Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: u5L2TxsClHPK9hR98nmpuJgA6a+LxlgvoLTmOvVYuiw=
Subject key identifier: 54:B6:A4:61:73:70:3A:BD:C7:8E:F0:7B:59:E2:32:DD:36:26:16:A0
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 0196B8C7D4F5843117E343DEC9807129277D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 0BD9
Signing time: Sat 10 May 2025 06:00:26 +0000
Manifest this update: Sat 10 May 2025 06:00:26 +0000
Manifest next update: Sun 11 May 2025 06:00:26 +0000
Files and hashes: 1: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: ciuBybTSq587amqURjBha800fHc5/HBiyDHHp0+dZmI=)
2: m7ILrNfOu-eUx2B6UsntAxtlq9s.roa (hash: /izsLpJMnyLjcBC/dWPj3hHlKW+Ou/8dO/Ifh1Ai218=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:d4:f5:84:31:17:e3:43:de:c9:80:71:29:27:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: May 10 06:00:26 2025 GMT
Not After : May 11 06:00:26 2025 GMT
Subject: CN=54b6a46173703abdc78ef07b59e232dd362616a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:2b:df:20:72:56:a2:c5:81:43:50:65:de:
da:17:49:d3:9f:42:9a:8b:4a:88:49:38:34:12:15:
bd:00:c7:a6:62:53:f7:7e:35:4c:3e:8e:80:23:55:
a1:8a:da:92:67:05:a0:8d:cb:ff:64:96:36:3f:54:
e8:44:d4:8c:2a:f7:ba:84:b5:35:5b:07:09:da:bd:
20:a2:4c:1b:52:ef:40:c6:9a:52:db:eb:7f:95:02:
1a:fb:1d:97:73:11:7c:35:55:ff:d9:7f:47:8c:27:
0c:59:d3:f1:bb:48:54:6e:0d:12:22:84:26:6a:60:
a9:fd:bb:3a:19:60:cb:3a:76:2b:32:67:3c:e7:2e:
d7:9d:1a:7d:e2:1a:7d:25:d0:57:92:0c:f6:35:d4:
1e:48:a2:3e:82:a6:5a:0c:c3:46:6d:ee:c8:15:46:
14:f2:56:c2:04:71:92:bd:43:a6:96:a5:30:43:4b:
0e:79:ea:21:b2:6b:bd:03:63:0c:09:5b:d0:e3:99:
bf:e7:30:f9:c3:71:3b:cc:fc:eb:b4:a1:7e:75:9d:
8a:80:40:1d:19:6f:0c:cd:64:a7:dc:14:fb:15:3b:
cb:43:f9:1a:08:85:a7:7f:87:35:45:3a:4d:7a:f0:
72:31:fd:61:2d:4a:5b:01:74:b3:c8:15:f1:f9:6c:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B6:A4:61:73:70:3A:BD:C7:8E:F0:7B:59:E2:32:DD:36:26:16:A0
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0f:49:ef:d0:de:ad:60:b7:0c:06:78:eb:fd:46:30:68:94:
64:ca:00:e0:c4:b2:ef:25:f7:95:7b:eb:be:56:5e:f5:6c:2a:
04:7e:f8:39:66:ed:07:81:88:e3:d7:10:60:e0:01:8a:27:60:
9c:8a:b9:64:e4:7c:08:e6:53:86:04:8f:25:4b:af:90:fd:a4:
d2:3b:5a:f9:ab:cd:3f:77:10:c8:01:ae:45:bc:be:36:9f:96:
61:24:d2:1e:e1:4f:9e:c1:1d:a1:79:02:39:6a:1e:5d:82:e9:
7a:d0:07:53:3b:2e:ce:5a:7c:5a:7f:e5:5e:f5:52:f5:8a:ee:
75:10:0d:b5:5d:a4:0b:03:a2:ed:da:e5:56:49:d0:00:61:6e:
5f:d8:2b:13:d1:c9:18:0d:af:c2:01:39:36:b4:e1:98:b0:48:
e1:b2:96:00:bb:b3:7b:54:58:12:b5:7f:4e:bd:3a:6b:c5:68:
81:92:a3:ed:ea:55:2b:11:b0:4b:bb:bb:ae:0c:c6:46:ed:12:
ca:ca:44:75:73:c5:dd:74:ab:96:9d:92:34:8e:84:fe:da:c6:
50:32:db:3f:d2:99:03:9c:6c:56:7b:0a:ee:96:31:9c:37:53:
c0:9e:64:26:03:02:6e:35:0a:b8:35:20:67:5a:34:d9:23:51:
e6:e0:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:02:28 2025 by rpki-client