:b1:f1:2e:c9:cf:
8b:0d:1d:25:69:16:80:7d:a1:50:75:c4:73:5b:2d:
c9:6a:97:a0:e7:5c:a0:97:fd:46:47:02:84:36:dd:
98:62:37:f3:6b:28:01:5a:0a:8e:a6:c4:19:e8:84:
73:8c:a7:7b:c7:1c:5a:54:fd:2a:84:5c:c6:16:3e:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:37:29:B7:9B:80:2B:9B:6F:D9:DD:91:0D:4E:FB:4F:5A:B7:24:55
X509v3 Authority Key Identifier:
keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:54:5c:4f:8a:c0:fb:b4:02:b8:d6:0e:4b:36:53:bb:3b:4f:
bc:c8:f1:a0:b5:e7:79:6c:66:10:65:ef:76:2c:73:52:08:13:
bd:90:69:6e:37:d1:14:e6:42:52:4c:be:6f:7f:1a:ea:a6:b7:
20:e9:3d:6e:f0:87:53:12:06:27:83:a3:4c:41:59:24:92:a5:
e3:19:34:16:19:89:e5:c2:9f:db:cc:7e:1a:d2:6f:4a:92:dc:
6e:6d:70:32:bd:9c:5a:15:c7:3d:dd:42:7e:4e:2e:83:0f:9b:
79:3a:92:84:83:32:12:e7:c3:63:d2:1d:ac:46:2a:eb:d0:c2:
04:53:90:94:9e:77:28:a6:18:c7:5a:0e:9c:75:55:15:84:70:
e1:88:30:63:1a:80:bc:56:ea:91:f0:b8:f5:15:a9:33:f3:07:
d5:13:f6:9a:1e:09:42:01:5b:d0:c5:53:38:a5:4d:dc:f7:1e:
12:4c:e9:da:8d:3d:7b:48:09:6a:26:52:96:5b:38:6b:1a:78:
80:01:83:8b:74:0a:85:ec:05:1e:7f:50:56:e0:82:5a:aa:53:
7e:2b:3a:82:91:88:59:6a:cc:16:a9:63:45:a4:33:f2:96:fb:
cd:49:61:ea:66:80:ad:19:9c:23:1b:85:27:91:0f:57:bf:32:
10:91:0d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:59:51 2025 by rpki-client