Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: zfYetHiPrOhHVFqBbk/8hMX7duO7vbrCucwocmB3Dx4=
Subject key identifier: 7E:5B:C1:6D:2D:26:7D:79:72:CD:56:31:08:8B:B4:54:81:EF:01:F3
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 019678D609F81484C5174598B19C852DADF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0723
Signing time: Sun 27 Apr 2025 20:00:15 +0000
Manifest this update: Sun 27 Apr 2025 20:00:15 +0000
Manifest next update: Mon 28 Apr 2025 20:00:15 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: ONKK0UFXrGUDwxhodcwiWIGeAIcE9z1elIWUrdFr5RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:09:f8:14:84:c5:17:45:98:b1:9c:85:2d:ad:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Apr 27 20:00:15 2025 GMT
Not After : Apr 28 20:00:15 2025 GMT
Subject: CN=7e5bc16d2d267d7972cd5631088bb45481ef01f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:27:7f:9b:2b:38:c0:3c:f8:a3:17:b8:ac:da:
eb:a2:e0:ae:4e:1a:98:a9:f5:b2:03:e4:40:0e:70:
29:30:d4:23:f8:bc:79:fa:1b:0c:9f:b8:fc:19:85:
a5:47:63:61:c6:f2:7b:48:a2:07:18:69:00:3a:7c:
4f:53:6a:5c:94:1b:2c:fa:9a:c6:9e:9a:f8:c7:f5:
27:1f:70:45:7d:20:65:a3:a0:e8:ce:6f:df:8b:61:
23:5e:1d:d0:b4:29:d3:df:b7:e8:0d:90:14:94:4c:
c6:10:72:46:1a:ef:fe:6f:22:7f:0b:f8:45:2d:3a:
c2:f8:5f:c5:2f:a0:75:d8:d1:94:44:b1:37:5b:c3:
24:8d:7e:00:a8:1c:29:71:8c:74:2b:ca:1d:d0:4a:
78:cb:36:e7:97:98:45:78:fd:0d:42:63:e1:5b:bf:
a5:e0:3b:c1:a3:ce:61:73:0d:05:4d:b0:ba:99:9e:
05:10:28:93:10:0f:e8:f2:35:3e:e6:e1:77:95:fe:
d5:58:27:75:97:af:f6:a6:94:7b:3e:c1:62:10:f3:
cf:37:bc:b7:7b:f9:4e:e4:7b:bb:d0:95:7c:2b:49:
ce:db:28:47:c6:14:7b:94:47:62:26:46:73:d0:61:
1e:02:cc:ee:7d:33:4e:2d:ed:af:2d:51:93:bc:74:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5B:C1:6D:2D:26:7D:79:72:CD:56:31:08:8B:B4:54:81:EF:01:F3
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:16:48:0a:18:21:ce:8f:2e:c6:78:81:91:2d:66:17:14:79:
39:a3:cb:65:da:8b:7a:34:42:d8:19:09:0e:34:bd:58:c8:6f:
93:e9:ae:6d:d5:68:3b:a3:eb:9f:c4:ab:59:b9:5f:bf:32:85:
d0:44:94:fd:d7:09:5e:19:53:83:66:37:a2:e4:93:2f:c6:7b:
7b:c8:0c:33:56:10:c3:b7:5b:60:24:8b:cd:cb:b4:2a:2c:b7:
b3:9a:2c:30:e4:d6:e8:14:bc:61:3b:c0:82:90:56:e4:ff:ac:
5f:08:c7:ba:29:04:3c:d6:eb:55:ac:35:a8:7e:ad:8e:33:67:
7d:ec:29:25:59:5b:0a:f8:ea:42:a5:da:44:b1:d0:6e:a1:0a:
f2:de:11:9b:ca:0f:3b:76:60:89:55:b3:9d:be:08:98:ab:b0:
0a:d0:68:89:95:d5:de:86:ea:05:04:7b:cb:8f:e0:34:4b:4c:
e6:c3:3f:5b:61:36:88:be:7d:a3:fc:01:54:69:66:5a:12:18:
39:2c:8e:6d:c8:9c:ab:c5:ec:7c:e7:c6:90:00:b5:f0:0d:57:
72:8d:a9:83:42:9b:cd:a6:49:27:7f:ac:45:68:d9:4c:17:34:
0e:fd:af:ca:1d:7e:82:81:1e:f0:33:d5:f7:46:5c:1e:e2:ad:
94:3e:0b:28
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ41gn4FITFF0WYsZyFLa31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OTZjMzQ4OWZlZWJiYzA5NDI1NWQyN2VkY2Q4NjU1MTIx
MDI3YmMwHhcNMjUwNDI3MjAwMDE1WhcNMjUwNDI4MjAwMDE1WjAzMTEwLwYDVQQD
Eyg3ZTViYzE2ZDJkMjY3ZDc5NzJjZDU2MzEwODhiYjQ1NDgxZWYwMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yd/mys4wDz4oxe4rNrrouCuThqY
qfWyA+RADnApMNQj+Lx5+hsMn7j8GYWlR2NhxvJ7SKIHGGkAOnxPU2pclBss+prG
npr4x/UnH3BFfSBlo6Dozm/fi2EjXh3QtCnT37foDZAUlEzGEHJGGu/+byJ/C/hF
LTrC+F/FL6B12NGURLE3W8MkjX4AqBwpcYx0K8od0Ep4yzbnl5hFeP0NQmPhW7+l
4DvBo85hcw0FTbC6mZ4FECiTEA/o8jU+5uF3lf7VWCd1l6/2ppR7PsFiEPPPN7y3
e/lO5Hu70JV8K0nO2yhHxhR7lEdiJkZz0GEeAszufTNOLe2vLVGTvHTTtwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFH5bwW0tJn15cs1WMQiLtFSB7wHzMB8GA1UdIwQY
MBaAFPiWw0if7rvAlCVdJ+3NhlUSECe8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KYkRTSl91dThDVUpWMG43YzJHVlJJUUo3dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNDhmZDFlLTBhYWItNDM3MS04OWM0
LWI1MWNjNGYwNWFhYS8xLzEtSmJEU0pfdXU4Q1VKVjBuN2MyR1ZSSVFKN3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2QyLzQ4ZmQxZS0wYWFiLTQzNzEtODljNC1iNTFjYzRmMDVh
YWEvMS8xLUpiRFNKX3V1OENVSlYwbjdjMkdWUklRSjd3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRZI
Chghzo8uxniBkS1mFxR5OaPLZdqLejRC2BkJDjS9WMhvk+mubdVoO6Prn8SrWblf
vzKF0ESU/dcJXhlTg2Y3ouSTL8Z7e8gMM1YQw7dbYCSLzcu0Kiy3s5osMOTW6BS8
YTvAgpBW5P+sXwjHuikEPNbrVaw1qH6tjjNnfewpJVlbCvjqQqXaRLHQbqEK8t4R
m8oPO3ZgiVWznb4ImKuwCtBoiZXV3obqBQR7y4/gNEtM5sM/W2E2iL59o/wBVGlm
WhIYOSyObcicq8XsfOfGkAC18A1Xco2pg0KbzaZJJ3+sRWjZTBc0Dv2vyh1+goEe
8DPV90ZcHuKtlD4LKA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:07 2025 by rpki-client