Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier: 0KhxvfZbZwu7eM88OXgrGOvTgG20EOzcWYjPd9Aj+qg=
Subject key identifier: 3D:DF:D2:1D:4B:00:1B:C6:E6:C3:14:B4:FE:E2:E8:A4:67:95:4A:E6
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial: 01969E9AA47421CDBDFBC50F0CA22339A63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number: 1396
Signing time: Mon 05 May 2025 04:00:56 +0000
Manifest this update: Mon 05 May 2025 04:00:56 +0000
Manifest next update: Tue 06 May 2025 04:00:56 +0000
Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: ZQYhHQ5xSKuuX+3FOzLPBBMI1q72RNp31bFB9jiFzzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:a4:74:21:cd:bd:fb:c5:0f:0c:a2:23:39:a6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Validity
Not Before: May 5 04:00:56 2025 GMT
Not After : May 6 04:00:56 2025 GMT
Subject: CN=3ddfd21d4b001bc6e6c314b4fee2e8a467954ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:f0:4d:db:b7:18:73:17:a4:4e:56:57:27:
1c:16:ca:35:41:99:78:c4:3e:74:31:b2:e3:12:21:
c7:cd:04:90:e1:b8:a2:f3:3c:56:f8:fb:0b:5e:b5:
b0:42:67:47:fe:f4:fc:ab:9d:a8:1e:7a:18:e1:12:
24:fe:c4:c9:d0:27:22:cd:3e:00:46:ba:9a:7d:5a:
36:4c:9d:53:56:93:4d:04:be:47:f5:99:fb:c2:2e:
1d:01:d8:ef:15:14:35:55:62:49:f2:83:da:1d:2f:
1d:6a:63:80:7d:4c:6b:e2:49:61:16:e1:dd:60:2f:
e5:3f:36:05:84:77:39:92:a8:b2:80:42:b6:2e:55:
a5:33:f0:11:f8:c6:b2:11:58:e8:04:01:85:32:7f:
9a:4a:27:8a:f4:fc:32:07:1f:2d:d0:cb:66:b4:44:
8b:3a:ad:72:56:2a:d0:95:cf:51:74:3d:0b:09:ba:
8b:31:5f:82:06:5b:cc:ec:ac:af:7e:03:bc:07:39:
8d:f5:ea:da:88:42:ea:d4:74:7d:82:8d:8d:57:6e:
92:ae:1d:86:9f:94:73:2b:73:e0:14:42:39:c0:b8:
78:ff:74:52:86:f9:43:47:43:6a:f7:65:2b:80:59:
bc:92:33:79:60:49:2d:3c:93:34:5d:74:d6:4b:f6:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DF:D2:1D:4B:00:1B:C6:E6:C3:14:B4:FE:E2:E8:A4:67:95:4A:E6
X509v3 Authority Key Identifier:
keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8b:d2:58:5f:53:8e:9f:7c:9b:b4:7e:9c:9b:1e:36:43:21:
45:a7:a7:78:05:a0:7a:37:81:65:5e:94:eb:28:ab:ff:bd:d9:
65:97:39:ec:e0:7f:62:9b:40:36:3d:29:fe:c1:ca:2c:09:4f:
f0:06:bf:7c:0a:d7:5b:5d:f3:aa:35:84:4f:dd:a7:ad:8a:02:
1e:ab:cf:f0:3e:7a:31:16:fc:6e:9f:0a:6e:15:26:a4:ef:4f:
94:ea:63:c6:7d:a8:33:41:b0:cc:e9:7e:a6:13:c9:e9:f9:0e:
fa:8d:e4:74:29:d7:d2:43:3d:67:ae:52:26:bc:57:ed:a4:3d:
58:33:59:b1:cf:28:8e:3f:dd:b7:ea:56:51:84:6f:c6:42:a0:
ab:dd:55:37:64:67:64:99:ac:23:9b:cd:83:f8:34:ef:bd:64:
f3:11:83:f6:36:63:e1:b4:da:4b:3b:83:94:e0:f9:a9:d4:41:
95:68:f0:ef:ee:df:4c:0f:28:b7:f5:21:f3:04:9f:ff:a3:b9:
db:3b:78:a6:00:3e:af:41:e7:a9:e6:00:dc:de:64:38:45:31:
35:19:b5:06:13:97:05:ba:54:4a:d9:0d:29:de:9b:85:c9:d3:
4b:76:e4:6c:4a:7f:cf:39:33:90:5a:7a:99:43:bb:8d:98:cc:
23:ba:07:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:00:18 2025 by rpki-client