Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
File: jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json)
Hash identifier: Zxaxx01TkF0H0d1/7YaHLwks1qJqdcMo0byT+D1w3o0=
Subject key identifier: 63:8C:A6:47:40:C9:15:88:17:5E:7F:1C:4F:3B:8D:7E:58:1D:ED:4C
Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
Certificate issuer: /CN=8cda93a702f03d6034b02c4637212a743a472c8a
Certificate serial: 01968435AD70B830B92DFFC6386C9EBEEBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
Manifest number: 1512
Signing time: Wed 30 Apr 2025 01:00:32 +0000
Manifest this update: Wed 30 Apr 2025 01:00:32 +0000
Manifest next update: Thu 01 May 2025 01:00:32 +0000
Files and hashes: 1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: zwifg/reYasv+ht2DMDmBgKnzj1QijTNY5fQuHnjUTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:35:ad:70:b8:30:b9:2d:ff:c6:38:6c:9e:be:eb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a
Validity
Not Before: Apr 30 01:00:32 2025 GMT
Not After : May 1 01:00:32 2025 GMT
Subject: CN=638ca64740c91588175e7f1c4f3b8d7e581ded4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:67:fe:5d:44:cb:a5:1a:13:9a:c2:5c:70:99:
2b:1b:be:05:7e:14:dc:f5:df:0b:c6:33:e4:92:3b:
45:0e:37:3c:ed:e6:4d:75:bd:70:a0:36:fa:f8:f9:
d5:2c:b8:85:2a:29:b8:a0:a0:6e:cc:bb:5a:09:42:
f1:06:7d:86:e4:2f:f1:51:56:fa:1d:d2:cb:a1:af:
73:7c:48:b5:8b:a5:c2:fd:32:ba:eb:90:f6:49:10:
78:4c:9c:f3:0b:fa:46:9c:d6:10:bd:a5:7d:19:3a:
cb:70:9f:e8:03:ec:e8:b3:b1:4f:2a:95:ad:cb:68:
7a:c8:6a:ac:9e:d3:ee:6c:34:6b:6d:f9:81:b3:d8:
5e:d8:75:7a:05:e9:46:c5:d7:d5:30:03:d7:1d:75:
9c:fe:5d:d5:8b:05:eb:54:45:98:63:41:1a:6a:2d:
26:a9:94:6c:0c:f7:26:fb:41:e9:14:ec:f1:45:f0:
f3:a9:a7:98:65:40:77:9e:fa:6d:0b:b8:0e:49:17:
cc:df:84:42:7a:31:dc:44:14:20:a2:33:37:02:a1:
41:ec:7d:79:03:85:08:b9:ff:68:b7:56:97:40:b8:
7f:14:ab:65:de:f5:f5:de:16:2b:62:13:81:63:70:
5f:f5:12:b3:3f:b3:bf:75:20:b5:1d:41:5e:f2:14:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8C:A6:47:40:C9:15:88:17:5E:7F:1C:4F:3B:8D:7E:58:1D:ED:4C
X509v3 Authority Key Identifier:
keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:67:32:1a:0c:10:b6:50:6e:6b:e4:2a:d2:83:35:7a:3c:b4:
9b:67:0e:44:12:bd:51:f2:d6:2a:cc:89:04:c1:c1:59:05:ae:
ea:5c:36:0e:93:8b:6d:c7:b1:60:70:78:1f:d5:10:99:8f:03:
59:03:ad:b5:f4:b2:1b:29:65:b6:25:5f:1e:64:05:f6:30:8a:
31:74:1e:f3:d6:f7:93:c4:16:a0:ea:e6:d6:dd:d1:c8:cc:7b:
0c:19:24:e5:e4:e8:ef:02:7d:0a:13:bf:33:87:67:63:5a:32:
92:c2:fb:84:5f:ea:86:44:f1:59:bb:1a:24:44:ff:51:cf:d3:
3d:6e:94:3d:80:90:44:d6:c9:c1:f2:1f:64:10:e9:af:13:9a:
c3:21:5d:53:4a:fe:15:87:3a:b0:31:c0:97:36:ae:f0:86:5f:
8b:66:93:57:48:30:c4:84:c1:b0:97:d8:db:a4:63:f0:50:13:
25:e6:e3:b3:41:46:f0:a4:91:43:19:e5:a9:80:b6:ad:2e:8e:
00:bf:14:28:13:24:89:60:ff:40:3a:ee:5b:d9:b1:df:f7:31:
15:73:f7:12:1b:12:a0:e6:c3:f3:dd:cb:14:fb:39:92:05:80:
09:59:28:53:34:9c:96:bc:c0:a7:78:fe:a9:8d:7a:53:51:f2:
65:cd:23:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:33:35 2025 by rpki-client