Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
File: J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft (raw, json)
Hash identifier: 4LbeWJ7sorGu+Mmrq1uEje8y82AQtGa5pt5er6soFYY=
Subject key identifier: 89:AF:6B:64:09:E1:11:3D:D5:B2:C9:9D:20:B0:11:6C:85:2D:80:E4
Authority key identifier: 27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
Certificate issuer: /CN=27a110452384649d05c1e98fb97b49ae11600973
Certificate serial: 01968E82CEB4801643EF19577A4E8A9EFA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
Manifest number: 0D36
Signing time: Fri 02 May 2025 01:00:59 +0000
Manifest this update: Fri 02 May 2025 01:00:59 +0000
Manifest next update: Sat 03 May 2025 01:00:59 +0000
Files and hashes: 1: J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl (hash: xM2Wgjj06CLAMEXRLUMzktRPeNtnPKK2ofcD6LNxs6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:ce:b4:80:16:43:ef:19:57:7a:4e:8a:9e:fa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a110452384649d05c1e98fb97b49ae11600973
Validity
Not Before: May 2 01:00:59 2025 GMT
Not After : May 3 01:00:59 2025 GMT
Subject: CN=89af6b6409e1113dd5b2c99d20b0116c852d80e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:56:23:dc:ab:79:fb:27:01:28:7b:24:8e:
fc:8d:f7:f2:16:1b:63:96:60:78:0a:7e:08:99:8e:
e2:4c:f1:ef:f1:10:75:00:26:97:7a:82:79:40:ec:
1a:d4:1b:19:e5:31:4a:0a:ee:0b:4e:5d:2f:79:e7:
21:c0:d5:e6:3c:83:ee:10:af:7e:80:b2:be:5f:6d:
b1:c6:f9:f5:ef:cd:f9:b6:53:cd:65:2d:a3:31:99:
59:f2:5c:22:7b:e9:68:46:c4:6f:cc:1e:91:93:91:
fc:bb:c6:56:f8:b9:64:89:47:c0:96:b0:49:87:b9:
10:3c:c3:31:e8:35:fc:92:d8:51:4b:2d:7b:5d:ef:
d0:7e:3c:5d:70:c0:3e:34:49:39:13:e1:ff:84:09:
cb:c8:6d:ae:bd:ca:3f:cd:0f:91:27:be:3c:7f:0a:
df:b0:73:26:f2:f5:2b:d0:2d:04:29:b1:49:69:12:
61:ff:cf:70:de:30:19:7a:e6:8a:d7:de:c5:cb:b8:
f0:fb:ca:26:94:15:85:8b:cb:bc:3f:2f:46:82:d1:
db:41:33:57:52:ff:e8:92:08:09:98:41:6d:12:17:
b5:d6:3e:ba:a7:ae:13:4d:09:3c:9e:9e:1f:30:c9:
1f:7f:a4:22:b0:c1:e6:26:f7:65:f5:92:ca:84:29:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AF:6B:64:09:E1:11:3D:D5:B2:C9:9D:20:B0:11:6C:85:2D:80:E4
X509v3 Authority Key Identifier:
keyid:27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8d:90:45:01:82:e5:a5:9b:3b:cf:e7:a0:15:ef:95:5f:64:
46:5c:e2:42:ae:a7:fa:3f:ab:0d:11:c3:38:e6:ef:61:ba:18:
a1:8a:b0:f4:37:57:f5:26:93:b1:84:d5:7e:fa:fc:24:21:6e:
94:26:f2:5b:bc:b5:d2:5b:c5:06:1a:ae:9f:7c:04:35:15:2b:
42:0f:7b:de:ca:e5:41:8a:b1:47:30:70:3c:32:0c:8c:d8:b3:
00:c2:a9:1a:61:8c:80:2a:b5:76:8c:54:8c:77:db:47:99:e7:
c0:29:6c:f4:08:b1:f6:31:ae:28:5f:bf:14:c8:a2:3c:f8:b1:
66:2e:fe:eb:a3:ed:3d:51:21:bf:c5:2a:ef:cd:d3:5b:c3:da:
43:86:7b:35:9c:de:8c:f0:d4:8a:ef:da:ab:5c:fa:07:4e:16:
9a:d6:7e:81:83:27:09:e8:bf:4d:d4:14:6e:8a:6f:bc:5e:99:
97:f4:39:a0:45:8a:5b:e3:f1:2e:dc:64:8f:96:7f:78:cd:f7:
2b:4f:5d:2c:4b:07:25:c2:7d:b7:06:6e:2c:a9:f3:f1:d0:7a:
d5:04:06:68:f0:91:a3:2c:bf:ba:eb:9d:24:46:21:ce:9a:90:
94:49:60:6f:d2:40:76:98:bb:76:b3:b2:82:e1:4a:18:4e:42:
2d:03:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:05:21 2025 by rpki-client