Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
File: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft (raw, json)
Hash identifier: qwAEAlZDEwXcI2vqKcJT215TpDVzxyvC37ibJs043cM=
Subject key identifier: E5:75:EF:7F:D0:A6:AD:B7:62:32:A3:9A:47:CF:D7:68:29:AE:97:BC
Authority key identifier: 26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
Certificate issuer: /CN=26066b6b6c13603501aa256fcdc3740df77801dd
Certificate serial: 019680FD87AC726A7427DB8FB68DFCD0D9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
Manifest number: 0967
Signing time: Tue 29 Apr 2025 10:00:20 +0000
Manifest this update: Tue 29 Apr 2025 10:00:20 +0000
Manifest next update: Wed 30 Apr 2025 10:00:20 +0000
Files and hashes: 1: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl (hash: QrS9OKbjnN04nIQOY0UUX5PHbzNKb1xWvkFESMERgks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:87:ac:72:6a:74:27:db:8f:b6:8d:fc:d0:d9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26066b6b6c13603501aa256fcdc3740df77801dd
Validity
Not Before: Apr 29 10:00:20 2025 GMT
Not After : Apr 30 10:00:20 2025 GMT
Subject: CN=e575ef7fd0a6adb76232a39a47cfd76829ae97bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:49:34:b3:fb:8a:5e:87:c1:fc:7c:12:08:
9c:77:af:1e:59:44:ea:43:35:7f:91:94:b3:b1:c7:
d3:70:fe:64:b6:94:a5:30:e5:b3:ff:6e:16:4e:f2:
f2:73:c9:6c:5f:28:88:1b:8d:3c:4b:ef:1b:2e:f3:
c2:9c:f3:07:6a:ce:fc:c1:ed:c5:23:fd:28:43:43:
e5:62:91:56:e5:7b:9a:ad:ec:a1:de:d4:a3:40:f5:
e5:cb:7b:cc:44:50:16:27:c0:d7:1f:95:82:3f:4f:
e0:35:54:12:e5:2f:65:55:24:30:cf:d0:2c:53:a1:
81:bf:ec:d1:d4:b7:ca:fb:41:3f:2d:6d:59:28:eb:
6b:e8:4a:92:7f:3a:09:68:fd:58:8b:5d:12:b6:68:
e3:b3:1a:7a:61:a1:ba:5c:8d:4d:06:96:63:2c:63:
28:3f:81:0a:6c:3a:c4:72:49:e1:07:26:3c:dd:88:
13:99:07:6e:e6:1d:2d:d7:93:a8:d9:c0:b3:57:85:
8c:e0:77:60:74:99:49:ce:d0:35:35:14:ac:ce:fe:
1b:ab:d6:ef:09:15:5f:23:68:f9:4a:b1:b9:d0:10:
a0:14:71:a4:79:b2:dd:ae:39:a0:03:d4:ca:48:a7:
c3:dc:54:89:7a:f5:2f:0f:78:0c:66:43:ee:72:c2:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:75:EF:7F:D0:A6:AD:B7:62:32:A3:9A:47:CF:D7:68:29:AE:97:BC
X509v3 Authority Key Identifier:
keyid:26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dd:c3:dd:ef:f0:fa:6f:07:c7:39:6c:d0:d9:27:cf:0b:8e:
3e:33:5c:db:be:7f:0b:ab:95:e0:dc:96:86:b7:5f:a5:e9:17:
fd:f7:e4:a8:8f:f8:2d:58:c9:6d:66:a5:57:3f:2b:a1:0c:40:
8b:6d:7a:cd:9f:4e:2d:60:7f:8a:65:96:b0:af:5d:f9:f7:e9:
13:0f:42:f5:57:7c:55:f6:7e:6a:78:7a:f3:53:9d:42:90:6b:
ed:32:9e:5f:eb:98:26:51:73:8c:98:10:46:d6:a9:3a:2a:07:
c5:f4:b8:d9:94:ab:1d:22:be:95:49:ea:b5:d9:74:8b:ac:29:
a2:60:66:e7:d8:5d:94:34:73:a9:8b:b9:3c:8d:5c:92:37:eb:
71:39:b0:6f:a8:c7:26:d8:92:60:79:47:68:ee:1d:ce:1d:e7:
d5:7a:b5:23:52:53:a3:81:fd:53:95:43:de:96:7c:74:55:eb:
85:ee:70:ce:e1:be:6e:e1:d6:06:2a:12:aa:4f:9c:6c:18:46:
0a:c8:bf:d6:61:4b:17:41:79:ee:04:ae:cb:7e:63:bc:d4:f3:
e3:c8:81:f3:ba:68:01:49:00:2b:7e:6d:20:97:d2:eb:69:76:
c8:82:49:6b:3e:d0:be:e3:89:29:eb:a4:3f:4b:df:4f:e2:97:
db:aa:b0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:43:56 2025 by rpki-client