Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File: j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier: zFgYtPtbI2weLbcnKiEQPoUcpsqp+MDjxKjzXkHXCbM=
Subject key identifier: E5:AF:6B:0F:E4:CE:0D:9E:A9:DD:85:7B:FD:72:F8:BE:45:11:D1:B9
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial: 019673B056FBEA5D4A760CB31BEAED4FA1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number: 0985
Signing time: Sat 26 Apr 2025 20:00:58 +0000
Manifest this update: Sat 26 Apr 2025 20:00:58 +0000
Manifest next update: Sun 27 Apr 2025 20:00:58 +0000
Files and hashes: 1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: DoSNelbuHp27BdPqUQRrCB9LcAhohSNOtXzOt8tFDT0=)
2: v0kVKV7zgFySWfJ-lGmi8aljQUA.roa (hash: QFeJpmHiChV7sVzkjOtXP/zd/9P3djdIsqxjZcryjik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:56:fb:ea:5d:4a:76:0c:b3:1b:ea:ed:4f:a1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
Validity
Not Before: Apr 26 20:00:58 2025 GMT
Not After : Apr 27 20:00:58 2025 GMT
Subject: CN=e5af6b0fe4ce0d9ea9dd857bfd72f8be4511d1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:69:53:53:06:40:fa:3c:e2:9c:e1:da:cb:
f4:d9:1c:46:60:aa:2b:39:7b:d3:28:4a:be:53:1e:
c6:ec:d5:89:3d:0b:29:43:71:cc:16:d6:d6:de:1a:
f3:9f:c8:0f:e6:4b:da:8d:a1:c6:80:4e:f8:8d:fb:
27:e6:be:19:74:f6:86:88:5f:79:07:e1:de:c1:48:
6e:43:bf:2b:d8:42:de:af:11:e1:45:fe:da:ea:2e:
16:93:77:7a:a3:cf:4d:db:f9:7f:aa:8a:d2:fe:2c:
4c:4e:8a:18:43:19:83:ee:57:ea:70:64:62:e2:e6:
2b:9f:ff:fd:ad:67:62:68:7f:34:5a:5f:52:6c:6f:
98:ce:aa:6f:66:d4:82:12:d1:ac:e7:0b:f7:51:19:
17:72:cb:dc:91:70:df:6e:91:b8:a8:f4:7c:8e:87:
59:20:53:89:91:dd:c4:2c:82:2a:6d:e1:a1:3a:17:
97:bb:9a:fe:c0:11:54:c6:00:c4:3c:aa:0a:f2:ba:
ba:77:98:cf:6b:6e:a5:f9:1e:d1:3a:6b:8c:91:b7:
51:b0:0d:18:90:a8:81:99:73:77:17:98:c5:c2:31:
3f:c5:41:cc:f7:73:ee:0e:d3:c6:f4:ac:25:fc:c9:
4c:40:e9:e4:bb:08:b4:39:07:a4:49:da:a0:70:8b:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AF:6B:0F:E4:CE:0D:9E:A9:DD:85:7B:FD:72:F8:BE:45:11:D1:B9
X509v3 Authority Key Identifier:
keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ed:b8:3e:0b:dd:3d:de:b2:f5:c2:cb:6a:7b:af:31:ac:11:
ec:63:cf:a3:a1:02:eb:d1:6a:30:74:4f:60:c8:bf:cf:96:97:
be:4b:48:89:3e:5f:63:9c:98:ee:8f:12:66:f9:71:96:76:e1:
d7:ea:03:53:dc:2f:bb:e2:7a:83:56:75:e8:1e:0b:20:46:69:
22:73:84:63:eb:2e:d6:2b:85:4f:75:bf:14:f6:06:21:03:1f:
22:ff:3e:0d:ba:2a:7c:1f:1d:8e:ac:ce:1d:5b:7c:a4:4c:4a:
eb:d6:fe:3b:03:5e:14:3b:bd:46:5c:2e:19:7f:aa:21:c9:a4:
be:44:58:a7:c6:e0:27:2f:8e:a2:e3:f2:9b:ab:92:c4:47:82:
95:e3:5a:c3:bb:9f:04:81:57:a2:18:b5:a0:d2:b4:51:93:74:
c3:a6:55:9f:6c:0f:9f:33:1b:ae:8e:46:86:03:44:0e:72:fd:
95:4d:0a:23:b0:e8:95:8a:37:5b:e3:c2:1c:bf:a3:47:39:69:
2b:23:8d:9e:49:b6:19:f3:4c:ac:49:31:66:41:02:0f:fa:e0:
9f:d3:3f:27:75:72:48:2b:86:5c:e2:7a:4b:31:d0:be:83:7c:
e0:8c:39:6f:f9:34:2f:99:f8:56:63:91:3e:61:4c:4b:99:d1:
d0:a9:fc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:53:07 2025 by rpki-client