Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier: heoR7T7se/mpPgd0CkG1mKWJn+96GzCup6OVWBbLSgs=
Subject key identifier: 32:0B:1A:56:D6:34:7B:0E:D8:EC:73:62:8F:11:3C:BF:BB:11:E5:33
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 0196C081B6BB336ACD692A0D27C80A06CEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number: 1283
Signing time: Sun 11 May 2025 18:00:48 +0000
Manifest this update: Sun 11 May 2025 18:00:48 +0000
Manifest next update: Mon 12 May 2025 18:00:48 +0000
Files and hashes: 1: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: 5Z5iWJtEZejV14GzaQbOWZOpLtI0A+TCVTC1MwFq32Y=)
2: vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa (hash: jDBhmRUhtmMAlFzmv4saGBsUFOT3KgtgZMefYA3RiUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:b6:bb:33:6a:cd:69:2a:0d:27:c8:0a:06:ce:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: May 11 18:00:48 2025 GMT
Not After : May 12 18:00:48 2025 GMT
Subject: CN=320b1a56d6347b0ed8ec73628f113cbfbb11e533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:7c:78:1d:28:7c:27:a0:de:0c:a6:15:8b:
56:b8:82:c2:c8:4b:e0:50:3b:4e:10:e4:3d:ef:19:
d0:ac:60:eb:98:8a:b1:3b:18:c9:0e:3c:40:cc:6b:
43:18:96:96:4d:aa:bd:d1:e8:9f:b6:c0:ec:8e:8d:
b0:71:47:a4:60:0a:78:09:c1:e4:f8:33:66:aa:37:
03:71:72:40:b3:24:51:35:0b:8b:75:43:3f:d1:b7:
7e:ba:c4:a1:5e:fe:1c:44:b6:99:01:85:c3:fb:94:
67:a4:dd:d7:f3:bb:72:cd:0f:a3:a8:c1:c4:e7:ce:
6e:27:f2:c8:73:d0:7f:cd:03:9d:73:64:e1:5f:19:
6d:2a:8b:da:a3:e7:2d:d1:91:d8:ad:df:35:0d:bd:
14:59:54:a8:a6:79:1d:18:b0:27:1c:cb:ee:6e:e9:
58:db:a5:89:92:c0:8c:eb:49:65:d8:e2:98:3d:fd:
85:38:32:92:09:93:9b:ca:d8:ee:a9:b8:f2:2f:49:
58:2e:3b:cd:c1:28:ff:9d:23:af:62:ff:2f:5e:a0:
a8:42:6c:7b:61:98:40:82:32:11:64:4b:78:97:b0:
92:c2:3b:59:5f:d4:fb:ae:70:e5:67:82:8b:16:0f:
41:1a:7f:9c:c7:fc:97:7b:11:4b:43:9d:48:e4:9e:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:1A:56:D6:34:7B:0E:D8:EC:73:62:8F:11:3C:BF:BB:11:E5:33
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:42:b9:f3:47:b7:50:63:05:a4:68:e7:62:78:53:6f:8c:d1:
98:9e:11:85:20:e7:d5:f0:c8:dd:4d:b0:d3:1a:87:36:3f:bb:
5b:93:95:bc:d0:7c:b5:a8:a1:8a:28:05:dc:5e:08:0f:c9:b6:
06:0c:4d:87:a1:d0:b1:3b:0a:d2:66:e7:54:b1:1a:0d:5f:48:
60:58:5a:a1:d7:b5:c6:e2:1a:24:9c:13:6c:97:c7:3e:76:59:
48:85:d9:74:ea:51:96:5d:27:e1:12:fa:d8:90:c9:84:e7:03:
75:1f:39:30:02:b2:50:46:aa:af:4e:97:19:ab:d7:a1:64:65:
85:3b:ee:e5:86:cf:51:54:a8:48:2d:cb:a7:4a:d1:25:26:c5:
48:98:81:b1:90:a0:1c:ae:85:16:7c:25:24:6d:ab:36:ef:23:
ee:87:ee:a6:e0:b6:9b:ab:20:b0:4e:82:99:f7:79:9c:34:b5:
03:a5:ef:43:80:44:f8:d6:1e:50:5a:9b:23:91:90:97:93:fe:
80:ee:9e:9a:70:67:b3:03:bf:c7:7b:07:44:ea:a7:1f:66:53:
66:d5:82:20:ee:65:66:30:80:d1:08:16:25:b8:b0:6e:f6:7e:
f7:1d:ba:81:21:f2:af:ee:8b:b7:40:94:d4:07:f9:43:50:df:
c4:89:03:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:09:21 2025 by rpki-client