Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
File: jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft (raw, json)
Hash identifier: 5rlwWXwHObW11qSOBMCm5hrjl6duc0JVboYtiBHr6Ok=
Subject key identifier: B2:19:1A:5C:48:7C:5C:28:29:D9:07:2B:8E:92:5A:65:DE:09:68:A3
Authority key identifier: 8D:82:79:DA:ED:AB:BF:91:83:AF:B6:8E:43:FB:1E:5B:B6:D4:33:A3
Certificate issuer: /CN=8d8279daedabbf9183afb68e43fb1e5bb6d433a3
Certificate serial: 0196BEC9E29B3ADC3F8A5FC072F1BBED6EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
Manifest number: 045C
Signing time: Sun 11 May 2025 10:00:23 +0000
Manifest this update: Sun 11 May 2025 10:00:23 +0000
Manifest next update: Mon 12 May 2025 10:00:23 +0000
Files and hashes: 1: jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl (hash: PZezf4S2u2i33ADq0LE4LLNp9NPHvpVoVbPZhdpUQPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:e2:9b:3a:dc:3f:8a:5f:c0:72:f1:bb:ed:6e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8279daedabbf9183afb68e43fb1e5bb6d433a3
Validity
Not Before: May 11 10:00:23 2025 GMT
Not After : May 12 10:00:23 2025 GMT
Subject: CN=b2191a5c487c5c2829d9072b8e925a65de0968a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:24:c3:65:f0:21:b0:21:e7:fe:0a:15:37:
9a:5d:54:20:f6:3a:6b:58:a8:ea:f8:ac:66:73:c9:
46:a9:43:bc:b0:05:23:1a:cc:3d:e5:91:f0:b5:43:
3e:9c:3b:7d:59:5c:b8:86:48:92:e0:29:70:fb:6c:
ab:03:05:8b:ed:76:ef:f1:56:bf:a6:65:5f:21:9e:
da:49:1e:df:d6:0c:cd:d7:00:21:ed:4d:36:d5:e5:
ee:bb:9b:2d:0f:35:d4:b0:38:a1:b3:55:0e:8e:05:
3e:1b:16:de:aa:38:a9:b6:52:cd:6b:b2:91:ed:d3:
37:08:64:50:1e:ee:24:d0:67:12:18:d4:79:cf:6f:
b0:d0:12:62:94:fc:9b:ef:16:5b:b3:57:72:ee:59:
20:38:d5:85:0f:9f:52:b3:bf:06:98:4c:81:72:e5:
f7:97:8a:eb:81:61:25:b1:35:82:37:f6:00:98:1f:
25:2f:ce:89:72:77:e7:40:a5:ad:b8:78:e9:e8:17:
ee:b2:33:55:cb:c8:5d:79:d8:3f:8d:f7:57:c3:41:
c9:8e:48:a2:bb:63:14:39:8a:f2:51:c8:cd:cd:4d:
89:33:7a:89:ee:17:74:47:f8:01:9a:99:49:04:2c:
48:b1:cf:41:4b:65:15:24:28:31:60:b0:7a:5c:a5:
14:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:19:1A:5C:48:7C:5C:28:29:D9:07:2B:8E:92:5A:65:DE:09:68:A3
X509v3 Authority Key Identifier:
keyid:8D:82:79:DA:ED:AB:BF:91:83:AF:B6:8E:43:FB:1E:5B:B6:D4:33:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYJ52u2rv5GDr7aOQ_seW7bUM6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cfb953-bfef-44fe-825a-af73dc0f6f2a/1/jYJ52u2rv5GDr7aOQ_seW7bUM6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4b:58:ee:6e:c7:97:c6:b8:d8:11:4b:e4:07:a5:94:bf:0a:
45:7c:ff:4f:a5:b3:9b:52:33:a9:25:c1:70:d7:5f:45:2f:a9:
46:f9:b7:3e:6b:2e:85:de:46:63:d3:8b:49:33:8b:a0:03:56:
f5:50:ab:bc:2d:16:96:9c:9c:d5:b4:ab:0b:76:a6:4b:88:8b:
48:62:5d:14:fe:ef:6f:45:ff:fc:90:ff:fa:f1:e9:46:71:be:
0d:f4:15:f5:48:13:88:d9:9e:fe:61:2e:56:f7:34:c9:ec:e6:
91:bd:03:0a:ac:e5:70:86:ae:1b:71:67:7e:b6:e5:db:7c:1b:
87:53:d5:43:1f:6f:81:32:f3:a3:b0:6f:45:96:32:97:c4:1d:
38:a9:ee:f2:29:52:de:e7:b0:3c:88:e3:57:72:e6:36:2a:c7:
9c:84:7c:73:f6:28:96:94:e9:90:b7:f6:aa:93:df:f8:80:e6:
f9:89:e6:c9:69:0f:17:40:80:7d:f6:87:9e:ed:a5:95:fe:01:
0f:79:7e:3f:d9:63:b8:19:b4:ca:f5:ce:c4:9d:e9:6f:1a:8a:
2c:a6:44:3b:e8:1c:c1:f5:89:43:e1:7d:af:d5:e8:ee:d9:96:
eb:64:d2:06:fb:c4:fa:27:05:3e:21:19:76:f4:f7:8c:8a:d6:
ba:fc:26:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:57:15 2025 by rpki-client