Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
File: jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json)
Hash identifier: yTu5D+/Hrj244uf40lUHfdDdDjk0WAd2IKdcFKlxJQo=
Subject key identifier: 34:F1:08:C2:FD:D4:CA:4F:00:F9:8C:A1:63:ED:EE:11:7C:30:03:54
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 0196B7B65E2D4111C70A0C0D15EA9466118A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
Manifest number: 11F7
Signing time: Sat 10 May 2025 01:01:44 +0000
Manifest this update: Sat 10 May 2025 01:01:44 +0000
Manifest next update: Sun 11 May 2025 01:01:44 +0000
Files and hashes: 1: gEYhgGeiO3CvO7L61btMp6FMtUk.roa (hash: t7slYmPenDTs/a8GzhHgCqRYrDeOIVUNfoJ1LIoBLf8=)
2: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: LcWQa15z5PlT8hgfSi1GadvzRwt5xO7FbIprc99bu3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b6:5e:2d:41:11:c7:0a:0c:0d:15:ea:94:66:11:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: May 10 01:01:44 2025 GMT
Not After : May 11 01:01:44 2025 GMT
Subject: CN=34f108c2fdd4ca4f00f98ca163edee117c300354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:b0:1b:e1:ab:d2:c5:ad:92:7a:b7:f4:34:
d8:92:03:7e:cd:7d:a6:36:2a:39:38:59:0b:b1:d7:
29:24:62:98:11:70:6b:7c:67:0f:9a:6c:6c:8c:fe:
8a:dd:8d:24:9b:91:90:02:17:9c:54:f0:6f:67:25:
4b:cf:cb:e2:9d:f1:53:87:3b:75:bd:db:d8:c8:d5:
6e:02:a3:c6:0c:ff:72:27:1e:18:1b:73:22:b7:75:
b5:17:bb:6b:9f:0b:3a:82:ff:20:2c:49:62:26:ff:
a5:c1:a0:92:97:bc:39:89:76:6c:86:c6:3f:36:a6:
bf:9e:df:17:dd:e9:e4:a5:38:c5:fe:11:19:94:3b:
ef:4c:00:1d:5d:d9:fe:1b:ea:f7:b9:ae:9f:49:d1:
30:6c:3b:0d:77:1f:f3:e7:3a:31:9d:ac:3c:35:59:
15:c8:34:9f:6f:2d:ee:db:e9:71:6e:7a:94:fc:cc:
60:a1:c9:c9:8e:4d:3d:91:eb:1b:69:15:95:1c:51:
72:69:2c:9d:14:f9:e4:c3:aa:37:64:cb:a5:18:7d:
3d:47:36:b5:37:e5:49:27:c2:ab:19:ca:1f:97:e4:
3b:d4:f3:e5:74:a6:ed:2d:eb:b2:a2:f2:76:dd:bc:
47:25:f2:1f:47:e2:b3:f0:03:21:6e:92:e0:f4:e0:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F1:08:C2:FD:D4:CA:4F:00:F9:8C:A1:63:ED:EE:11:7C:30:03:54
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:13:24:9b:cb:64:82:6e:2e:dd:24:10:bf:ce:9e:63:81:a0:
4d:12:bd:cd:02:f0:9f:9d:f3:fb:1c:5a:66:b4:74:ad:36:d7:
7f:2c:ea:d3:0b:df:1f:a7:e5:2f:d5:86:0b:ec:dd:c0:98:98:
82:85:e7:12:4f:36:f7:f3:c0:e1:78:28:37:3a:fb:7f:50:3c:
54:d9:10:53:0f:d8:1c:54:4c:53:99:7a:c0:40:2c:ff:a5:3a:
16:fa:c1:72:9e:ee:0b:57:4e:4c:23:76:66:69:16:7b:ad:cc:
7a:e8:15:30:9f:91:dd:da:24:ac:d1:9c:e8:0f:39:6d:4c:0a:
07:d7:db:98:65:ab:29:e7:ea:13:fa:2a:59:ce:06:3a:37:f1:
84:d0:16:1f:1c:9c:fc:4b:54:f8:8b:ae:21:25:2d:9d:04:89:
12:33:33:66:23:ca:3a:e3:57:61:c6:07:15:2a:c3:a5:08:57:
7f:6c:85:a0:3f:8e:0b:5c:fc:b0:5e:72:35:78:c0:40:bd:ec:
ff:01:ac:81:04:84:3b:1a:53:9b:1d:45:c9:f9:7a:b5:b9:ec:
26:35:b6:bd:9f:db:1d:a1:f6:67:83:47:ff:54:59:b7:e9:16:
10:f9:bf:e1:54:63:53:57:e5:68:4b:b6:6a:76:c8:4f:25:d2:
e2:96:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:59:10 2025 by rpki-client