Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: iH57hZA47GNzJihMRduFmfxORh4auzb2RgVRXFPUEP4=
Subject key identifier: 8F:B3:E2:21:E1:9F:8F:4B:D8:43:7E:77:2A:28:84:84:ED:F4:54:74
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 0196760C166B74301F3F67EC98D887C028C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 0900
Signing time: Sun 27 Apr 2025 07:00:25 +0000
Manifest this update: Sun 27 Apr 2025 07:00:25 +0000
Manifest next update: Mon 28 Apr 2025 07:00:25 +0000
Files and hashes: 1: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: WLlsktdEKl00EOnmBREicnY4zqahc3Lbigof/9DlQEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:16:6b:74:30:1f:3f:67:ec:98:d8:87:c0:28:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Apr 27 07:00:25 2025 GMT
Not After : Apr 28 07:00:25 2025 GMT
Subject: CN=8fb3e221e19f8f4bd8437e772a288484edf45474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:71:d4:5c:fc:10:51:e9:99:ae:3b:f1:d0:f0:
9d:42:ab:0b:0c:ee:c4:39:ec:1c:e4:df:5e:54:29:
2b:af:05:33:95:84:79:60:78:01:36:35:78:6c:f7:
04:7f:38:33:35:9a:77:62:03:c3:3c:b7:26:26:68:
dc:2e:a0:ef:6c:b9:49:89:78:e3:72:83:53:4d:59:
a2:da:23:48:4a:be:7d:a7:34:b5:0c:ea:5a:e7:04:
79:5f:8c:08:98:41:ba:29:07:2f:54:ef:f8:b5:76:
16:8c:90:c7:73:1b:b0:90:dd:53:b1:aa:10:d0:83:
11:b1:92:7b:50:0a:d2:3c:9c:85:c6:72:20:96:ee:
ff:75:ee:24:76:2f:be:9d:06:62:15:2f:1c:ff:9e:
38:8a:03:40:31:c8:25:6f:0e:04:da:a0:51:db:c1:
7b:b4:30:d7:be:97:8f:45:4b:c9:20:b9:3e:25:09:
b7:85:71:ea:bc:62:27:5e:6b:ec:17:d2:fe:b9:90:
ee:cc:69:70:04:b5:b0:9e:ac:9b:70:4b:87:1a:a0:
08:7f:81:0b:65:98:02:ba:cd:a2:00:cc:a0:2f:c1:
fc:72:9b:f0:b6:b0:d6:80:40:3f:b6:05:3c:e9:72:
ba:9a:e6:f7:5e:25:68:6e:bc:25:05:46:a6:b1:22:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B3:E2:21:E1:9F:8F:4B:D8:43:7E:77:2A:28:84:84:ED:F4:54:74
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:13:b8:95:ab:e0:60:08:4c:22:a1:67:2d:e4:0c:71:6e:7b:
a7:3a:a0:2e:e5:96:ce:ff:78:c4:65:14:c7:c9:7e:f8:f3:b7:
00:7c:a0:0c:fc:d7:1d:9d:b0:25:9b:b8:4c:59:bc:6a:b6:9c:
f0:6e:aa:a7:0a:83:1f:44:5c:2b:1a:56:c5:70:f4:8f:cc:c8:
4f:d3:d1:87:b3:a0:a7:68:28:8f:4c:e4:23:e9:04:5d:92:cd:
ff:c4:f2:a7:86:ec:12:53:e7:88:ca:1d:90:3a:90:3e:c4:29:
01:0d:41:12:2c:e0:e8:44:1c:1e:5e:c4:68:b3:76:6d:49:69:
7c:10:54:e3:fb:dd:41:e3:9f:bc:2c:d9:c5:1e:b0:36:6e:2a:
cd:04:3a:25:97:9e:5d:1c:36:83:75:5c:6a:50:e7:2a:3b:3d:
3e:bb:7a:29:41:e8:e1:b7:90:35:41:0d:aa:fe:ba:cd:66:8c:
c8:1e:7a:46:79:a3:32:66:4b:d7:c9:b0:ac:73:bf:96:10:6d:
9c:b9:bd:d9:cf:65:93:0e:8f:3e:13:f5:8d:6d:cc:ec:52:93:
2d:27:47:4b:ba:46:a7:8c:28:1f:12:66:ff:94:91:40:82:00:
d0:e5:c4:aa:cc:23:30:93:81:4d:03:70:fa:5a:fc:26:e6:8b:
94:00:a9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:03:27 2025 by rpki-client