Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier: 8wH9FDJIOufIqFIFV0AVAZaZGjkJGAB5z9tqQNRsYRg=
Subject key identifier: 4C:99:83:8A:3E:60:C3:F2:2E:07:64:80:6B:BE:59:B4:F4:78:C6:72
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial: 0196AFFBF41D16C9FA796746DB64AB575451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number: 043F
Signing time: Thu 08 May 2025 13:00:46 +0000
Manifest this update: Thu 08 May 2025 13:00:46 +0000
Manifest next update: Fri 09 May 2025 13:00:46 +0000
Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: 3kiC37na+27Itk3+LaFAA1E+B54KgiX/byT89bxPTsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fb:f4:1d:16:c9:fa:79:67:46:db:64:ab:57:54:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Validity
Not Before: May 8 13:00:46 2025 GMT
Not After : May 9 13:00:46 2025 GMT
Subject: CN=4c99838a3e60c3f22e0764806bbe59b4f478c672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:72:2c:42:07:c2:61:71:57:7b:7d:a1:5c:
61:9b:da:e4:60:a3:6a:97:fb:a6:70:d0:3e:43:07:
5e:5e:fc:63:19:3d:ef:b2:bb:4f:fa:a3:22:69:6b:
6e:52:22:89:8c:3f:68:39:43:a8:07:22:0b:be:60:
d7:d3:1a:88:50:5a:dc:fc:cf:4d:b1:6b:55:72:b5:
e9:1e:99:b2:74:e5:a3:d4:0e:fc:9c:d4:4e:29:e1:
15:0d:e1:29:ea:02:60:2b:ef:a3:bf:b7:bd:d5:b6:
01:64:b6:6f:f8:6a:d7:dc:12:73:bd:ce:76:a4:e2:
2e:7b:e8:f3:3b:86:21:a5:ce:a0:d6:ee:d5:df:cf:
ab:c8:cb:2e:ce:5e:c5:7d:2b:13:c1:47:55:f1:8e:
b8:7c:ef:2c:2c:a3:bd:57:89:00:d0:0a:17:8a:d0:
cf:a8:3d:5e:8e:35:b6:dd:32:5a:f5:a0:8d:1e:27:
64:d6:01:f1:2f:ee:1e:51:62:7c:be:ae:d2:a6:22:
5f:b0:6f:1d:7a:66:9a:ca:97:8c:17:9e:7b:2b:fe:
b9:63:51:91:ec:4b:a7:b1:d3:d4:9f:f5:35:20:68:
d2:80:9a:13:0e:b9:4b:49:ad:97:4e:f1:46:21:8d:
4c:39:2d:ad:30:e7:0d:84:a6:ca:e8:2b:c4:09:d2:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:99:83:8A:3E:60:C3:F2:2E:07:64:80:6B:BE:59:B4:F4:78:C6:72
X509v3 Authority Key Identifier:
keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c0:5e:ad:ed:dd:83:38:89:89:78:d4:2c:7e:7c:fc:83:84:
70:0e:f9:b9:4e:a3:2a:80:e7:9c:20:7a:76:10:ab:5a:29:e7:
f1:f8:29:f7:47:d7:b4:cf:c4:b1:2e:75:79:d8:eb:63:13:e2:
cf:a4:b8:ea:06:8e:08:fa:7b:5d:6d:0e:07:84:d6:fc:c6:22:
cd:c3:3e:35:7e:30:42:45:7a:c6:2d:8a:38:6a:c1:76:5a:2d:
ec:50:73:50:d5:6e:08:08:c5:c0:87:a4:2b:45:70:a2:3d:98:
3b:7e:85:dc:49:74:89:e2:16:5d:86:bc:fc:d0:ed:12:05:51:
7f:97:be:18:d5:a7:6f:80:73:81:73:c6:aa:48:ff:22:8a:fe:
68:da:16:56:e8:55:e0:47:d4:8f:b8:1e:1f:5e:46:5a:47:15:
3a:0f:35:cc:b9:c3:fe:f2:2d:e7:ee:d7:9b:4b:79:12:b4:67:
3d:83:07:4d:98:4a:c4:18:f4:bb:5a:c9:33:70:46:80:4c:28:
1e:66:73:88:45:5e:95:5d:78:cf:65:92:bb:e2:fc:47:18:c0:
da:5c:a8:29:bd:5c:45:66:e3:e6:00:51:b6:26:f7:e4:d8:8f:
5e:a2:31:ef:b4:e1:8d:fb:45:c5:2a:d1:cb:d7:d8:27:9e:d8:
c8:23:87:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:53:57 2025 by rpki-client