Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
File: 0jxZJVkZvdmrA73hxceIBixLmfM.mft (raw, json)
Hash identifier: yWWUvK3Rs648Bb7kl49Rtre4hg19AhQQqh6yTirImgo=
Subject key identifier: 18:B5:A7:86:76:36:D2:EA:03:3C:7F:92:E2:7B:9C:6A:47:A1:B4:5D
Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
Certificate issuer: /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Certificate serial: 019684A3CD939D474DF301A4661023F90E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
Manifest number: 0649
Signing time: Wed 30 Apr 2025 03:00:49 +0000
Manifest this update: Wed 30 Apr 2025 03:00:49 +0000
Manifest next update: Thu 01 May 2025 03:00:49 +0000
Files and hashes: 1: 0jxZJVkZvdmrA73hxceIBixLmfM.crl (hash: 0znDY972MLGlvcfYUWpKAov0/Zr8t9yo/kBhIZ+fFrs=)
2: JC586knHAJCWuyAHAdSdP6vCZvc.roa (hash: 5tWj8kAF7Tk8U+7sz2E535dJcNrZC7NIfrQwoPJI7rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:cd:93:9d:47:4d:f3:01:a4:66:10:23:f9:0e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Validity
Not Before: Apr 30 03:00:49 2025 GMT
Not After : May 1 03:00:49 2025 GMT
Subject: CN=18b5a7867636d2ea033c7f92e27b9c6a47a1b45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:6c:fc:ab:2e:82:b4:d9:a8:02:20:97:42:
e7:00:0b:41:49:6e:a7:b1:ec:dc:d8:dd:c6:73:f3:
d5:bd:a5:09:41:0b:6f:bf:fd:9a:1e:94:98:3b:ee:
e2:f7:66:7b:57:1f:39:76:ef:29:1e:5d:54:c4:36:
54:82:28:66:d7:1d:c6:2a:ce:e4:7a:25:81:f4:46:
48:0a:c8:e8:0c:2f:68:18:9c:3b:48:70:96:48:2c:
fd:12:25:63:3b:d1:53:b0:26:97:b2:49:b2:cf:65:
27:f1:89:c0:39:00:b1:3c:4c:6a:41:79:ff:33:4f:
cc:ac:d6:06:9a:36:4a:73:11:ec:6c:b6:ba:36:a9:
87:03:c8:43:21:e1:63:09:ae:fc:98:e5:6d:84:d9:
16:30:df:d3:c8:76:20:62:a1:c5:a5:14:cc:ef:3f:
70:05:ad:b6:e2:b3:78:53:d3:0f:f2:dc:90:37:cb:
4a:c7:c1:46:8d:8e:f4:6a:4f:a8:0c:eb:14:c6:02:
2a:bb:aa:79:94:d2:0f:3d:a7:1e:f4:77:4a:32:c6:
3a:87:e7:64:ea:dd:93:63:70:f5:fd:02:a8:4b:2b:
7d:26:f4:04:9f:1c:59:3c:ad:73:9d:c3:06:9a:8b:
09:e0:72:65:e5:29:ba:98:d6:82:5e:23:d9:33:3d:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B5:A7:86:76:36:D2:EA:03:3C:7F:92:E2:7B:9C:6A:47:A1:B4:5D
X509v3 Authority Key Identifier:
keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9b:c0:43:7a:6a:77:2a:d7:17:52:a6:d4:35:b2:60:b1:24:
be:e8:10:95:46:bf:69:0b:1e:47:0f:71:30:82:0c:58:ed:3c:
42:75:45:7f:70:02:de:f0:25:7a:7a:01:13:4c:9c:5c:aa:01:
c8:6b:a0:72:f6:19:ac:19:14:08:f1:b8:e9:35:df:f4:b4:37:
8a:22:df:5a:78:ce:8b:90:1a:46:94:62:02:0a:76:70:7c:be:
85:e4:d6:5b:76:4a:9e:ad:58:04:dc:74:ea:f3:ad:b0:1f:4d:
c0:f7:d2:27:0b:b0:70:f3:25:e9:91:44:24:11:d3:6b:7d:ed:
d0:2d:54:a5:30:c8:9d:9c:c7:13:3f:e0:2e:c4:c8:a4:7e:da:
2e:d5:df:29:77:e2:0e:41:78:10:0a:99:1e:18:84:7d:45:95:
8a:d1:74:8b:63:7e:1f:72:1a:58:96:94:aa:ed:6f:e3:8a:20:
27:08:23:a7:f0:87:10:89:81:c7:bf:33:d9:11:30:0e:1e:7a:
5b:11:65:77:38:24:48:2f:fb:76:d3:67:56:66:ee:b6:61:78:
2c:21:b1:17:07:59:16:12:de:b8:ef:0a:f3:9c:5f:dc:fd:bd:
31:f4:28:ed:57:39:b1:ad:c3:6a:fd:68:96:99:25:05:34:97:
c9:52:ef:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:19:54 2025 by rpki-client