Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: C1ReQas83fC6SmiG5bPyIIoInhtJIJoP+udqRMA2Nag=
Subject key identifier: 78:B0:74:71:57:EC:AC:11:EA:BC:CE:4E:34:1F:F4:6B:E2:1E:D9:76
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 0196A31B9A6931A91C656D4BDEB22BE358D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 078A
Signing time: Tue 06 May 2025 01:00:17 +0000
Manifest this update: Tue 06 May 2025 01:00:17 +0000
Manifest next update: Wed 07 May 2025 01:00:17 +0000
Files and hashes: 1: BU1YFwzPITRJs7Qej4xcLZpPD5M.roa (hash: VsXDY2e9w0zN+nUNkUBmRlpbBzNwCWexC0/Pv60Tz48=)
2: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: 2vnfUYaDy3sXHteW99097JZ8L0WEbVOE+FsZq0z1VU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1b:9a:69:31:a9:1c:65:6d:4b:de:b2:2b:e3:58:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: May 6 01:00:17 2025 GMT
Not After : May 7 01:00:17 2025 GMT
Subject: CN=78b0747157ecac11eabcce4e341ff46be21ed976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:15:12:8d:96:40:87:39:e6:26:e3:d5:58:
78:aa:57:70:b4:b9:f2:a9:74:a5:e0:64:e2:ee:fb:
6a:63:e8:dd:b7:52:95:0c:88:7d:e0:18:10:e8:b2:
3d:83:c3:c7:87:0c:d4:c5:6a:83:9c:8d:1a:cc:9d:
b3:b8:8b:2b:76:b9:36:ea:cf:ba:2a:85:d3:80:1d:
58:27:1b:7d:ba:28:c6:fe:46:9b:08:2b:84:43:0d:
46:00:0d:cb:71:b4:9e:49:3f:35:0d:50:47:fe:1e:
8e:c4:24:f3:fa:73:3c:98:86:b8:80:55:d6:76:f0:
d3:65:c9:1e:89:ef:f8:76:b5:9d:60:ef:f5:8a:77:
3c:16:4f:15:8c:96:35:3f:37:53:93:de:ce:91:81:
31:8a:6d:06:d2:fe:46:62:75:8f:07:be:0b:d3:f0:
34:be:ef:fb:f3:9a:90:50:85:b3:f3:c8:98:74:ae:
f8:4a:27:6b:e0:fc:ee:ed:cd:e7:99:08:e2:d2:f5:
dd:a1:4e:fb:33:13:9f:39:82:be:4a:c5:6f:f5:94:
b6:da:37:7b:7c:4a:84:38:ab:cf:7c:d5:8b:ef:a4:
1e:a4:4e:d4:55:30:04:f9:c2:a5:5d:e3:f6:1a:08:
c3:6e:29:87:c3:59:b7:88:9d:91:ea:6e:d2:7c:6c:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B0:74:71:57:EC:AC:11:EA:BC:CE:4E:34:1F:F4:6B:E2:1E:D9:76
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:58:75:40:ad:4c:89:c2:8f:2c:2d:a3:1e:11:40:19:af:fb:
06:30:eb:41:02:f0:89:74:b1:d9:ea:f5:aa:34:03:53:85:41:
59:13:71:6c:02:56:9c:f8:57:3a:b6:5a:27:2b:18:68:e0:42:
b8:16:61:fd:61:b6:7e:a6:8c:7f:cb:d3:3b:8c:c1:e8:27:f9:
76:19:14:97:4e:ff:7e:32:09:f0:fb:54:2a:67:5f:33:f6:03:
76:b4:84:2b:c6:72:5b:2d:8f:9e:f9:de:9c:e4:cc:52:d1:3e:
18:c6:36:15:23:93:80:cb:d0:14:e2:24:71:09:ab:d4:00:bd:
e1:59:05:5e:dc:ce:bd:1e:95:ee:ed:09:4a:5a:fb:3d:86:2f:
2f:5b:a1:e6:d9:bb:c0:9d:86:b7:7a:ab:6e:2b:62:e7:eb:82:
8b:f8:e9:7a:f3:b0:89:a0:5e:3d:fe:71:05:c8:0a:f8:27:b0:
dd:7f:f3:27:dd:3d:15:25:a0:22:aa:77:93:14:56:d3:0d:a0:
f7:34:eb:fd:78:8b:16:f8:8b:b5:3d:8d:96:95:06:b2:a4:aa:
78:44:40:98:2f:73:c0:5e:d6:ca:7e:b1:eb:3b:67:45:fd:78:
f3:bc:dd:45:3d:9d:9f:98:d7:84:aa:8e:d0:bb:07:e4:56:25:
32:05:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:30:40 2025 by rpki-client