Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
File: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft (raw, json)
Hash identifier: GqVxMLazHTdlqx6jRBejzzqcQBO/iPePQKnCdtJsjUE=
Subject key identifier: D2:09:F1:B2:8A:AF:78:9D:40:5E:31:A6:43:56:B1:76:34:28:4A:1D
Authority key identifier: 25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
Certificate issuer: /CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Certificate serial: 019699E1A4E0D1F23C62F1E621874160519E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
Manifest number: 0BDA
Signing time: Sun 04 May 2025 06:00:23 +0000
Manifest this update: Sun 04 May 2025 06:00:23 +0000
Manifest next update: Mon 05 May 2025 06:00:23 +0000
Files and hashes: 1: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl (hash: 725OuiGtxkt3r3wzXyN475Q/hzfcZYInva1Y4TtekzU=)
2: onIKXkQooL-gKM4FNa_iPOCUh28.roa (hash: p9VhepPylQixNxjdmUg1Yw/ZjccT3GaAzNYioyvMSo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:e1:a4:e0:d1:f2:3c:62:f1:e6:21:87:41:60:51:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Validity
Not Before: May 4 06:00:23 2025 GMT
Not After : May 5 06:00:23 2025 GMT
Subject: CN=d209f1b28aaf789d405e31a64356b17634284a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:f3:97:ab:54:e7:9f:ed:b9:0e:f4:91:5e:
3f:de:73:db:a3:7c:b6:ec:0d:38:e6:f3:d3:63:bf:
12:22:c7:47:3e:f4:46:68:e5:fc:c5:3d:d3:3c:30:
e8:54:0d:70:87:dc:a9:ce:84:9a:de:88:5a:19:a0:
47:48:ab:69:82:7b:71:7d:a5:4d:db:74:db:54:c3:
6d:56:56:ea:10:5b:a5:f8:95:74:f2:74:3d:12:26:
37:ba:8d:e8:f2:86:f4:0b:3a:5e:65:18:27:d5:c0:
23:cb:c2:40:b2:a3:cc:84:7a:89:09:d7:ea:e7:a7:
ca:9f:9e:33:5f:ab:c1:78:91:a6:37:35:e0:a3:fd:
29:da:cf:fe:19:f0:ff:03:12:ee:49:84:d6:f2:9e:
30:ce:fa:72:29:a9:71:f0:fc:2a:6d:4e:4a:74:69:
f1:a5:be:e6:b9:ec:e2:84:34:d2:48:ca:3f:af:30:
cc:9e:07:4e:17:74:b1:ca:44:6a:3b:b9:2f:28:50:
06:37:b1:67:e9:a8:1b:25:53:26:1d:7e:38:b0:7d:
b1:6a:ab:2a:a7:9f:b0:c1:b9:d5:49:5c:a4:8f:7b:
63:cf:f9:34:99:b0:cf:58:35:5a:c0:9b:e5:ca:2e:
08:ea:cf:53:95:23:3c:4a:37:a0:3a:d5:28:9a:4b:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:09:F1:B2:8A:AF:78:9D:40:5E:31:A6:43:56:B1:76:34:28:4A:1D
X509v3 Authority Key Identifier:
keyid:25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8a:e7:13:7d:dd:49:d9:38:70:30:53:d0:bc:da:05:38:22:
d2:ca:3e:29:a8:e3:af:5c:99:1e:31:b5:5f:ee:41:6e:25:6c:
29:13:d5:83:86:45:13:01:a1:f8:ef:d2:38:0d:5c:29:34:ef:
46:a8:bb:60:a4:2a:f2:04:b9:80:8d:7d:18:58:fd:0e:fc:6d:
46:30:0b:25:39:25:bb:0b:9b:44:a9:b9:c1:bc:f1:20:0e:98:
aa:a5:1a:8f:33:43:11:f5:88:62:4e:38:d0:16:60:ff:0a:f6:
fc:cf:1a:eb:97:37:92:8e:a9:89:28:34:77:96:e0:c5:ac:3f:
8f:f6:49:12:a5:a0:7c:31:a6:9f:db:02:59:3c:54:97:ae:b1:
2f:62:f9:7f:65:d2:66:fe:fe:a4:ce:8b:70:f2:19:4b:71:f3:
bb:70:63:2d:32:82:c4:e0:7f:48:1e:bb:c0:9f:b4:0c:44:6d:
94:3c:73:dd:ec:0f:3a:46:98:d5:73:64:be:48:39:5f:fb:16:
2b:54:0a:a6:92:0a:39:15:b6:15:ad:3a:e8:63:7d:70:df:53:
0b:01:51:62:c6:0d:26:9c:9c:b8:d7:0f:df:ca:c0:40:99:1d:
3f:6e:89:99:c4:e5:69:74:c2:59:e3:bd:5a:99:09:dd:ea:af:
23:0f:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 09:41:45 2025 by rpki-client