Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
File: jHVawZtqHD41NGRn_nDrVR_S7n0.mft (raw, json)
Hash identifier: WbdDUQmR7QjlLoDlQfPRadFIZZRwtPlejqXg/9lFHnQ=
Subject key identifier: AB:A3:E5:FD:40:B3:A3:CF:95:26:ED:9F:EB:C9:0C:33:1F:40:2B:34
Authority key identifier: 8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
Certificate issuer: /CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Certificate serial: 0196745474944B541BD03D27D7BA3C7C3755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
Manifest number: 0DAF
Signing time: Sat 26 Apr 2025 23:00:13 +0000
Manifest this update: Sat 26 Apr 2025 23:00:13 +0000
Manifest next update: Sun 27 Apr 2025 23:00:13 +0000
Files and hashes: 1: jHVawZtqHD41NGRn_nDrVR_S7n0.crl (hash: hcDc7Da54jY9ErvC1mge0wNhRu9JfZ/GP1UzOv/cuik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:74:94:4b:54:1b:d0:3d:27:d7:ba:3c:7c:37:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Validity
Not Before: Apr 26 23:00:13 2025 GMT
Not After : Apr 27 23:00:13 2025 GMT
Subject: CN=aba3e5fd40b3a3cf9526ed9febc90c331f402b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fd:8e:a1:b5:2b:6d:60:7d:10:cd:1c:3e:36:
2b:1e:09:4b:25:97:01:63:50:3d:33:97:be:65:5b:
49:91:c0:99:0d:41:67:fd:e2:84:37:89:38:32:21:
74:34:55:6a:44:ae:9b:b1:95:64:1a:fe:5b:17:ba:
e5:3a:ce:02:8e:79:ff:8a:4e:eb:8b:bb:41:7b:c3:
37:77:c3:87:4a:ab:ab:b8:46:bc:ca:41:1f:91:59:
cd:66:da:ae:98:2c:7f:3f:e5:1c:7e:ca:b1:dd:26:
85:89:dd:85:c4:c0:e4:22:22:e6:95:ff:d8:3c:d0:
f8:b3:bc:7a:ec:8b:80:cf:96:b0:bd:fa:b4:5a:ee:
ca:73:e9:ed:1f:cc:95:0e:17:62:de:03:cd:30:94:
1c:2e:05:14:08:45:8b:b1:7d:a1:49:27:b3:90:11:
8f:63:cb:00:58:7b:f7:c1:74:30:b2:70:ef:de:0b:
32:2b:d3:65:1d:34:ab:45:f6:6a:79:74:89:fa:6f:
75:73:5a:4b:52:d6:fd:1f:1b:f9:51:be:a8:c1:83:
ef:dc:38:eb:c7:92:cb:28:5b:95:d6:1c:e6:9d:25:
bb:a9:97:b5:2f:4d:0c:31:53:bf:51:87:65:2a:b4:
ed:f8:db:c5:38:bc:05:e7:47:62:0c:a0:0e:45:41:
9d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A3:E5:FD:40:B3:A3:CF:95:26:ED:9F:EB:C9:0C:33:1F:40:2B:34
X509v3 Authority Key Identifier:
keyid:8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:64:7d:af:2c:15:2a:c6:48:33:40:ff:33:6d:9b:2a:fc:8b:
27:35:23:0f:e5:21:a7:36:46:cd:15:5a:ea:b5:e3:d5:2c:2c:
2a:cd:3c:55:d7:38:af:86:08:1c:8a:24:57:f7:12:36:77:1f:
5a:f0:16:ed:76:49:e7:c0:5b:52:9c:02:3b:2a:52:f6:f6:ed:
17:54:cf:84:39:86:14:a1:31:e9:c9:2d:21:f8:3c:40:50:86:
f8:f9:3c:c4:9e:67:ca:7b:fd:58:56:40:b0:e4:81:61:1c:c8:
ed:5d:0d:1c:ef:ca:bd:bf:b7:da:f1:bf:e1:ac:cd:dc:c4:6c:
6d:ae:be:66:45:9d:5c:b2:49:3d:8b:4b:9b:92:a7:b3:6b:33:
7d:d7:84:ae:2e:d6:18:fd:f9:2a:ae:54:f0:3f:18:b3:09:8b:
74:20:79:3d:8c:e8:58:34:ab:66:72:9a:bb:99:70:be:09:ba:
ac:c0:8d:00:46:52:66:44:43:15:61:a2:b3:d5:38:6a:b2:94:
63:12:3a:89:d1:a0:98:5b:32:88:07:27:5a:21:9d:95:1a:51:
b6:64:76:f6:55:46:88:82:fd:e2:1c:51:e9:73:25:00:dd:d8:
ec:69:9d:84:87:d4:96:c5:f6:d9:dc:67:fd:c5:d8:4b:94:61:
38:e4:9b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:42:48 2025 by rpki-client