Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
File: jdADrwR3TdPjlzBJeYmjoXFRYlI.mft (raw, json)
Hash identifier: PstHT1uPHCwmLZf6qzccwuPHxiQi4rRd2qujlFyH4mE=
Subject key identifier: 8E:0F:D4:1E:FB:76:7A:9D:44:33:8E:9C:10:2F:20:B0:3E:58:8F:28
Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Certificate issuer: /CN=8dd003af04774dd3e39730497989a3a171516252
Certificate serial: 0196767A9CB6306AB1E401DC3E9DB919849E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
Manifest number: 0FB5
Signing time: Sun 27 Apr 2025 09:01:09 +0000
Manifest this update: Sun 27 Apr 2025 09:01:09 +0000
Manifest next update: Mon 28 Apr 2025 09:01:09 +0000
Files and hashes: 1: jdADrwR3TdPjlzBJeYmjoXFRYlI.crl (hash: UcuGm3M5WcypsE7Dgcwb4yoiTvWM5aH01f5+r9+Sg1Y=)
2: qyViuV165L-xE7uYQ2sF7wlGYBU.roa (hash: 0KdoKDI8ZdUz1uym9xGUbcM+qAI/3kuRuqeRZbordfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:9c:b6:30:6a:b1:e4:01:dc:3e:9d:b9:19:84:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd003af04774dd3e39730497989a3a171516252
Validity
Not Before: Apr 27 09:01:09 2025 GMT
Not After : Apr 28 09:01:09 2025 GMT
Subject: CN=8e0fd41efb767a9d44338e9c102f20b03e588f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:27:01:fb:0e:2f:52:54:1d:02:13:db:43:91:
f5:96:01:d3:bd:f4:b3:19:6b:e0:c9:f1:20:e6:9d:
dc:bc:ee:e8:3f:67:19:82:bc:90:51:5d:2d:e3:ca:
54:d6:74:18:1e:a3:f7:48:25:09:ed:6d:af:7c:3d:
ca:55:e9:a5:f6:95:07:cf:ed:51:41:e3:51:33:f2:
b3:12:08:7f:e5:b1:85:f9:f1:06:35:2f:1c:f6:5e:
f9:91:19:e4:9f:94:6d:e1:29:eb:99:53:44:5e:8d:
51:2b:f4:e0:2a:9a:6a:00:21:f0:67:7e:0f:1e:07:
85:f8:ea:27:95:c6:82:9b:89:b3:dc:da:fc:88:f1:
e4:b9:a3:7a:82:42:ad:12:18:74:76:73:df:b1:36:
aa:ba:20:d6:f4:b5:9a:51:e6:8b:f0:35:94:03:3c:
9e:71:f8:56:9a:09:f5:d5:ad:67:23:e5:1f:6e:90:
ab:9b:04:24:cf:f3:4f:0c:b4:d3:3b:25:af:29:c7:
77:9e:d8:54:93:67:ed:c5:1b:15:48:15:5a:9b:61:
91:0e:7f:a2:82:9a:b4:42:15:24:7f:9f:84:6d:ed:
99:5c:3b:f8:01:25:9b:91:23:40:50:d7:4e:7f:91:
04:eb:f7:fb:dd:e8:bb:fb:58:42:7d:2e:cd:df:da:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0F:D4:1E:FB:76:7A:9D:44:33:8E:9C:10:2F:20:B0:3E:58:8F:28
X509v3 Authority Key Identifier:
keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:22:49:28:28:2b:d9:bf:77:3c:ea:c7:d6:33:23:fc:0f:90:
c8:15:2c:8a:f7:a2:1a:9f:80:83:62:f4:75:fa:21:1f:c5:b8:
e1:60:31:e3:75:4b:32:eb:c1:46:c8:f8:93:d8:b7:3a:91:b6:
b2:ec:5e:43:2a:90:f6:1f:87:01:a2:30:19:05:fe:ca:88:19:
2f:7e:d3:ae:c9:42:a6:9f:4a:d4:3b:5e:89:1e:d9:18:7c:75:
d1:17:09:e4:27:11:95:63:1c:85:dc:93:39:8e:bc:a1:9d:c7:
19:f9:fe:95:e7:f3:d8:74:0e:0a:fb:65:1b:24:c5:11:39:ff:
78:c7:3f:e9:df:ea:77:ab:03:14:f5:64:d5:b7:16:94:91:ef:
96:60:79:a5:c8:82:b0:df:57:8b:05:92:88:f6:17:f6:a4:84:
3a:a9:b1:44:30:36:1f:55:d8:55:1d:2d:d1:d0:c7:83:d5:49:
ea:32:43:ce:20:30:8e:74:56:db:17:fe:f6:a7:75:9d:26:13:
f2:bb:f7:9b:7d:c5:1b:c5:99:36:38:db:e0:c3:f1:83:88:ea:
64:61:ff:42:d7:84:2b:6c:01:8b:fb:99:38:a2:ac:77:f7:2b:
bd:34:5c:63:c3:5c:aa:e5:cb:b0:31:b3:c6:85:bc:b8:49:b7:
a7:8b:2c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:13:26 2025 by rpki-client