Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: qtJvhUBzJHppiSrpBeKDoWkroROZ+aK/cC7xJ8tF8N4=
Subject key identifier: D4:13:72:76:F6:EE:31:4D:68:36:58:4B:23:BE:5A:5E:ED:32:CE:0D
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 01969D87CD64004982DD61DA404E9AA5B2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 03CA
Signing time: Sun 04 May 2025 23:00:44 +0000
Manifest this update: Sun 04 May 2025 23:00:44 +0000
Manifest next update: Mon 05 May 2025 23:00:44 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: aiGH10JA2akOFCOGDzMr3srP6Ulq+7SSltAdGDE3bNg=)
2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:cd:64:00:49:82:dd:61:da:40:4e:9a:a5:b2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: May 4 23:00:44 2025 GMT
Not After : May 5 23:00:44 2025 GMT
Subject: CN=d4137276f6ee314d6836584b23be5a5eed32ce0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:bc:7e:30:76:a1:f2:6c:8e:f6:a1:85:e6:
40:ee:60:b5:a3:ea:b9:30:f6:d6:3a:4a:de:62:28:
4b:df:bf:4a:11:a2:f6:94:99:f1:9c:7f:0a:67:0f:
ec:29:e0:d9:f5:31:cb:bd:40:a8:0f:bc:3f:6a:fe:
2e:c0:b4:e2:c2:38:01:c1:ff:08:9c:4a:ff:d9:e8:
fb:34:38:b7:2c:3a:93:25:a4:a8:2d:7d:f5:4f:37:
15:e2:67:c4:75:a3:cd:85:c0:28:bd:3e:c3:45:8c:
3d:64:90:39:2e:61:74:f0:cb:8c:83:5d:66:2f:0c:
c8:ea:4a:f2:9d:69:e9:fa:30:21:82:e1:3a:f9:1a:
d6:f3:7c:ef:6e:cb:06:93:6e:a8:87:de:e7:a5:c8:
64:f4:8a:9d:dc:7e:4c:87:f4:97:6a:cf:3e:04:f3:
df:36:7e:b9:6b:1d:d5:d2:78:b7:61:6b:78:82:05:
39:be:b2:7c:0f:4e:44:4d:a8:33:c5:b5:a9:dc:71:
eb:9d:34:4d:52:aa:0f:57:68:6a:08:54:45:32:65:
06:22:e3:7d:c4:8a:1e:b2:9b:d8:fc:92:29:4f:de:
4c:2d:2d:af:bb:a0:2c:bb:e1:1a:a9:a8:86:1b:ad:
a3:78:3a:a2:ab:89:d3:89:20:cf:b3:3d:da:fb:ed:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:72:76:F6:EE:31:4D:68:36:58:4B:23:BE:5A:5E:ED:32:CE:0D
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0d:ec:48:36:ca:f7:bf:a4:5c:0e:c6:45:28:bd:33:f0:6b:
54:f6:f2:23:88:0a:7b:f3:49:7c:7a:f0:90:0b:7a:de:a1:9e:
ad:cb:63:d4:84:b9:b2:7c:7f:be:ef:c8:54:9d:2e:8e:ee:05:
41:8a:76:0d:0c:12:92:4b:84:44:62:d2:d4:94:1a:47:24:18:
a0:7b:47:d3:58:29:8a:6e:81:27:77:fa:ad:8c:eb:0f:8a:44:
bf:15:94:fe:1f:2c:f2:e3:a9:4d:a0:53:01:68:b1:25:ef:67:
9e:0c:87:14:df:08:20:dc:ad:72:c8:2c:19:87:24:aa:8d:91:
71:b7:6f:9e:91:ff:ac:60:79:73:cb:4c:d4:91:29:3f:38:f8:
aa:5f:f1:e9:46:56:34:bd:c5:45:a0:86:a6:e1:ce:0c:1d:b8:
f1:27:f0:9e:76:5a:b2:59:08:02:08:eb:56:5c:d3:56:9e:63:
86:12:e9:62:5a:d9:36:50:6e:a0:2f:a4:fc:73:38:11:92:bd:
00:f2:db:6a:63:c2:c9:4d:b9:73:26:b7:fb:b3:eb:96:db:36:
cf:98:51:9f:3e:37:25:e8:91:19:52:a2:3c:f9:69:c4:49:f0:
83:12:5f:60:97:bc:e4:d3:b7:73:84:fe:cf:05:59:7e:86:aa:
2d:22:b7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:23:33 2025 by rpki-client