Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: QAbhYSbK/0ZaOBFzdX6TG1HhtYszi14FepxjD7ehiss=
Subject key identifier: 95:5D:BF:61:96:FC:B2:A7:EF:23:42:A5:C7:D8:B8:E0:35:6C:45:43
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 0196CA291E71401E0DCF914A31187A0020CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 14CD
Signing time: Tue 13 May 2025 15:00:14 +0000
Manifest this update: Tue 13 May 2025 15:00:14 +0000
Manifest next update: Wed 14 May 2025 15:00:14 +0000
Files and hashes: 1: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (hash: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=)
2: Vp9dMAyfVmCM5zZQhLE8hK5dRc0.roa (hash: 5cnih+GaWo66TQ4L2W2BbOxLKl4dL4P027VTj45pMMU=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: layFQZrdoVZVJnGoiCHmZcR+tCbXZK0ZOzAYgl+Cw0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:1e:71:40:1e:0d:cf:91:4a:31:18:7a:00:20:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: May 13 15:00:14 2025 GMT
Not After : May 14 15:00:14 2025 GMT
Subject: CN=955dbf6196fcb2a7ef2342a5c7d8b8e0356c4543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:8d:5b:cb:fb:0c:20:57:8c:7a:9c:43:6b:
8c:11:eb:77:66:21:28:73:77:ad:98:e0:1a:dd:f9:
51:43:20:7e:7a:da:d9:ed:ad:6a:34:18:44:3b:13:
69:87:9a:b5:37:5c:f7:69:1a:7e:83:e4:32:c7:13:
7a:6b:8d:e1:59:fa:bb:87:fe:10:3e:9f:99:d4:3a:
74:32:0c:4b:8f:99:f9:89:b0:77:7c:75:56:bb:b9:
b0:99:9f:09:a8:6c:9d:d4:00:66:31:4f:dd:cc:72:
d2:1f:aa:c8:3a:35:68:33:1c:88:bb:a8:65:59:ee:
bc:fe:54:48:49:73:e8:72:b3:87:3d:12:28:f8:4b:
6a:38:92:cc:91:ea:c8:4b:11:fa:0f:5c:22:46:a4:
7e:b2:96:f8:29:da:50:8d:52:ce:13:ff:dd:e5:97:
a2:43:6a:61:5b:eb:bf:57:c1:e2:ee:1b:0b:05:55:
b0:29:86:1f:77:d3:a8:66:5a:a1:82:2d:6c:43:7c:
d1:83:0a:54:b3:d4:12:e2:63:b7:3a:9f:91:84:f7:
d8:85:ea:71:e4:7f:23:8e:d6:46:1c:80:53:7e:62:
e7:35:4f:7e:e3:ba:87:a8:e4:4f:59:e2:e2:c0:59:
b9:2e:19:e3:fc:08:ef:87:2e:21:3c:30:ad:a5:d8:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5D:BF:61:96:FC:B2:A7:EF:23:42:A5:C7:D8:B8:E0:35:6C:45:43
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7d:6f:d4:59:b2:ee:da:ba:90:8a:18:e3:90:e9:43:68:b9:
ea:3a:e6:56:96:61:77:da:92:a7:f5:5c:16:46:20:ba:9b:8d:
6d:62:b2:dd:43:07:e1:52:ba:5c:3e:17:bf:56:bc:3a:cb:08:
f2:8c:3a:47:d2:7e:5e:4b:49:93:0d:48:dd:ca:12:ab:35:c6:
29:7e:86:ee:96:40:e4:a5:fb:d3:da:dd:ed:9e:67:18:01:20:
6e:ae:00:5b:d9:97:1b:a6:0d:ee:4a:73:e8:2a:d0:8b:f9:db:
85:41:7b:cc:a4:11:8e:e4:7c:23:f3:a3:55:7b:d8:06:6d:a2:
4a:ea:50:8b:99:5d:19:40:4b:8a:74:1e:71:db:5d:e0:12:10:
03:e2:fd:f7:3d:e7:82:69:40:37:4b:e5:d3:11:60:51:be:9c:
ee:05:4f:dd:42:28:14:ce:56:a3:33:97:c8:5c:3a:f7:36:44:
f7:7c:ec:a4:8f:12:31:e9:0c:b1:d1:cb:a5:fb:4e:d2:45:c9:
5d:39:fa:67:97:6d:c1:bf:f7:12:82:2f:2d:58:57:e0:0b:b8:
63:16:c1:e9:91:1c:e8:c6:97:b4:0a:ca:33:60:08:da:8c:80:
25:6d:07:8b:9d:5c:aa:38:ce:c1:71:f7:09:1c:31:0f:3a:5b:
ad:9c:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:04:28 2025 by rpki-client