Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: hY6C+7tSVSCNLPskyu90TDli04cR1ncvNkmWwEIyfsU=
Subject key identifier: 06:E1:B1:95:39:E0:D4:3A:B9:C1:AF:E8:94:95:7C:49:5B:6B:FE:64
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 0196CD2A6CAA0710F0FE36819EAFAC5B3D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 0C23
Signing time: Wed 14 May 2025 05:00:31 +0000
Manifest this update: Wed 14 May 2025 05:00:31 +0000
Manifest next update: Thu 15 May 2025 05:00:31 +0000
Files and hashes: 1: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: 2gwb0En2MZPiFHgwyuH07MU26UO6AXPti1SZpiMJkrU=)
2: yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa (hash: zRJvfuooLD1ukObnKFMb0zFwDQ9keCDuprZkYYzC4qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:2a:6c:aa:07:10:f0:fe:36:81:9e:af:ac:5b:3d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: May 14 05:00:31 2025 GMT
Not After : May 15 05:00:31 2025 GMT
Subject: CN=06e1b19539e0d43ab9c1afe894957c495b6bfe64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:53:e0:3d:f4:e6:d4:71:ab:13:c8:01:c1:
6d:07:7a:e7:29:e6:f6:b4:81:dd:d3:af:f4:04:4f:
10:86:3d:ba:aa:90:b9:9b:ba:f5:00:e8:54:c2:ee:
f4:30:0e:35:8c:6c:26:54:da:c3:6a:4e:83:88:39:
c8:3d:96:b7:2f:72:0f:8f:d9:cc:0d:df:96:53:1c:
50:d9:ac:3b:cf:0e:1d:38:53:4e:91:77:73:0f:9c:
a4:ff:e2:b0:1e:6a:65:14:50:22:ca:68:dc:73:91:
8e:0e:9e:c1:bf:df:78:54:7b:51:b9:c5:77:91:70:
f0:74:16:17:d6:08:bf:b7:11:1f:c6:dd:d8:31:e7:
81:72:56:c4:cd:b1:b4:6f:1c:30:f5:b1:0b:3d:fa:
31:fc:f7:f3:b7:e0:14:e7:fa:0f:78:b0:1e:17:32:
92:1a:8f:5b:d2:cb:d4:61:de:1e:37:10:a2:42:74:
62:3d:19:1e:00:fb:48:94:84:17:ec:d4:e5:ba:00:
07:3f:07:30:93:0b:5a:ee:65:31:f0:91:a1:31:cb:
9e:62:e2:6f:05:30:62:7b:54:5d:65:6e:a1:c1:05:
ce:54:51:f6:fc:42:15:c7:47:67:ff:79:96:0f:7a:
68:c9:76:21:3e:ba:91:91:6e:3a:61:7d:27:a3:df:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E1:B1:95:39:E0:D4:3A:B9:C1:AF:E8:94:95:7C:49:5B:6B:FE:64
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9f:2d:0e:c7:06:82:53:86:2a:b4:38:b1:23:07:22:fc:47:
72:73:e3:99:7a:7b:90:d4:c7:03:36:21:ed:c4:af:85:8d:aa:
0a:59:cf:8b:39:3d:34:a1:de:5d:3f:33:ec:52:47:28:eb:c9:
8c:bb:d6:78:f7:d7:a3:15:8e:cb:c7:2a:bd:7e:2f:7d:bb:22:
44:0d:e7:b5:c7:a4:c2:16:24:73:e1:99:79:70:19:07:2a:6f:
ca:f7:ab:2c:39:0e:9a:2d:81:97:ab:8c:ab:91:40:e2:6a:fb:
5c:55:63:5d:32:67:c2:81:43:98:81:ae:0e:c9:6d:8d:48:76:
30:ef:b9:09:52:7c:dc:7f:03:6a:ec:55:30:21:3d:6b:9f:84:
49:b4:e4:e2:2b:b7:4b:ab:19:4f:0e:c3:e0:69:59:83:c5:7b:
5d:a8:17:de:61:5c:9b:d8:a1:08:a5:83:74:f2:25:78:e7:60:
8c:07:7f:d8:a1:b5:c5:d2:01:2f:83:58:b9:6f:c2:61:9b:58:
f1:23:9f:8c:7e:30:29:a8:47:7f:d8:32:b4:83:99:43:26:b6:
af:0a:b9:56:b3:5e:18:50:d5:51:74:92:81:34:5c:6c:3c:51:
a0:aa:02:b2:c0:c4:81:df:e0:27:c3:70:c5:04:54:10:1a:28:
67:f1:88:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:15:02 2025 by rpki-client