Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File: j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier: jZ4FOaD67mjkwNdL5K2gHwdE66Juy4TbMnlMuUtUoxA=
Subject key identifier: 4E:B3:A5:70:09:EE:5D:B9:84:DC:D6:10:92:E2:60:45:35:C4:31:0B
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer: /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial: 0196760BE16B49302832B0EA3AFFE697F743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number: 075B
Signing time: Sun 27 Apr 2025 07:00:12 +0000
Manifest this update: Sun 27 Apr 2025 07:00:12 +0000
Manifest next update: Mon 28 Apr 2025 07:00:12 +0000
Files and hashes: 1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: cfNmfYtAu1G3gsQawSmcXmJiHUW4GdcRKlWlZgKhUds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:e1:6b:49:30:28:32:b0:ea:3a:ff:e6:97:f7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Validity
Not Before: Apr 27 07:00:12 2025 GMT
Not After : Apr 28 07:00:12 2025 GMT
Subject: CN=4eb3a57009ee5db984dcd61092e2604535c4310b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:fa:df:e3:99:9e:40:7d:a1:8b:28:3c:66:
f7:13:3a:a9:69:a8:71:5c:05:c1:93:d4:62:b2:3a:
f3:9c:dd:d1:3b:8e:ed:e1:c6:96:47:eb:6b:ca:23:
cc:7d:5d:95:bf:06:af:6c:57:6a:e1:1c:99:d7:f9:
e6:b9:e0:f5:b5:7a:28:01:d0:d8:22:0f:d8:4d:26:
f9:8e:10:89:75:83:92:f5:2b:de:b8:54:3e:eb:17:
28:73:f5:62:d9:11:1f:6b:0c:fa:b4:1f:ac:e8:13:
df:f6:40:8c:15:86:ad:bd:43:f2:4f:2f:b9:e0:ee:
ae:72:eb:e9:66:e7:b6:40:70:22:1c:5c:38:a7:21:
55:a2:ae:9f:34:fb:ec:ae:ce:22:5d:b1:89:db:46:
7d:2d:07:58:73:37:cc:49:6a:05:04:3c:99:3f:39:
89:d8:e1:82:b0:3f:dd:43:da:60:7c:8b:0d:f9:34:
52:40:c8:16:0f:c3:8b:c0:71:bc:1c:b6:b8:8f:a1:
ba:59:c5:c6:5b:e0:bb:36:db:d1:a9:8b:03:d8:28:
98:d9:11:4b:56:7b:ed:b4:dd:30:d4:97:c2:98:9f:
c9:b4:23:12:0b:58:00:df:bd:2d:b2:49:ab:4f:c8:
68:0e:7f:8a:54:84:15:dd:00:3c:2a:28:56:94:cd:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B3:A5:70:09:EE:5D:B9:84:DC:D6:10:92:E2:60:45:35:C4:31:0B
X509v3 Authority Key Identifier:
keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:80:90:dc:f3:dd:c9:b2:50:60:5a:21:29:3c:7f:4d:e6:87:
96:6e:9f:4e:fa:01:75:e1:00:0e:53:e4:66:89:a6:03:61:e5:
9d:fa:bf:6c:97:9c:fc:21:6b:a6:93:c5:6b:b1:5c:29:54:db:
dc:42:58:07:07:59:06:16:e1:d9:53:b4:22:b9:6f:dc:86:56:
ce:0d:37:d0:bf:dc:06:9a:1c:8a:b5:60:9a:77:07:85:69:6c:
32:7a:3a:7a:00:2a:8b:cf:18:e4:02:f6:a9:dd:d5:9b:d5:4d:
54:c5:24:3c:b4:6a:86:f8:02:84:c7:ee:03:b6:f7:17:01:08:
7f:5e:b5:b8:89:8c:da:37:63:6e:fd:61:e0:24:ad:56:c6:d4:
40:dd:cf:3e:46:48:f3:7d:c1:14:a3:58:2d:a3:e3:d6:88:7a:
c6:a5:e7:20:95:7f:fb:c6:b9:03:21:f5:e0:0c:5f:ac:cc:b6:
95:af:d7:6c:38:97:a1:38:89:76:9c:97:b4:4e:19:7c:c3:dd:
10:c0:6b:93:29:f5:9a:37:0a:46:c4:82:de:10:fa:0d:47:3a:
0d:14:0b:ca:df:ec:a5:81:c1:7a:77:54:9a:7f:54:a4:fe:50:
4d:f9:f2:f3:69:d5:7d:19:6b:a6:37:03:c0:b8:c3:2e:82:d8:
35:0f:31:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:51:57 2025 by rpki-client