Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
File: jAmWt03P0bu4ZvLrrU4W_cyStjs.mft (raw, json)
Hash identifier: qOUSPbgweaKbaurIonjD89kyCRaZlkGDLJDmuNzLnU8=
Subject key identifier: FE:4B:39:4D:19:67:95:EE:08:B1:07:D3:07:A7:22:F8:A3:A6:6F:1F
Authority key identifier: 8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
Certificate issuer: /CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Certificate serial: 01967A8D6FB3AF5D0EB625F2FFCD99D6A270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
Manifest number: 05F9
Signing time: Mon 28 Apr 2025 04:00:11 +0000
Manifest this update: Mon 28 Apr 2025 04:00:11 +0000
Manifest next update: Tue 29 Apr 2025 04:00:11 +0000
Files and hashes: 1: jAmWt03P0bu4ZvLrrU4W_cyStjs.crl (hash: YFgQAl68bTSfMVq456TBVOTrXyVMDLXx9WLRxfiAV0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:6f:b3:af:5d:0e:b6:25:f2:ff:cd:99:d6:a2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Validity
Not Before: Apr 28 04:00:11 2025 GMT
Not After : Apr 29 04:00:11 2025 GMT
Subject: CN=fe4b394d196795ee08b107d307a722f8a3a66f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cb:c3:b3:67:80:b5:07:a1:e3:6d:02:b3:20:
3b:0e:db:5b:86:fe:f8:fc:ce:e8:4e:66:43:b3:ac:
3b:ca:33:b3:7e:2f:19:fe:e9:f0:bc:ac:c6:6d:ea:
27:1b:f3:4f:97:ba:78:57:2a:72:1a:15:d9:96:f6:
15:ff:b9:58:e0:a6:b9:64:39:0e:c1:30:f7:39:cb:
ec:e4:84:94:7a:f1:fb:12:b8:cb:2f:6d:e6:c2:8c:
d2:bb:05:0f:0b:00:7d:2f:5e:c5:af:fc:66:1f:85:
c7:05:a9:23:fd:f8:4d:29:9c:bb:28:c2:7e:8b:51:
54:ea:86:5e:dd:79:2a:4c:06:d1:05:ee:e4:4a:83:
92:f9:48:77:cf:20:ec:89:2b:22:6c:87:bd:fe:df:
01:e9:d9:b2:f9:bd:c2:ed:af:ad:c0:50:68:17:18:
6b:e9:0e:86:96:7f:c5:54:51:d8:3d:be:68:1f:ef:
71:ff:0f:fb:91:3f:50:44:ba:2f:e2:e2:9b:3b:6f:
f2:0d:6c:24:34:5d:69:61:0a:d6:78:35:98:0c:a7:
71:08:46:1c:9d:de:d8:79:d3:25:18:82:79:b3:2f:
75:19:3f:24:e4:36:8f:57:a3:46:ac:dd:74:15:50:
b9:49:5a:11:ff:0a:f3:cd:63:97:49:57:27:e9:86:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4B:39:4D:19:67:95:EE:08:B1:07:D3:07:A7:22:F8:A3:A6:6F:1F
X509v3 Authority Key Identifier:
keyid:8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bb:7e:09:e5:43:55:4d:f0:ed:ad:c6:2b:73:5d:ce:d7:f9:
0b:03:73:5a:13:ff:58:f8:84:d3:de:ab:74:80:01:a0:cb:13:
f7:fd:d9:6f:73:2f:5b:44:2a:9f:30:08:16:2a:7e:b6:ee:59:
f1:55:bf:67:c5:f4:d2:7a:39:32:3b:5c:6f:94:d4:7c:96:28:
78:f4:7a:66:1c:33:bb:7e:4e:34:7d:9b:5e:13:74:ba:68:ff:
d7:32:5e:5e:98:e8:0f:b5:69:a0:b7:94:c0:39:72:23:b3:3b:
f5:0b:fd:6c:e8:2f:2d:e9:e7:39:1a:52:e1:7f:1c:72:4e:33:
05:49:a3:13:53:4c:ae:ee:a7:57:5d:15:ac:7d:86:b2:81:53:
2a:27:06:e1:fa:d5:d3:ea:36:8a:87:32:8f:83:90:8c:46:a4:
30:44:b3:f8:20:91:de:35:77:ed:82:da:29:e8:0a:6a:68:14:
91:99:34:23:74:2e:be:de:35:e8:31:b6:02:ef:eb:e9:1b:1a:
01:d6:b1:d5:b6:fc:ef:9f:9d:56:82:62:eb:83:21:f2:c7:55:
2e:57:c0:30:20:04:98:d0:62:fb:c2:4c:b1:03:c7:e1:48:9a:
9c:2f:f1:d0:a8:e3:94:d2:54:bc:86:47:c7:17:fe:a0:65:53:
db:b3:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:23:50 2025 by rpki-client