Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
File: jWLdvflYu0uYPali7PA76u441Ek.mft (raw, json)
Hash identifier: MLn6ShTZa7FpOl629ixvWrXMrh8u8n/mwU4yMuZ/GwU=
Subject key identifier: 68:4A:83:7E:9A:E8:9F:6F:E7:B4:A3:E4:34:AF:66:D1:AE:4B:C9:22
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Certificate issuer: /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial: 019676B0D6D7308E567887EE3C67302E87BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 10:00:22 +0000
Manifest this update: Sun 27 Apr 2025 10:00:22 +0000
Manifest next update: Mon 28 Apr 2025 10:00:22 +0000
Files and hashes: 1: jWLdvflYu0uYPali7PA76u441Ek.crl (hash: y27DbM9szYveqUZX2CYQr7TWtPQdiEPE1/y1VE33d1A=)
2: s34MRUBBXAv4etz_rjf1ivNvKl8.roa (hash: 0Raiu10MwJUtSZKphwMI3EWBFXIoAne26av2cOWMQx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:d6:d7:30:8e:56:78:87:ee:3c:67:30:2e:87:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Validity
Not Before: Apr 27 10:00:22 2025 GMT
Not After : Apr 28 10:00:22 2025 GMT
Subject: CN=684a837e9ae89f6fe7b4a3e434af66d1ae4bc922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:51:a5:41:d2:52:53:db:df:26:be:ed:ff:6b:
a6:26:cd:79:f1:a4:48:48:0b:35:c4:37:75:81:ed:
7e:95:31:da:14:72:e8:6c:7a:98:24:a8:10:bb:ea:
1c:c2:34:10:00:ac:d8:32:ab:80:14:19:f1:11:4b:
37:12:3f:27:4f:03:31:6a:e4:46:7b:bc:83:96:a7:
1d:b5:5f:64:06:60:1e:6d:ff:7d:bf:ab:37:00:97:
df:27:5b:0e:e0:b9:4b:af:af:7a:79:5a:4d:39:00:
8f:13:c1:5c:84:d6:f8:a2:cd:aa:c1:81:e9:c7:c9:
be:e4:4e:ad:4a:77:c8:c8:30:e3:80:5c:41:35:d5:
48:0e:07:f0:b5:64:32:08:ee:b5:53:d7:a4:dd:ed:
7e:c8:7c:2f:21:b9:2a:0b:07:09:56:ef:95:59:75:
95:8c:10:4d:bd:d4:ff:30:eb:02:f3:12:fb:1e:02:
7e:dc:83:bb:a3:06:55:74:d5:d7:26:6f:fc:79:02:
af:96:1b:7f:05:3a:f6:15:6c:b4:c6:7b:34:19:db:
95:70:58:4e:ef:b3:13:73:bf:8b:c4:a3:21:76:39:
e0:50:a8:ce:f5:99:cc:aa:1f:8f:63:68:a8:0c:2a:
d2:9e:62:82:76:09:c8:ec:85:00:23:0f:3f:38:84:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4A:83:7E:9A:E8:9F:6F:E7:B4:A3:E4:34:AF:66:D1:AE:4B:C9:22
X509v3 Authority Key Identifier:
keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:40:20:11:07:07:67:17:01:f8:db:f5:af:58:42:57:76:06:
a1:02:72:c4:56:5f:48:98:8d:95:e3:6a:bc:87:ab:ae:28:d7:
dc:35:9e:be:98:89:b0:5b:c3:64:c2:ed:7c:ee:d0:15:b6:b3:
94:a8:e4:1e:e3:3e:91:df:db:47:c1:fe:5a:ca:f7:5b:0d:d7:
ee:f3:98:61:5b:84:65:7a:bd:d1:5e:60:b2:d1:39:53:c1:c5:
64:c1:8a:a3:53:ce:d8:37:ba:54:00:ef:33:92:d1:6d:1e:89:
47:84:45:54:d0:06:ae:d6:f9:08:c7:a9:2f:3e:7d:6b:a3:d0:
d9:67:82:da:24:ff:4b:41:5f:41:b1:5c:48:bf:91:da:5e:08:
aa:97:36:c0:ef:9f:f3:74:51:b5:3d:77:cf:be:2c:c5:e7:5f:
b6:28:21:4a:b5:81:d2:9c:99:82:5b:2c:b3:98:9a:89:3f:7e:
41:20:58:67:e5:f0:e0:57:fd:28:38:fe:80:d2:7b:86:f1:17:
f0:41:ea:8d:83:ba:d7:9f:08:80:ce:25:a2:64:04:7b:4a:42:
5a:4d:4b:5c:d6:8b:f8:17:34:2f:b7:43:b5:93:5e:4a:94:2d:
a4:fc:44:40:68:48:42:2a:72:f4:85:a9:22:11:28:0f:19:a0:
d9:90:e3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:22 2025 by rpki-client