Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
File: jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft (raw, json)
Hash identifier: aoM/H+vHJjBggcVr6M4xSa3XmlZ2+NWLm3gUhDkNR9g=
Subject key identifier: A3:5D:4B:49:BA:2D:DE:A9:5B:A4:DE:AC:07:87:00:FA:E7:A5:43:80
Authority key identifier: 8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
Certificate issuer: /CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Certificate serial: 0196858027C3D768A7538BACABD092BFDEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
Manifest number: 0CF4
Signing time: Wed 30 Apr 2025 07:01:30 +0000
Manifest this update: Wed 30 Apr 2025 07:01:30 +0000
Manifest next update: Thu 01 May 2025 07:01:30 +0000
Files and hashes: 1: jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl (hash: 2lE1n7lSt75T3FDS+MwPJrjmzvHe+h5PObogJmNoDfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:80:27:c3:d7:68:a7:53:8b:ac:ab:d0:92:bf:de:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Validity
Not Before: Apr 30 07:01:30 2025 GMT
Not After : May 1 07:01:30 2025 GMT
Subject: CN=a35d4b49ba2ddea95ba4deac078700fae7a54380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:91:18:ac:0c:84:70:63:94:bd:f1:a5:23:
23:a7:9c:0f:5f:8b:ae:4f:7c:6a:65:1c:69:60:b2:
6c:60:77:0d:b3:c9:1f:1a:e5:be:6d:b8:28:f7:1d:
8c:a1:a7:d9:af:9b:6f:3f:cc:5a:c8:16:e9:23:05:
d1:0f:f0:45:68:8a:4b:b2:96:35:e7:ae:32:34:10:
89:18:9c:9c:8b:dc:67:2a:e8:ed:ef:58:24:35:85:
4a:46:35:b5:30:81:a2:c1:dd:2a:98:23:37:71:c5:
22:2e:55:b6:6e:a2:bc:ec:0e:13:22:9b:56:a6:11:
a4:7b:52:ca:8f:6a:1b:2e:b2:1e:4e:a1:b4:4c:e9:
2c:90:fd:63:e1:31:a4:29:5e:fd:4d:82:90:7f:48:
e7:2a:cf:82:cb:71:d9:20:27:be:2c:03:88:fc:e4:
30:9f:cf:76:ff:cf:ae:b6:68:2f:47:8c:2b:92:79:
90:bb:cf:17:cf:68:79:09:32:4a:ae:b8:3d:91:b0:
8b:c2:5c:01:c3:65:90:52:9c:67:b2:f6:6a:12:4e:
03:ba:4e:90:df:85:25:6e:2b:d4:70:bc:39:4b:1e:
c3:6e:d0:7d:1c:8e:d3:8e:a7:bf:6b:b5:18:97:29:
87:47:93:54:81:97:00:1b:3a:df:96:27:ac:3e:b4:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5D:4B:49:BA:2D:DE:A9:5B:A4:DE:AC:07:87:00:FA:E7:A5:43:80
X509v3 Authority Key Identifier:
keyid:8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:81:cd:ad:62:2a:8c:3f:c9:f7:49:71:d4:4b:f9:f4:05:2b:
fe:c6:24:1e:e8:44:2f:94:ca:5f:21:4b:6e:c7:b9:21:1b:f6:
3d:85:67:b6:0c:09:e3:f1:21:dc:e1:6f:52:9e:11:c4:09:b3:
ad:f8:59:05:c1:0c:fe:d0:88:8d:89:a3:5f:f2:74:c0:6c:26:
73:e2:5e:bf:1f:b4:fb:d0:dc:14:33:d9:dc:31:75:76:28:ee:
90:58:1a:60:53:78:c9:d5:67:59:78:2d:bf:70:eb:46:07:58:
f2:c4:47:ec:d9:cd:21:e4:54:28:8c:e0:a5:06:81:81:13:58:
dd:1c:c7:ca:22:a2:2b:0c:c1:a7:b5:e0:4e:44:0d:30:1f:af:
56:0d:8e:c5:2e:69:f9:f7:5b:36:d4:cd:1a:cc:eb:67:c8:5f:
54:78:69:2e:7f:05:4f:19:3a:a0:18:83:a0:bc:87:10:6e:bb:
69:72:f2:b6:08:d0:be:a8:84:71:5f:77:0a:dd:6f:d8:4e:c3:
b3:4f:e0:ed:bf:24:50:ad:6c:e1:6e:45:8d:95:93:b4:5b:20:
3b:de:58:a2:74:37:f0:f5:7e:ef:f1:31:9e:4f:d1:d4:d7:40:
c5:ae:f1:46:6e:d8:7e:e4:45:79:38:9a:5d:b8:60:3d:1c:54:
6a:17:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:22:28 2025 by rpki-client