Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
File: jcCppeacVIJgmLsg00Hwc4_2fmU.mft (raw, json)
Hash identifier: HfYpXfb3Wah3x48jFFAiIr1BdIVBTd3LST/FiAvZ+Tw=
Subject key identifier: 94:AC:11:5A:A9:39:38:90:6E:8B:03:67:36:40:D7:2A:92:68:A2:AE
Authority key identifier: 8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65
Certificate issuer: /CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
Certificate serial: 01967E337F70119C0558F9F66CEF8ADD1F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
Manifest number: 115C
Signing time: Mon 28 Apr 2025 21:00:26 +0000
Manifest this update: Mon 28 Apr 2025 21:00:26 +0000
Manifest next update: Tue 29 Apr 2025 21:00:26 +0000
Files and hashes: 1: jcCppeacVIJgmLsg00Hwc4_2fmU.crl (hash: NnSqDMMIUeVGKJ1iSux0xdlwJyX6UguSQr77rXkK8Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:7f:70:11:9c:05:58:f9:f6:6c:ef:8a:dd:1f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
Validity
Not Before: Apr 28 21:00:26 2025 GMT
Not After : Apr 29 21:00:26 2025 GMT
Subject: CN=94ac115aa93938906e8b03673640d72a9268a2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:e6:2b:3d:6f:25:7d:da:e2:ff:32:d9:41:
da:95:6f:5a:8e:15:2c:e2:eb:7a:f0:19:32:51:54:
40:c5:9e:6e:b8:42:ef:0e:94:6a:d7:35:89:9d:70:
94:45:e6:fb:48:41:e8:2c:01:57:45:61:dc:7f:0c:
7f:1e:0d:38:af:9a:31:ed:da:6c:36:f6:c4:df:6d:
9b:e4:f4:2a:c7:46:34:cf:8b:b1:7f:97:97:b9:1c:
8c:84:b8:8f:a6:59:8e:f5:cf:89:9f:95:d4:5f:a8:
6f:41:90:de:5d:f3:fe:bd:84:8b:5c:7d:ba:cf:ee:
da:cc:9d:54:3a:83:80:1d:a2:5b:93:49:66:30:f7:
60:63:62:ba:2c:47:75:0b:17:ad:40:e0:ed:0a:eb:
bd:37:a3:d2:97:bc:78:e3:e7:3c:31:18:f0:e6:31:
e7:e8:7b:d9:c8:44:ec:75:e4:37:4c:73:5b:f9:42:
46:d9:97:26:73:79:3d:71:b1:7d:80:d1:0b:dd:44:
07:34:7c:01:b8:fd:93:7d:21:42:b4:6d:5e:97:b9:
4f:1e:cd:da:ff:78:c5:38:47:d8:1b:f2:1e:3c:af:
56:6a:1b:3a:5d:bb:8a:ad:f8:a0:d7:f7:88:e9:80:
a1:d9:6c:dc:bb:78:a0:d7:59:40:31:17:07:dc:53:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AC:11:5A:A9:39:38:90:6E:8B:03:67:36:40:D7:2A:92:68:A2:AE
X509v3 Authority Key Identifier:
keyid:8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0d:1d:25:8a:3f:27:30:6d:37:44:b1:e0:96:fd:3c:37:82:
55:59:4c:f4:f1:f0:78:ec:26:db:6d:ff:36:8d:c4:44:fa:29:
71:cb:29:1f:1c:85:ca:02:b1:bd:cc:b7:1b:e8:91:75:fe:83:
91:c3:c9:35:35:a6:67:78:9f:1a:e3:92:1d:bc:61:bd:49:39:
a1:ea:12:42:2d:b3:4c:ed:c2:ea:0b:f8:76:15:3a:30:a5:43:
94:43:8b:e5:d6:91:a6:c0:4a:37:b0:61:35:2e:da:27:b6:f5:
b9:00:c7:56:2d:38:af:c8:d5:14:84:dc:44:61:a8:17:5b:06:
cd:dd:95:e4:4b:79:6b:0d:1d:93:7f:b0:a4:55:fa:83:90:9b:
16:1e:49:41:a6:9a:1f:04:b0:55:f9:dd:05:4c:be:08:d0:bc:
58:d6:f3:a0:80:4e:ef:4f:51:2a:d3:f4:0f:35:60:e0:db:09:
0f:8c:ae:db:ee:f3:d1:4b:ee:90:8c:3b:0f:2e:63:a0:4f:23:
29:ed:f0:36:a5:47:1d:7c:b6:f1:55:bc:19:0d:24:82:38:67:
70:6a:1b:f9:56:b6:d1:f3:c8:29:cd:dd:60:23:7a:19:aa:c0:
4c:34:ac:bc:5b:32:d9:bc:f1:73:96:69:b5:6b:f0:c7:90:1d:
56:13:3c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:19:36 2025 by rpki-client