Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
File: JlNDThz2kK0m1HoDs_w1qAKnm1g.mft (raw, json)
Hash identifier: Mq4QrxgESIvQneGBhlENSGyzEnbdESOLYQH/IumspF0=
Subject key identifier: B8:D5:91:F5:6B:29:E1:16:B2:AD:C3:5A:50:70:DA:A0:CD:C6:01:C9
Authority key identifier: 26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58
Certificate issuer: /CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
Certificate serial: 0196C7292ABF5AC6F6B211D96E23F3EC57D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
Manifest number: 0827
Signing time: Tue 13 May 2025 01:01:25 +0000
Manifest this update: Tue 13 May 2025 01:01:25 +0000
Manifest next update: Wed 14 May 2025 01:01:25 +0000
Files and hashes: 1: JlNDThz2kK0m1HoDs_w1qAKnm1g.crl (hash: NUKCRHPM6jdPrL7gh2rU4lZcYwzGFPcK/I9gFwr3l/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:2a:bf:5a:c6:f6:b2:11:d9:6e:23:f3:ec:57:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
Validity
Not Before: May 13 01:01:25 2025 GMT
Not After : May 14 01:01:25 2025 GMT
Subject: CN=b8d591f56b29e116b2adc35a5070daa0cdc601c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:2f:91:4b:70:6b:b4:7d:53:10:c5:3d:4f:
fe:19:26:38:4f:76:cd:65:57:09:83:5c:9e:fd:51:
11:fa:bb:08:3b:e1:85:1d:dc:4a:16:32:58:28:51:
9b:cd:ef:a3:d5:e4:d8:57:ef:d0:5c:ea:a2:c3:ad:
f5:25:b0:87:9d:a4:56:4b:f1:85:2e:b5:34:10:c0:
9e:7c:e7:28:f5:6e:18:9c:17:23:28:67:38:04:af:
04:e3:a9:f2:80:f2:72:5c:7e:20:37:84:b0:b2:ab:
17:68:a2:a0:aa:d0:10:a3:91:c1:b7:90:0a:2d:f4:
94:4e:97:c0:e1:82:f4:ff:ab:3f:bf:f8:b3:9e:91:
71:f9:f0:f1:11:e2:d2:29:9a:bf:f0:16:04:46:9a:
36:42:d1:45:db:02:07:12:57:55:9b:3e:8a:33:b8:
21:31:a4:ac:87:44:9c:aa:94:e9:c0:71:cd:45:ce:
15:c3:c7:9d:8a:71:80:af:db:64:ce:f1:d9:13:da:
a8:2d:71:c3:ee:13:37:34:e5:2a:0a:5c:15:13:12:
31:0f:ba:72:29:dd:ff:3b:42:f9:c7:e7:96:c6:82:
00:7a:36:aa:f6:0b:c5:76:01:45:3e:cd:71:f4:0d:
24:8a:0b:88:72:8e:d3:aa:9f:83:ca:fb:18:c9:ea:
c2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D5:91:F5:6B:29:E1:16:B2:AD:C3:5A:50:70:DA:A0:CD:C6:01:C9
X509v3 Authority Key Identifier:
keyid:26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:12:f9:16:9a:cc:e2:da:e8:4e:6c:a7:11:a1:e4:bf:ea:82:
13:a6:98:9f:95:66:4a:e4:19:1f:b5:6b:a0:ed:8c:1b:1b:26:
5c:21:9a:11:52:7f:cf:5c:27:7c:85:b8:c9:6b:d5:17:7c:eb:
ce:97:a5:6c:8a:cb:d3:07:b1:45:9c:72:9f:fd:1f:5f:7b:a0:
7e:0a:9d:02:16:5d:31:85:96:56:da:39:5a:7a:aa:fc:9e:41:
e3:dc:e2:bb:0a:35:73:28:93:31:29:92:7e:41:ec:de:27:37:
e4:19:ff:46:c9:5c:62:1d:18:dd:67:30:a1:dd:ba:9b:22:29:
dc:4d:61:9d:e9:29:2b:3c:4b:10:ce:e9:cf:36:8d:ea:27:c2:
0f:0d:74:45:b7:ca:ef:85:9a:49:a2:1c:9a:ac:84:1e:ce:fe:
5d:d0:a7:6a:ff:f1:6d:ef:15:7c:a4:cd:40:d6:28:2c:e3:f4:
ae:8d:c5:2e:63:90:dd:9b:ca:96:08:8f:b4:e3:45:79:b2:90:
36:89:bc:db:e8:1b:78:60:c3:b1:d3:21:bb:aa:69:2d:c0:b0:
91:c3:84:65:66:b8:ab:7f:76:b3:4b:e0:45:48:81:23:2b:7b:
fd:b5:5e:a8:e9:70:88:c4:30:aa:78:fb:e1:38:7a:04:2d:ca:
3f:b8:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:07:20 2025 by rpki-client