Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
File: JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft (raw, json)
Hash identifier: 6r79xxbaebNzLYoAg9vVXkVQygeiNprudIgar6Rg7Mo=
Subject key identifier: 32:F7:02:69:2E:68:AA:71:A0:CF:C4:6C:C9:7D:7E:79:DB:DC:1B:0F
Authority key identifier: 24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
Certificate issuer: /CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Certificate serial: 0196BDEE509890662A78C54CA8E98C15A8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
Manifest number: 1530
Signing time: Sun 11 May 2025 06:00:34 +0000
Manifest this update: Sun 11 May 2025 06:00:34 +0000
Manifest next update: Mon 12 May 2025 06:00:34 +0000
Files and hashes: 1: JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl (hash: QXhLw0HGtsE5cqST40dp6lNHVFBX8oEeCw2uyYQDB6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:50:98:90:66:2a:78:c5:4c:a8:e9:8c:15:a8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Validity
Not Before: May 11 06:00:34 2025 GMT
Not After : May 12 06:00:34 2025 GMT
Subject: CN=32f702692e68aa71a0cfc46cc97d7e79dbdc1b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:b0:f6:17:a0:b4:5a:72:8c:cf:09:83:6f:
41:23:99:c3:93:6a:96:8f:96:ee:70:d2:4a:11:b6:
78:f2:6a:2f:42:6c:cd:24:de:e1:c0:1a:67:99:64:
52:39:88:9a:cb:5c:e3:7d:fa:b4:a9:8c:05:05:a1:
c6:12:9f:1f:05:bf:64:8e:88:94:40:0d:19:f0:3f:
90:13:9d:15:85:a4:18:05:ce:a5:64:62:bd:43:81:
b8:2c:65:e4:90:65:01:0c:4a:8c:dc:c3:d6:de:39:
70:ee:48:a3:ae:b3:4b:e7:e8:73:1d:af:91:be:e9:
62:5d:36:b8:d9:d8:f4:9f:99:6c:35:a1:d3:46:a4:
4b:62:96:79:d8:20:d5:6d:c1:4d:20:bd:43:ee:f2:
2f:0e:e5:b0:01:ed:3a:68:35:a0:ac:41:de:2d:6e:
64:a4:ce:35:95:45:a6:d8:f3:5e:f7:c5:35:db:a7:
40:c0:da:90:c8:69:b9:dc:34:42:76:99:e1:69:ea:
5e:ed:66:24:fa:8c:88:25:e6:0e:c7:53:9b:47:91:
57:9f:16:ce:b4:7c:f1:3f:fe:6e:c0:7b:20:54:c2:
6c:68:f5:0d:20:c4:d5:5f:af:23:c7:5a:1b:57:f4:
18:1d:2d:92:b9:2b:e1:df:48:c0:7d:c5:f0:4e:57:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F7:02:69:2E:68:AA:71:A0:CF:C4:6C:C9:7D:7E:79:DB:DC:1B:0F
X509v3 Authority Key Identifier:
keyid:24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0e:76:56:7f:e4:da:66:7b:0f:2c:d1:d5:eb:93:04:30:dd:
1a:a7:5d:91:cc:70:e6:13:14:56:92:42:00:8d:c9:a7:01:86:
d6:4c:e0:4f:a0:cd:07:9b:32:a2:9d:32:80:dd:ef:e8:6b:ab:
c7:2d:ec:42:aa:d5:23:b4:29:3e:26:33:24:0e:ed:46:cc:eb:
1d:76:17:7a:fb:69:9f:c6:31:ed:c4:12:ab:6a:af:5d:f6:4a:
9a:7d:04:56:0e:5d:25:0d:8c:e3:a2:7b:c9:92:1a:ba:98:5e:
52:56:54:4d:fb:40:93:67:d6:d9:07:2a:d9:e6:a7:31:c8:84:
21:00:4d:c8:07:ee:59:cb:f2:b8:e0:13:fe:77:2e:a0:78:93:
ff:cb:e3:ce:d4:69:36:01:05:4a:09:5f:14:04:e4:ba:c9:00:
dd:94:2e:51:a8:9f:dd:0d:f7:d5:1c:9c:0b:29:29:0a:d6:33:
6f:84:66:09:84:e8:55:06:26:46:21:8d:21:bb:74:bd:b7:96:
f2:2f:8e:93:9d:73:6a:6b:2a:c6:b9:11:8c:e7:18:19:3d:bc:
2d:1a:ae:68:7a:7a:63:5a:49:3c:33:d8:f7:7e:3e:ed:d2:8b:
63:24:d3:23:00:ed:b7:97:1b:00:21:18:3a:b6:59:31:c3:31:
ef:f6:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:42:05 2025 by rpki-client