Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: cTremTjN3gWa8bzoD6HmZIYR1WGWxg5CSneE5QvX6N0=
Subject key identifier: 89:F9:7B:1A:E2:2A:4E:56:54:AB:C6:E3:E9:9D:DE:7C:7F:EF:45:77
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 0196C1CB90A3973ECE0ABD50B98B79BF06E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 1312
Signing time: Mon 12 May 2025 00:01:05 +0000
Manifest this update: Mon 12 May 2025 00:01:05 +0000
Manifest next update: Tue 13 May 2025 00:01:05 +0000
Files and hashes: 1: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: 2lsUvmqXnIkjPnCvhlyP0fuvCr1psvLmQ5rlCG2tk9o=)
2: WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa (hash: LWTe3RG5x6p18VhZoks9MnTE5mxlsn7m+dciM17vR7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:90:a3:97:3e:ce:0a:bd:50:b9:8b:79:bf:06:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: May 12 00:01:05 2025 GMT
Not After : May 13 00:01:05 2025 GMT
Subject: CN=89f97b1ae22a4e5654abc6e3e99dde7c7fef4577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:9e:8e:12:15:5a:f5:e7:fc:d9:ed:fa:8c:
8d:ae:0a:e8:ec:f7:0c:92:25:bd:27:27:5f:b0:62:
5b:60:86:33:02:84:27:48:99:0f:b5:dc:94:f9:bd:
0d:63:88:63:06:66:fc:99:08:e9:02:62:7d:b0:43:
4f:6b:30:1c:aa:ea:13:3f:a1:b5:df:71:f3:1a:ef:
09:7c:19:62:de:15:94:7a:1e:6b:00:5b:53:e6:00:
3b:74:80:81:51:17:6d:44:f8:86:7c:c9:a1:8b:7c:
88:f9:7b:91:78:4d:a7:e5:54:2c:f5:28:5e:ca:85:
60:d2:3b:13:72:00:b9:30:6c:81:03:c2:df:66:fb:
83:ab:0a:20:0f:50:6b:7e:1b:51:94:35:01:fe:85:
4c:9c:9b:f6:55:5a:8d:4c:4d:8d:eb:fb:c1:f7:0e:
72:43:20:c4:d0:99:d0:11:dc:1b:43:93:39:d9:8d:
46:a8:67:09:b5:3e:56:97:95:51:1b:a9:3b:60:90:
f1:b5:eb:14:28:b8:f9:3c:a0:ee:1c:bd:5b:d6:6a:
bb:e3:24:0d:04:43:36:96:5a:88:9c:48:96:02:88:
c2:8d:61:b2:fa:0d:20:b9:f6:a1:18:76:40:ff:25:
27:73:3f:0d:01:2d:23:6d:3a:b6:08:2c:a3:02:a1:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F9:7B:1A:E2:2A:4E:56:54:AB:C6:E3:E9:9D:DE:7C:7F:EF:45:77
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:61:59:ea:4c:1f:c3:f2:ca:ae:bf:63:11:46:34:42:f4:64:
bc:15:61:1e:c0:3e:3e:22:aa:0a:40:b0:f2:27:4f:e2:e1:4e:
15:26:98:c3:0f:a2:29:0a:ef:9d:2d:81:d2:d8:48:11:96:9f:
03:6f:bb:c6:9d:7b:62:68:76:54:e8:a2:3b:32:c2:a6:f1:7e:
6e:b8:9f:b6:c3:d5:76:e0:a9:cf:cd:0c:5e:8d:fe:0b:2e:f0:
01:d2:fd:56:f9:de:c7:fd:14:6d:c4:75:5d:1d:75:14:73:41:
bd:c7:d7:6f:82:b3:78:97:4b:07:c7:6f:2c:d4:e6:6c:1f:4d:
bf:6f:c8:d9:b1:18:10:ed:5f:74:fe:e4:00:3f:0f:83:b8:2e:
fa:4c:1d:34:d4:cb:2a:d7:ef:88:e9:bd:d6:28:15:bd:67:ee:
60:c8:c3:d5:72:a0:a8:f6:7e:0b:df:35:e7:01:37:82:94:4c:
09:f3:96:79:f0:a6:65:76:65:83:2e:9b:1e:45:2e:e9:cb:84:
9c:5a:9a:9b:24:c3:28:32:92:bd:63:55:61:34:ed:7f:fd:75:
22:1b:f0:a1:f0:a5:11:85:d3:b7:2e:4b:3c:57:97:21:5a:c2:
71:52:34:80:38:f9:4d:ad:28:31:23:33:56:38:8a:3a:bc:08:
47:bb:e6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:01:18 2025 by rpki-client