Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier: VwXsRoaUbjpOAcUEpZkgj6UoGF2pzhKB2Fyip+THMh8=
Subject key identifier: 71:A0:98:7A:89:E1:0F:C1:53:C0:A3:CE:7F:F9:2A:1A:37:D0:C7:74
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 0196A4657B4ECF9219941AE848E6250E7196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number: 1342
Signing time: Tue 06 May 2025 07:00:36 +0000
Manifest this update: Tue 06 May 2025 07:00:36 +0000
Manifest next update: Wed 07 May 2025 07:00:36 +0000
Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: 08PDMlYFqdWHadXFblIYktACWLSIqyOfQDwO1qs9/Io=)
2: ShfkVecVvyoW3_YQq7LwcMaYmQs.roa (hash: BoQNVikNhGTcu9edVXF4u7v7ipMyHbA4n2LulfglPKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:7b:4e:cf:92:19:94:1a:e8:48:e6:25:0e:71:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: May 6 07:00:36 2025 GMT
Not After : May 7 07:00:36 2025 GMT
Subject: CN=71a0987a89e10fc153c0a3ce7ff92a1a37d0c774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:e5:84:8d:55:e9:fc:5b:e3:34:71:d3:d7:
8b:63:1c:5f:a6:15:85:a2:e5:a6:45:3e:9a:f3:91:
cf:b1:43:1c:a4:5e:e7:80:d1:5d:fa:63:89:01:39:
1d:68:01:ef:58:0f:c8:77:c1:a6:d1:3c:68:3b:3f:
10:de:1e:a5:e4:8a:a7:0b:dd:ac:85:78:43:8b:11:
1b:cb:a0:63:cf:ac:20:df:62:4b:66:17:ba:99:92:
d5:0b:04:8e:ca:20:f5:b9:0b:10:d9:6d:50:75:3a:
95:fe:85:aa:7d:2c:79:96:f5:68:17:38:fd:18:29:
68:9b:a2:e2:5b:94:a7:a2:be:08:d5:50:8c:38:ea:
d0:89:b2:1c:72:45:21:91:d7:53:b2:b0:b9:cf:5e:
d2:c6:d6:c1:6c:f5:9e:b4:1c:b6:58:db:2e:8d:1c:
84:83:66:a5:cd:30:e3:ac:b6:19:66:97:92:b3:75:
a0:df:4d:a5:eb:da:b7:e8:cf:03:c3:95:35:48:07:
05:84:61:dc:5c:55:32:9a:33:55:81:bd:79:23:f7:
b1:6c:f7:e1:ea:04:d6:16:de:11:52:eb:29:fa:7d:
a6:14:30:15:d8:ba:53:b0:d1:16:7b:18:c3:ef:63:
70:c0:94:9b:74:72:b2:a7:ad:62:72:7c:ae:6e:9c:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A0:98:7A:89:E1:0F:C1:53:C0:A3:CE:7F:F9:2A:1A:37:D0:C7:74
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0a:ed:29:30:94:ca:e5:68:3c:37:4f:6a:83:21:33:ba:f1:
54:d6:3a:99:a2:c9:41:39:b1:e2:5c:31:8e:67:53:a6:72:ec:
cc:11:f6:04:03:7c:47:60:f6:d5:03:49:ad:c0:de:2b:9d:48:
f6:74:ae:9b:10:29:7d:78:95:3a:9c:30:46:90:db:ab:fa:30:
32:22:c6:69:96:77:c0:77:70:77:da:c1:60:f5:b9:49:7c:bc:
50:52:2e:a4:e4:0d:a7:32:79:3f:78:a5:00:f3:b1:b8:00:f9:
a5:05:bc:f3:c7:41:28:ef:0b:a5:7c:92:06:d0:41:2b:99:c2:
0d:a3:7c:84:cb:7e:4e:43:19:ec:fd:ea:3a:71:4e:87:cf:b7:
7c:08:47:bf:a8:fd:ac:bf:7e:0e:04:85:08:41:d3:e6:54:a4:
50:f2:c2:45:8b:b9:46:05:f9:42:6b:bb:f4:6a:19:d6:40:7d:
2b:d8:a2:ab:3a:8e:18:0b:9f:31:23:df:1b:37:48:97:1d:36:
9c:5d:17:81:67:a3:16:e2:d3:f5:8f:63:8c:5b:c0:ed:ad:58:
0e:f2:63:9f:b6:cc:ad:ef:a6:75:7a:22:9a:59:93:37:47:24:
b0:cc:c1:93:4c:34:ed:b9:c5:d4:b0:71:47:d5:31:9d:3f:f2:
34:5e:96:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:01:19 2025 by rpki-client