Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
File: RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft (raw, json)
Hash identifier: ZJbU2YCcc6rdjoQKaPnqgKCrMImvdssj3vML1TRXKT8=
Subject key identifier: D0:A9:A1:19:15:66:A4:5A:C4:A0:5F:71:3A:F4:52:E3:AB:F8:68:4E
Authority key identifier: 46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
Certificate issuer: /CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Certificate serial: 0196857FF8ADA80C1CC784F6197B757324A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
Manifest number: 1512
Signing time: Wed 30 Apr 2025 07:01:18 +0000
Manifest this update: Wed 30 Apr 2025 07:01:18 +0000
Manifest next update: Thu 01 May 2025 07:01:18 +0000
Files and hashes: 1: RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl (hash: mHdm0nLQ/Oi7ptjFz++3mF7R2uKJluO6rm7dBw0aQ90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:f8:ad:a8:0c:1c:c7:84:f6:19:7b:75:73:24:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Validity
Not Before: Apr 30 07:01:18 2025 GMT
Not After : May 1 07:01:18 2025 GMT
Subject: CN=d0a9a1191566a45ac4a05f713af452e3abf8684e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:9a:dd:5f:fd:4b:36:55:cf:28:4a:87:91:
6a:da:ad:f4:90:af:8c:f1:67:9d:f5:f8:3e:62:a6:
23:3a:df:1f:70:0d:27:0f:3d:9a:3f:6f:07:22:f7:
42:d9:c5:3e:47:2f:64:98:b1:ff:df:fb:1f:a3:de:
08:33:d7:f7:66:9c:ef:c5:96:80:95:29:0e:c8:f2:
e0:53:35:6d:df:57:53:11:b6:59:ba:0e:0f:ea:ed:
5f:e1:46:96:42:07:37:62:09:48:cd:e5:1d:8d:44:
8f:50:47:b9:aa:f9:be:56:42:65:ef:d6:88:43:6f:
fc:93:91:97:66:af:da:ed:3b:cf:96:0e:53:d2:0d:
59:36:9a:cb:05:cd:1c:e1:56:c8:10:17:03:0d:55:
96:75:15:a7:a6:93:f7:15:16:6d:74:59:31:d0:0b:
0e:6a:d1:ce:11:d0:54:6c:0d:d9:3e:38:e2:2b:68:
43:9b:f1:0e:fc:a5:a7:5e:23:4d:cd:01:42:0c:18:
65:fe:ca:5a:f8:f5:6a:2b:58:bd:00:85:bb:21:31:
32:50:dd:08:69:93:da:f7:8f:ac:f6:e5:fb:55:87:
d4:81:8a:12:e7:a2:29:b3:e5:71:5d:65:50:df:c6:
51:40:7e:68:60:ad:6d:ed:03:a4:0b:4f:37:44:4b:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A9:A1:19:15:66:A4:5A:C4:A0:5F:71:3A:F4:52:E3:AB:F8:68:4E
X509v3 Authority Key Identifier:
keyid:46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8e:25:24:55:16:2c:ad:59:ad:51:32:bd:96:d6:a2:c7:d7:
54:b2:4d:bb:84:61:0e:6a:60:ff:e6:63:19:69:f3:b2:61:5e:
87:7a:6d:f2:40:60:aa:f6:5f:1f:d2:55:bd:4e:0f:dc:50:37:
11:9a:5d:aa:47:40:54:bb:a5:41:c4:0a:9d:d5:9b:a3:19:2f:
d4:c6:dc:8e:17:8b:47:56:f9:ed:c7:6e:01:e1:18:27:95:ad:
00:cf:cc:73:8b:a6:03:f1:d2:b1:e9:13:0f:ef:9e:82:89:3b:
ba:9a:6d:75:98:35:2c:b1:85:85:4b:6e:55:e3:9c:63:6c:03:
c4:56:47:a9:20:72:5b:39:5f:58:8d:9c:e1:27:ab:f7:3d:c8:
fc:5c:15:8c:e7:7b:10:2f:8f:6e:5e:a2:04:5e:45:8e:5f:08:
ff:8e:8f:e1:28:40:6c:ca:4b:ad:5b:13:5c:2b:e2:eb:05:29:
be:5f:b4:3a:cc:a4:7d:70:72:05:ee:55:aa:df:29:d7:c9:03:
bf:c6:69:eb:38:86:28:e6:96:42:6c:33:bc:7d:60:fd:fb:b6:
1f:b9:10:26:a6:fd:98:6e:10:56:6b:ec:2d:a4:92:bc:bd:78:
34:ae:73:6b:60:11:2a:86:0b:7c:e2:82:78:b0:48:8e:0d:06:
2a:ba:54:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:56:07 2025 by rpki-client