Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
File: JcUDXdNt8HSfTWKZyPy-1hVcARc.mft (raw, json)
Hash identifier: 3m2ZeP5CO2LE3mHK1NGmrW+mP+bTZjY3WXF8rFa9EbQ=
Subject key identifier: 38:2C:BA:E9:F6:77:74:F3:A0:DC:B2:CE:20:0E:68:E8:1A:E0:74:D6
Authority key identifier: 25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
Certificate issuer: /CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Certificate serial: 01969E9A91B5B114814EA34F235E188E1B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
Manifest number: 1520
Signing time: Mon 05 May 2025 04:00:52 +0000
Manifest this update: Mon 05 May 2025 04:00:52 +0000
Manifest next update: Tue 06 May 2025 04:00:52 +0000
Files and hashes: 1: JcUDXdNt8HSfTWKZyPy-1hVcARc.crl (hash: jsYlDiiSLtyII/QwUrDqaxyQM3RBQPeRCtporpRazAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:91:b5:b1:14:81:4e:a3:4f:23:5e:18:8e:1b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Validity
Not Before: May 5 04:00:52 2025 GMT
Not After : May 6 04:00:52 2025 GMT
Subject: CN=382cbae9f67774f3a0dcb2ce200e68e81ae074d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:5c:bc:e2:04:25:10:6a:a6:49:4c:0a:8a:
72:e0:34:18:53:0d:30:43:02:0f:7c:90:6c:8c:ba:
7f:31:19:ec:5c:5a:73:7b:de:a8:df:f1:f0:17:02:
be:f6:0e:90:08:63:a9:f9:87:73:35:1f:5d:4f:8e:
00:cc:4b:57:c1:f0:ff:1b:e6:66:49:7c:c6:3e:57:
75:a1:0d:0a:0b:48:29:75:6a:67:3f:c2:98:25:91:
3a:c3:c5:c3:2d:71:27:f3:64:31:fa:1a:c6:43:a7:
3c:59:a1:a2:cd:e5:9c:8a:d5:45:06:2a:36:a2:43:
49:65:4f:87:b8:25:4d:8a:a8:6e:0d:4f:37:db:33:
13:24:e1:f8:8d:b4:91:a1:14:b0:2d:24:10:32:05:
44:91:9c:76:41:27:2c:23:c8:9a:37:85:dc:af:8e:
05:17:00:57:89:e7:c7:0b:86:4a:4e:bf:8d:8e:ac:
82:60:83:47:b6:18:2c:d4:ed:eb:21:6d:24:e3:ac:
81:c3:03:b0:b5:fd:98:53:6f:7c:a6:9a:3c:16:a8:
b5:f8:af:4e:07:b9:14:ac:2f:28:d1:92:bf:8d:e7:
15:77:6a:40:56:ca:49:b7:0e:e6:75:56:b0:d6:86:
c0:6f:ac:12:92:76:0a:19:fe:45:63:72:63:7d:79:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2C:BA:E9:F6:77:74:F3:A0:DC:B2:CE:20:0E:68:E8:1A:E0:74:D6
X509v3 Authority Key Identifier:
keyid:25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:81:92:38:36:7b:b7:13:f4:0b:43:39:b7:24:c2:69:1d:d7:
b3:9c:c7:b6:2a:5f:22:4f:d3:3c:e1:28:c3:2c:9c:f5:1c:6e:
79:b4:75:f2:41:83:97:0e:65:8c:51:20:b1:4f:17:eb:4d:e5:
c4:52:ad:c4:18:92:c5:28:24:9b:22:60:78:b8:1a:03:29:6d:
09:c7:ca:66:70:9f:86:dc:88:5f:b2:4d:45:53:37:7c:cb:24:
77:4c:c0:ba:96:9f:3a:c3:64:ff:23:5e:8e:9a:30:2b:8e:12:
98:1a:8f:33:55:8c:39:e1:e5:b2:8f:ba:44:1d:43:a4:cf:61:
7b:15:92:8b:77:7f:14:77:b0:74:e3:73:a6:fd:8b:f5:36:0a:
ca:9c:12:75:7a:e4:63:19:61:a2:c2:08:78:bf:3e:da:58:31:
a9:7a:c2:b9:a9:8c:6a:f5:04:fb:1b:65:7a:54:1e:de:6b:0f:
b6:12:a0:54:e0:a4:0e:2b:ec:cc:42:b0:3c:93:d8:32:26:ec:
60:cc:7a:50:21:80:f7:88:59:3d:72:8b:d3:d0:fe:29:fe:d2:
5b:8f:38:d5:2d:08:ce:72:d4:32:dc:31:8f:f3:df:a2:63:f4:
4c:ae:49:56:52:fa:a5:5b:da:b2:5b:c7:ba:18:a5:64:31:2c:
b2:ac:96:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:55:49 2025 by rpki-client