Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
File: _JNLA3cwXsv-ODshuHR0EGoeTdg.mft (raw, json)
Hash identifier: AUmLWjJNq59ZbmD/MVphCv3wJAkC5cGsxkW7kRa3qIU=
Subject key identifier: C2:9B:62:5B:CA:0E:E1:66:26:8A:6C:AB:E7:D0:55:29:FE:5D:04:E3
Authority key identifier: FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
Certificate issuer: /CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Certificate serial: 0196BC6E0065E7E8FD59BF272954906DC30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
Manifest number: 1075
Signing time: Sat 10 May 2025 23:00:47 +0000
Manifest this update: Sat 10 May 2025 23:00:47 +0000
Manifest next update: Sun 11 May 2025 23:00:47 +0000
Files and hashes: 1: _JNLA3cwXsv-ODshuHR0EGoeTdg.crl (hash: aWBA5YVArtAwdWmTn4d4BvtEJOGL17+rHGewHETAvCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:00:65:e7:e8:fd:59:bf:27:29:54:90:6d:c3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Validity
Not Before: May 10 23:00:47 2025 GMT
Not After : May 11 23:00:47 2025 GMT
Subject: CN=c29b625bca0ee166268a6cabe7d05529fe5d04e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:77:7a:42:b3:93:a9:f8:a0:e7:17:56:3a:
28:c5:1f:41:6f:b8:b2:1b:22:52:1b:33:cb:e8:cc:
ce:05:43:7f:c2:d8:91:f4:fb:16:d9:9a:b4:ca:f6:
d2:06:70:02:58:88:3b:4b:b1:dd:65:b8:88:97:55:
e4:c7:a0:d6:15:67:fe:01:42:f0:06:1a:f2:d0:f3:
09:84:d9:d1:2d:d8:99:c1:20:b7:34:0c:93:fa:77:
88:91:ac:a1:81:fa:be:d7:c0:df:e1:f9:67:b1:61:
62:7a:b2:df:bd:14:d3:0d:48:dc:f9:c3:dd:c2:11:
83:d7:a8:95:ea:e3:dd:1e:3c:17:86:f2:c2:ec:a3:
2a:f0:24:1d:61:72:8b:c1:d7:18:13:14:c2:96:69:
89:26:f9:36:81:4c:f7:06:13:a3:78:4b:d4:54:9b:
c9:09:48:3d:39:fa:8e:0c:a9:bb:39:17:1e:39:1f:
33:e4:13:13:c3:fb:37:98:f2:75:c6:3b:b3:70:2d:
5a:c8:1b:bc:8a:6b:54:fe:e1:f0:26:09:e7:d6:29:
5f:a3:74:b9:b8:59:11:9b:39:0f:97:5c:2c:96:f5:
58:83:95:a6:54:df:da:65:3c:bf:29:39:44:5e:ff:
b0:35:68:0a:ea:f9:55:5c:cf:64:62:f0:be:91:f4:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9B:62:5B:CA:0E:E1:66:26:8A:6C:AB:E7:D0:55:29:FE:5D:04:E3
X509v3 Authority Key Identifier:
keyid:FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7e:7d:9a:eb:20:61:ac:94:e5:db:43:d8:a9:2d:04:b4:50:
bd:dc:2a:25:2c:99:13:c4:ec:88:cd:9e:34:7c:86:27:a2:25:
5b:75:bf:92:62:2e:a5:1d:62:b2:c8:49:ac:25:6b:b4:e6:35:
c1:92:c1:50:7a:a3:18:54:b3:85:d5:15:f2:d4:8a:6b:f4:38:
ef:17:ed:9a:42:f0:0f:a0:16:a3:19:cc:59:85:23:d2:18:2a:
ac:0b:49:f2:e4:10:30:ae:66:6f:75:a1:db:a2:e9:09:b7:5c:
97:7b:c1:35:d3:91:d4:bb:3a:d2:4d:8f:da:90:ae:70:2c:d6:
17:8a:ae:68:2b:d4:e0:0c:59:d3:91:eb:7d:1c:89:01:27:64:
0f:12:af:80:a4:70:2d:fb:3f:d8:c6:6d:94:c9:bb:04:ce:f3:
77:31:f8:8d:44:ca:65:2e:05:62:71:5a:83:02:06:e2:73:ed:
c4:78:c9:8a:70:07:6f:0c:c8:93:07:0b:13:44:63:5c:e0:69:
b1:8f:26:a1:14:74:27:32:07:a0:bc:58:01:8a:38:c2:58:91:
89:39:da:c8:3b:34:5b:8c:46:1b:31:e9:60:75:b5:c6:66:17:
14:df:db:d4:85:ab:99:2f:db:c5:d7:4a:a9:ed:e2:2b:0c:f6:
0f:a2:5e:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8bgBl5+j9Wb8nKVSQbcMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTM0YjAzNzczMDVlY2JmZTM4M2IyMWI4NzQ3NDEwNmEx
ZTRkZDgwHhcNMjUwNTEwMjMwMDQ3WhcNMjUwNTExMjMwMDQ3WjAzMTEwLwYDVQQD
EyhjMjliNjI1YmNhMGVlMTY2MjY4YTZjYWJlN2QwNTUyOWZlNWQwNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNB3ekKzk6n4oOcXVjooxR9Bb7iy
GyJSGzPL6MzOBUN/wtiR9PsW2Zq0yvbSBnACWIg7S7HdZbiIl1Xkx6DWFWf+AULw
Bhry0PMJhNnRLdiZwSC3NAyT+neIkayhgfq+18Df4flnsWFierLfvRTTDUjc+cPd
whGD16iV6uPdHjwXhvLC7KMq8CQdYXKLwdcYExTClmmJJvk2gUz3BhOjeEvUVJvJ
CUg9OfqODKm7ORceOR8z5BMTw/s3mPJ1xjuzcC1ayBu8imtU/uHwJgnn1ilfo3S5
uFkRmzkPl1wslvVYg5WmVN/aZTy/KTlEXv+wNWgK6vlVXM9kYvC+kfTXkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKbYlvKDuFmJopsq+fQVSn+XQTjMB8GA1UdIwQY
MBaAFPyTSwN3MF7L/jg7Ibh0dBBqHk3YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81ODcwNTEtY2E4NC00MzFhLTk4YmIt
OWRlN2Y5MzVmYzAxLzEvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81ODcwNTEtY2E4NC00MzFhLTk4YmItOWRlN2Y5MzVmYzAx
LzEvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT359musg
YayU5dtD2KktBLRQvdwqJSyZE8TsiM2eNHyGJ6IlW3W/kmIupR1isshJrCVrtOY1
wZLBUHqjGFSzhdUV8tSKa/Q47xftmkLwD6AWoxnMWYUj0hgqrAtJ8uQQMK5mb3Wh
26LpCbdcl3vBNdOR1Ls60k2P2pCucCzWF4quaCvU4AxZ05HrfRyJASdkDxKvgKRw
Lfs/2MZtlMm7BM7zdzH4jUTKZS4FYnFagwIG4nPtxHjJinAHbwzIkwcLE0RjXOBp
sY8moRR0JzIHoLxYAYo4wliRiTnayDs0W4xGGzHpYHW1xmYXFN/b1IWrmS/bxddK
qe3iKwz2D6Jerg==
-----END CERTIFICATE-----
Generated at Sun May 11 06:53:30 2025 by rpki-client