Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File: j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier: WQDBvnm6qhPLBzcYEH2QWpxTsZ6n9gllbHOo2o4Tg7Y=
Subject key identifier: AD:FA:B7:8E:56:A2:13:EB:66:6F:E1:13:9A:7C:B2:A5:0F:6B:8B:FB
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer: /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial: 01969E9AC0582C7A3046565910C1DCA391C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number: 0770
Signing time: Mon 05 May 2025 04:01:03 +0000
Manifest this update: Mon 05 May 2025 04:01:03 +0000
Manifest next update: Tue 06 May 2025 04:01:03 +0000
Files and hashes: 1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: hP38ueWyoUeUW1WE7M2XYNHMH37cu3h3Gko/JhB3geQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:c0:58:2c:7a:30:46:56:59:10:c1:dc:a3:91:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Validity
Not Before: May 5 04:01:03 2025 GMT
Not After : May 6 04:01:03 2025 GMT
Subject: CN=adfab78e56a213eb666fe1139a7cb2a50f6b8bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:7b:86:f7:3a:73:fb:c8:89:78:1e:b3:78:
dc:9e:b5:3f:44:86:d6:fc:8a:62:6f:36:de:29:27:
31:98:91:ad:90:f9:cf:d2:fe:db:72:f7:b7:2e:17:
9b:24:8d:0e:03:b2:14:06:eb:98:c7:c2:e3:ee:5d:
77:2b:5b:1a:96:44:29:cc:bb:3a:8a:8d:3f:82:37:
61:bb:de:7b:02:92:05:0c:03:0b:30:15:86:98:35:
12:24:5c:25:34:51:d5:71:74:17:d2:24:cd:83:1c:
91:f9:14:86:23:4e:0c:89:b3:09:3c:75:4f:21:32:
db:64:10:d2:7c:3b:52:b4:89:5b:37:9e:2d:0b:4d:
73:df:78:d8:c0:6c:fd:f2:33:e1:d3:97:e1:81:9c:
a6:03:f1:50:cf:67:fd:71:c2:d8:f0:55:63:14:9e:
7a:97:bf:c8:bb:aa:37:ea:22:bd:75:f6:ee:1f:37:
c5:a5:e3:4a:5c:4d:87:e9:e9:07:2c:3a:04:a1:c3:
93:58:0a:bb:ef:57:a7:30:dd:4f:ec:67:33:16:e5:
99:62:74:a4:60:65:61:85:49:62:82:c7:84:24:65:
ba:d8:d4:8e:96:89:e6:fd:01:db:d5:c5:30:b1:1a:
81:60:b9:aa:91:1d:6a:f0:25:14:bf:fb:72:09:77:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FA:B7:8E:56:A2:13:EB:66:6F:E1:13:9A:7C:B2:A5:0F:6B:8B:FB
X509v3 Authority Key Identifier:
keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5d:58:30:3c:e9:6d:0a:53:83:bd:a1:52:18:b8:21:ff:e7:
84:c2:85:71:99:85:49:f0:86:e3:05:d1:c9:e3:96:3f:3b:4a:
3a:54:1d:8f:ea:a2:fe:34:a0:06:9c:eb:25:8e:88:f7:55:f6:
07:fe:2a:19:9e:48:2f:7b:40:66:ba:3d:de:b0:d1:58:23:c3:
d3:7c:ab:19:a9:11:56:ab:8e:b9:00:8c:b9:72:8e:d6:d4:ab:
5f:ae:eb:b8:bb:08:12:07:79:bb:e0:73:f0:8b:62:a7:a7:df:
55:18:13:21:8f:18:c8:0b:32:df:13:d0:ef:7a:5b:a6:a7:6d:
c4:1b:1e:a8:4d:1f:71:ea:cc:81:8c:ad:bd:87:36:fa:0b:10:
5c:79:4a:14:c4:db:ec:ce:d2:b2:fe:ae:da:ee:37:6e:67:db:
19:23:00:d0:16:07:99:6a:80:60:9f:f2:26:06:c7:93:25:2c:
6f:99:99:78:82:8d:b5:96:f0:f5:13:cb:92:23:94:de:9f:3a:
48:7e:0a:cf:84:8e:14:09:27:e1:18:b5:95:2d:17:c7:9a:68:
29:4f:83:b1:14:5e:33:2d:36:10:f4:b9:99:9d:ed:7a:bf:fa:
7e:9b:c6:30:d0:63:ed:eb:1e:4b:54:a9:ac:5f:5a:48:6c:e6:
02:c3:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:56:54 2025 by rpki-client