Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: 6Xvn4UsoGMjsNt8vIPgxKeUCXRuU7Uq0SB+6Bkt+7q8=
Subject key identifier: 4A:77:D9:D3:7D:B5:27:22:44:5F:6F:41:BA:B3:77:B5:9E:15:08:EC
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 0196BBC8A93ACECA8B19DAC892EE0BA3F114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: 025F
Signing time: Sat 10 May 2025 20:00:11 +0000
Manifest this update: Sat 10 May 2025 20:00:11 +0000
Manifest next update: Sun 11 May 2025 20:00:11 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: 5vwQP9eQQNkMGadK0xaalusqu0RwiukxPtzQ2y8xqyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:a9:3a:ce:ca:8b:19:da:c8:92:ee:0b:a3:f1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: May 10 20:00:11 2025 GMT
Not After : May 11 20:00:11 2025 GMT
Subject: CN=4a77d9d37db52722445f6f41bab377b59e1508ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:5d:d0:e1:70:26:f5:b8:6f:a5:32:72:44:
4b:aa:e5:e4:49:27:10:d3:a5:4a:06:3f:f7:8d:f2:
12:67:5d:52:6c:e3:c4:02:50:cc:d8:ab:8b:7e:a9:
2c:f2:41:02:e7:0b:21:2e:e4:1d:0a:b9:aa:d1:a7:
67:5d:98:93:60:ae:a3:23:c1:9b:fb:a2:d8:69:1a:
94:8b:ca:86:62:5d:a3:42:8d:a9:f4:0d:84:00:d1:
cd:bc:dd:6b:ff:c2:74:9a:8f:e2:8f:1a:21:a7:ef:
82:75:31:74:f2:19:fb:36:b5:8c:de:39:72:bd:ff:
d4:57:3a:2d:19:05:5e:43:77:fa:dc:4f:51:46:48:
5d:6e:ee:46:f5:66:52:fb:bd:92:d6:36:11:f3:90:
13:12:64:cf:4b:8d:5b:e3:26:00:af:27:a0:df:12:
20:c1:a3:de:65:0b:f7:ee:5e:ce:13:6f:9e:80:97:
c2:54:04:33:46:b7:d3:bc:6c:0f:ba:5f:0a:0d:b8:
33:a6:ff:b2:4e:e6:71:9c:d3:69:77:b6:71:57:c6:
4c:f9:d9:10:c7:18:bf:51:1d:7b:cd:34:69:25:0c:
4a:1a:af:86:78:97:1c:34:25:fa:b7:f5:d8:1e:dc:
4d:7d:01:e9:0c:bd:a6:cc:5f:f7:63:cc:22:38:b5:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:77:D9:D3:7D:B5:27:22:44:5F:6F:41:BA:B3:77:B5:9E:15:08:EC
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a0:81:0f:dc:6b:a1:af:8d:30:79:11:eb:a5:d7:ab:6e:74:
99:d6:45:84:76:e6:95:71:93:3e:f0:1f:8f:b5:0a:ec:f3:ba:
e2:02:05:93:de:85:23:d3:c0:b7:51:33:df:5d:2c:da:e6:97:
37:54:e1:95:b1:17:a2:2d:14:31:a6:d8:72:0d:6e:ae:17:47:
ce:04:30:06:7e:13:5b:11:8f:be:91:47:19:2a:8c:40:2f:3f:
c6:0b:a4:2b:26:5e:8d:a5:3c:47:32:c6:b2:81:a7:a5:71:7e:
4c:4d:3b:f3:f4:f1:04:2c:a4:b4:04:7f:6d:f3:66:28:d7:b5:
f0:81:94:6c:ba:3e:0a:52:cd:1d:41:3e:94:30:cb:73:8b:a9:
8c:4c:3b:38:ae:8e:e9:00:0b:d3:26:4f:45:82:ba:60:c3:f9:
3c:27:78:a6:ff:7a:54:14:a2:cf:ab:56:5d:cd:5a:a0:50:e4:
67:f7:9f:76:27:a8:d1:b2:98:7c:fd:a1:dc:71:73:2f:5f:4e:
69:19:77:9b:3a:d5:7a:22:11:fc:a5:13:ae:0e:c5:40:a3:e2:
b4:d7:68:b8:ec:75:19:e3:3c:c2:60:c8:68:17:3b:18:d2:e3:
e9:60:f1:88:d9:ac:a5:94:a4:69:c3:8b:3b:58:97:11:f5:66:
4a:8e:ba:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:25:13 2025 by rpki-client