Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: ZviVeJsBeyhY3am/EZ6+72ddKCndyigR2G628kWosrY=
Subject key identifier: 11:8A:1B:7C:62:2F:43:C0:C6:EE:05:AE:AB:B3:CB:56:68:1D:53:2B
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 0196A19AFD7569483C860BE19FC492DD0E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 1477
Signing time: Mon 05 May 2025 18:00:11 +0000
Manifest this update: Mon 05 May 2025 18:00:11 +0000
Manifest next update: Tue 06 May 2025 18:00:11 +0000
Files and hashes: 1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: Yrp4nyacs5RsZQ/wSL7+uyxtAlEBWiQTaHVDdzTA+QI=)
2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9a:fd:75:69:48:3c:86:0b:e1:9f:c4:92:dd:0e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: May 5 18:00:11 2025 GMT
Not After : May 6 18:00:11 2025 GMT
Subject: CN=118a1b7c622f43c0c6ee05aeabb3cb56681d532b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:78:c3:16:0e:45:57:2d:ce:9c:70:f2:31:
bd:d9:24:f1:23:54:83:5d:48:4f:33:2b:be:51:df:
cb:2a:57:21:fe:90:c1:32:1f:c1:50:b7:a0:16:30:
b8:3e:20:a3:09:03:7f:4e:e2:9f:86:31:dc:7b:71:
a7:6b:27:a8:f0:06:4f:f3:68:4a:32:2c:57:e4:7f:
9d:2e:0e:f5:45:46:05:e9:72:38:41:81:c7:5d:45:
b5:c5:20:0f:f1:a4:4f:bf:2e:64:84:1f:dc:37:4f:
af:62:3c:95:96:a9:1c:ed:62:21:4d:7e:3f:f9:63:
0a:82:51:ce:51:12:50:22:5e:f7:93:bc:57:99:c7:
79:85:59:c5:ad:b2:9d:69:03:27:46:ba:4e:51:5f:
f1:78:c5:9c:e5:ec:33:8b:0a:c2:f6:17:05:81:52:
0b:16:9f:9c:83:56:8a:ac:99:aa:b5:64:5e:1d:94:
35:77:a0:a6:9b:f6:b2:51:65:4d:56:86:8f:7f:64:
b7:df:2b:d1:3c:b2:44:9a:bf:e7:7f:fa:6a:4b:17:
b7:f1:2a:eb:f5:e7:cb:36:ff:66:34:fe:74:07:61:
2d:9c:f3:48:44:02:47:74:80:23:2a:91:7f:95:08:
6f:2a:b5:35:15:33:f9:05:c4:33:fb:ca:c4:df:b1:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:1B:7C:62:2F:43:C0:C6:EE:05:AE:AB:B3:CB:56:68:1D:53:2B
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c0:54:57:3d:a6:8b:1d:f5:d4:30:df:75:b9:4b:23:e1:c9:
8a:5c:02:33:89:01:5b:c6:49:59:af:12:1d:fb:6a:fe:ca:74:
25:16:51:eb:de:91:bf:8a:41:a5:b0:34:92:7a:14:6d:d3:7f:
f8:7e:16:73:3b:06:20:2e:59:a1:3c:8d:57:82:e9:79:3e:a7:
b1:97:02:04:9d:66:41:0a:0e:a2:e6:e5:1c:cd:d0:d7:f5:91:
fc:83:18:55:0a:66:2c:93:db:92:4a:d0:c4:0c:86:a0:ca:73:
80:13:fe:89:a1:0c:da:0e:32:37:56:d1:b9:91:c0:56:6a:dd:
3d:84:4b:bb:eb:c2:b3:46:d9:eb:d0:b8:fb:8d:c7:d4:4c:68:
99:2c:e9:b1:c9:35:00:47:95:1a:39:79:44:80:12:c9:01:7a:
1c:57:69:7b:4e:93:ba:8c:ed:82:13:e3:69:c8:10:d6:09:39:
0f:fb:f3:1e:94:10:38:0e:8d:9d:6d:d1:74:2a:cb:d3:b9:c4:
c1:a4:ec:f9:f7:8c:82:4b:93:a7:f6:6b:ac:7f:e7:1a:d5:2b:
a0:16:aa:bb:fd:76:75:8d:58:54:64:f8:12:de:3f:1b:5c:e1:
92:6f:f2:ed:cd:ca:2a:d4:2b:75:97:23:78:3c:85:70:85:65:
a7:31:b4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:29:01 2025 by rpki-client