Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
File: jlDZuD8_AVrYi_a3xShIZ0rly24.mft (raw, json)
Hash identifier: pC0ov8e3BYEjngHTPvBB0xs9tVwb3aDVGOBxtwquvyg=
Subject key identifier: 46:62:11:AE:35:D5:E9:70:A9:9D:AE:FF:F6:DA:31:7F:84:C2:BC:C5
Authority key identifier: 8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
Certificate issuer: /CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Certificate serial: 0196741D8E485DDA980456C5758D8781D826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
Manifest number: 0888
Signing time: Sat 26 Apr 2025 22:00:15 +0000
Manifest this update: Sat 26 Apr 2025 22:00:15 +0000
Manifest next update: Sun 27 Apr 2025 22:00:15 +0000
Files and hashes: 1: jlDZuD8_AVrYi_a3xShIZ0rly24.crl (hash: Yv3slcuJP3JDpwX8m8dc8FhFoaJhVuZUucYsrHZVjWo=)
2: kchIPTEIqMp0vpAjfgQEwz2BSpw.roa (hash: Nd32beBirDyD6e0HPEc2YHkqNEJViSi6nJI2FhIdX3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:8e:48:5d:da:98:04:56:c5:75:8d:87:81:d8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Validity
Not Before: Apr 26 22:00:15 2025 GMT
Not After : Apr 27 22:00:15 2025 GMT
Subject: CN=466211ae35d5e970a99daefff6da317f84c2bcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:f0:1a:a9:4d:02:63:a8:e3:0d:8a:65:34:
a4:6e:d8:7d:cd:d6:1f:ab:95:aa:87:85:ab:c2:65:
40:97:97:41:e4:32:8b:df:b7:dd:90:ed:72:0c:e1:
55:67:04:f3:34:7c:dd:0b:9a:2b:e7:af:1e:00:bd:
0d:e2:63:4d:a8:06:87:82:f9:67:aa:ae:8b:cc:cc:
87:13:bb:c4:51:2c:ee:36:09:9c:46:01:d7:c4:15:
38:28:1a:40:9f:9a:e0:41:8b:ad:06:e0:d6:d0:1e:
46:b5:44:f4:e8:d2:a9:56:2e:ae:ee:32:55:91:20:
19:8f:e0:ad:f9:80:16:b0:a7:08:b0:5b:1c:6e:ff:
2f:ad:18:52:7f:04:2a:3a:4c:46:7b:af:db:3d:29:
c6:5f:5e:3f:45:6c:4b:7c:1f:6c:be:35:ed:94:3e:
3d:8d:96:19:8c:58:6e:4a:ed:fc:e8:f3:15:ae:b0:
e2:03:2b:83:7e:cb:a2:a1:8d:f8:a3:b4:c1:17:c5:
7e:90:5f:d9:17:ac:16:b1:97:49:53:c0:08:f0:e6:
e0:60:3c:85:eb:a4:42:05:db:b9:c8:f2:75:48:ef:
7b:44:6c:65:dc:5d:0a:b2:d3:5e:d5:e4:e7:ac:b2:
9a:ce:cf:b4:b2:10:1f:78:30:bf:58:12:a9:9b:3e:
90:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:62:11:AE:35:D5:E9:70:A9:9D:AE:FF:F6:DA:31:7F:84:C2:BC:C5
X509v3 Authority Key Identifier:
keyid:8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0e:3a:d6:41:be:80:03:04:3e:1d:4c:13:f4:52:3b:68:07:
f5:a7:96:61:48:04:13:9e:7c:c1:e7:55:38:20:d6:3a:1e:b8:
15:99:46:29:04:b3:a3:44:3d:9c:e5:34:b9:27:75:d6:61:cc:
dd:6e:e0:2c:1d:8a:ad:b3:f5:74:38:7a:68:cd:a8:e6:b5:a3:
7c:93:cf:1f:4c:8e:4a:87:1d:84:79:82:7c:92:1d:e9:c0:d9:
eb:7a:52:35:67:6b:94:a5:7d:92:16:39:4f:03:4c:97:f9:07:
65:73:5c:6d:75:78:61:8d:35:97:04:cf:5c:5c:9d:69:94:76:
f9:e4:eb:80:9e:e3:f2:b3:80:47:16:a9:ab:1a:27:7f:97:b9:
e7:66:e2:48:9a:02:5b:ac:04:a7:9a:d1:cd:31:da:21:df:8d:
82:2f:72:84:ff:43:44:32:45:48:f9:47:64:68:d2:da:6d:13:
51:e7:db:2d:80:07:31:8d:d9:fe:d4:9d:c2:03:22:1d:a3:6a:
81:40:15:31:f6:98:61:ab:64:e6:07:6d:23:be:b4:a1:50:7e:
13:11:db:a2:da:a3:08:e8:7f:92:b7:ae:10:9e:9e:ea:b0:d1:
ce:49:f7:ac:3b:6e:95:67:b5:38:4d:e5:7b:f6:72:78:ab:26:
c5:8f:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:42 2025 by rpki-client