Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
File: 0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft (raw, json)
Hash identifier: wdZpfngIFha3ThL242rJtCu11IFq3CV+hs6/9Z67RDY=
Subject key identifier: 01:49:61:50:7D:A4:B8:A1:D9:FA:24:44:E2:A7:F1:DF:FA:4C:DC:AC
Authority key identifier: D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74
Certificate issuer: /CN=d09363cfebbbf92a51e428533d3e8ad412aa3374
Certificate serial: 0196BD127045DAD450B06596400D1BD231C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 02:00:24 +0000
Manifest this update: Sun 11 May 2025 02:00:24 +0000
Manifest next update: Mon 12 May 2025 02:00:24 +0000
Files and hashes: 1: 0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl (hash: HntcLk84fWMvLycUycjHlkbb6lCdhPviBchCEBvYtaY=)
2: K0MDRhPja4FBoWQBNDrKCNqcl-Q.roa (hash: WPTwJ7uNCLk7bUU9KEWKxx4fN9uRask9g0nASALMjjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:70:45:da:d4:50:b0:65:96:40:0d:1b:d2:31:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09363cfebbbf92a51e428533d3e8ad412aa3374
Validity
Not Before: May 11 02:00:24 2025 GMT
Not After : May 12 02:00:24 2025 GMT
Subject: CN=014961507da4b8a1d9fa2444e2a7f1dffa4cdcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d9:c3:52:bf:63:2e:a4:3b:6a:1b:68:ea:00:
ba:0e:6d:73:ba:be:ff:32:0f:d6:eb:e2:fc:7e:c6:
c9:45:d4:52:11:11:31:55:2a:93:ab:70:99:db:9a:
fe:6e:14:53:27:8b:0b:bb:98:45:e2:12:97:06:8e:
53:80:10:47:69:87:f1:d3:a3:f2:53:d6:d3:9c:be:
69:e2:59:0e:b4:c9:7f:94:30:6d:f5:d4:df:11:c1:
c1:f0:dc:d8:4d:51:16:90:66:15:36:d6:aa:88:31:
e8:30:bf:59:66:ad:6d:ab:ed:cf:66:2b:dc:bc:30:
59:7c:cd:71:52:7d:45:f9:0a:b5:ec:8d:b2:27:fc:
6e:0d:75:33:b6:60:32:d4:55:2a:04:9b:12:b6:7d:
15:4f:4c:58:34:6d:3e:6d:ee:66:ac:10:d5:4d:d3:
9d:b3:82:2d:9a:d1:67:5a:4e:c5:bb:f2:78:0c:eb:
97:0b:57:bf:2a:86:b8:fd:0c:38:4c:78:00:79:31:
fe:b2:49:6e:f7:f3:46:54:b2:d1:66:c0:04:66:b2:
f3:50:9e:b5:17:39:1d:93:44:57:80:c0:dc:9e:2a:
d8:dd:8b:7e:58:ec:c0:4c:f1:4b:fa:de:df:47:97:
7f:83:38:1b:9c:55:97:49:fd:eb:c4:bf:ad:91:1d:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:49:61:50:7D:A4:B8:A1:D9:FA:24:44:E2:A7:F1:DF:FA:4C:DC:AC
X509v3 Authority Key Identifier:
keyid:D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:de:cf:3a:f5:6e:49:3d:44:9d:0c:70:9e:fb:08:bc:bd:32:
37:25:5e:8a:31:2d:47:41:46:76:bf:ee:5f:bd:9e:4b:1c:cf:
4a:41:4f:7b:b6:9a:4e:22:56:47:7f:97:01:07:39:3f:3d:d2:
b0:98:b1:70:df:8d:27:cb:f0:ff:d0:b0:a4:14:18:7e:03:ec:
cc:b4:24:f1:a2:ba:2b:ef:01:c9:b0:30:ef:0d:70:13:4e:fd:
e2:22:cf:25:49:41:4a:cd:12:ae:fe:1c:d8:31:77:de:d1:4d:
b4:0d:3c:ef:99:79:6a:3c:cb:16:47:24:f7:fb:a5:a3:f6:35:
6a:c9:bb:12:23:44:ed:5d:11:4c:e4:bb:bc:bd:86:d5:34:34:
91:9e:07:e2:c6:a5:22:fe:a0:c2:11:e9:11:cb:ea:89:9e:08:
81:d3:0e:55:91:ec:53:80:46:bd:90:c7:e4:38:de:38:c9:ac:
8d:ca:f6:c9:ed:83:8a:5c:db:96:f0:05:22:53:17:10:06:e4:
20:ed:94:11:41:d1:96:67:04:61:ce:f1:c0:88:df:7e:ba:97:
d9:ac:1e:b3:0b:1e:26:49:55:9d:22:3f:ae:7a:6f:bd:9f:31:
e4:fc:0a:76:a8:49:05:9e:08:35:f8:ab:74:ac:f1:14:6f:ef:
00:2a:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:19:16 2025 by rpki-client