Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
File: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json)
Hash identifier: D6n2IdZd62vTLwugiG6xBoUXTuUngOxdiMnlQVxpn80=
Subject key identifier: 11:09:D9:67:2C:60:83:0E:4B:5F:5E:71:21:D7:F7:60:4C:ED:DA:E8
Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
Certificate issuer: /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Certificate serial: 019677561932E18D8E7A638A5E1146306DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
Manifest number: 0E41
Signing time: Sun 27 Apr 2025 13:00:53 +0000
Manifest this update: Sun 27 Apr 2025 13:00:53 +0000
Manifest next update: Mon 28 Apr 2025 13:00:53 +0000
Files and hashes: 1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: vRAEQV6zYPHKND8DbTvyPVKdvXFaJmf9kiIF+b0iQ3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:19:32:e1:8d:8e:7a:63:8a:5e:11:46:30:6d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Validity
Not Before: Apr 27 13:00:53 2025 GMT
Not After : Apr 28 13:00:53 2025 GMT
Subject: CN=1109d9672c60830e4b5f5e7121d7f7604ceddae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:9f:c0:7d:2c:be:85:3a:7f:05:44:e2:2a:
bc:c6:90:d9:7f:8b:70:89:79:2c:8f:64:83:10:95:
93:d4:76:43:dd:82:de:ab:b7:f9:e2:40:56:87:ec:
34:e3:45:a8:b5:54:78:66:43:fa:90:88:06:a1:4d:
d4:03:f5:d1:ca:65:0a:03:7c:15:3e:ca:f5:9f:88:
a6:36:5e:44:9a:c0:2e:b2:73:03:4b:22:ad:ea:66:
71:81:63:28:f0:ed:7d:43:b0:7e:49:ed:18:01:14:
7c:27:28:9e:05:c4:80:a3:46:1d:ca:cf:4b:93:f7:
26:ef:43:5a:cc:91:37:3f:93:b3:cf:52:af:f3:22:
ea:89:2b:88:17:21:c1:1d:c8:b0:02:71:a4:dc:df:
9c:fc:9b:e8:8e:3b:5d:46:95:e9:11:02:a9:c1:6c:
07:d0:61:5a:1d:26:5e:54:86:32:54:da:79:fd:0d:
a7:72:0b:ad:6c:c2:05:98:28:08:49:bc:15:24:03:
70:78:34:45:c8:ec:d4:b4:68:42:42:0d:50:92:da:
0a:9f:e5:d8:f9:85:87:d2:33:82:b4:1d:2e:e7:92:
c8:56:3b:aa:54:37:44:cd:cd:04:3d:ae:65:89:e2:
b3:21:eb:0c:2c:4e:19:24:ed:76:89:bb:bf:13:12:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:09:D9:67:2C:60:83:0E:4B:5F:5E:71:21:D7:F7:60:4C:ED:DA:E8
X509v3 Authority Key Identifier:
keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d0:53:eb:ea:03:be:6f:5b:32:41:09:c7:9e:03:0b:41:cb:
82:3d:cc:54:51:77:a7:90:6a:bf:02:2c:39:56:85:b4:ac:1e:
ff:3c:6f:e7:a1:af:79:64:d6:39:e9:46:00:3c:51:d8:97:a9:
dd:a7:12:c0:93:78:43:e6:f1:0f:b6:01:7c:6d:bf:99:c5:e7:
ab:f7:e0:30:53:1d:4e:8f:1b:40:0b:9d:ff:d5:e9:2a:ab:c5:
72:cc:59:ad:d4:4a:98:9d:66:47:60:1e:7a:21:21:00:8b:15:
c9:92:d3:ce:54:ba:36:c2:63:3c:cb:9c:94:0d:d1:96:7b:4f:
1e:ee:7a:be:f2:b3:2d:35:40:8b:43:6d:50:e3:5b:fd:a4:1a:
92:d3:53:c9:01:d4:1c:b1:2d:f7:be:49:d4:62:cf:d3:07:49:
ab:9d:3e:96:aa:38:07:d6:f5:3b:61:fd:fc:f6:35:74:22:93:
8b:09:1f:da:52:97:ce:2c:a9:14:d0:10:4c:a1:e7:25:1c:4a:
04:a6:2f:2b:cb:dd:94:5d:6e:54:8b:ae:4d:e2:f6:0b:1c:19:
ff:3b:5a:e3:64:c4:c2:ae:4f:5e:6b:10:11:7c:b8:3f:75:5a:
a2:80:33:83:fb:41:cf:a8:43:ac:2f:aa:88:fb:84:cf:5e:b6:
0b:2f:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:51:57 2025 by rpki-client