Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier: UBy4q0u9iSzoeRW4X4avx++VFJ7EISeYV0YYtXDX3VY=
Subject key identifier: 12:BB:26:5D:46:B4:DE:20:C9:63:7B:E2:77:E8:F9:87:74:06:99:55
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial: 0196BA48A87059AD6F63854D9F4442AC7950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 13:00:45 +0000
Manifest this update: Sat 10 May 2025 13:00:45 +0000
Manifest next update: Sun 11 May 2025 13:00:45 +0000
Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: medjjCu+msL8zIjE1SHt4gWvMtktfNK1Xc10abVfTvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:a8:70:59:ad:6f:63:85:4d:9f:44:42:ac:79:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Validity
Not Before: May 10 13:00:45 2025 GMT
Not After : May 11 13:00:45 2025 GMT
Subject: CN=12bb265d46b4de20c9637be277e8f98774069955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:95:b5:80:1e:a2:9e:b2:c3:ae:c1:4d:89:
0f:04:a0:8a:b2:65:de:09:b9:b2:da:ba:e9:af:f4:
c9:1a:26:f0:24:e7:32:6e:3f:12:d6:42:56:3d:92:
ec:27:67:cc:4b:b3:56:8c:e1:b6:65:e5:ee:df:87:
92:f3:0d:2a:f5:ac:73:77:76:7a:7c:d9:00:cb:05:
3f:30:62:47:3f:4b:3e:1e:9c:fd:ab:cc:45:98:93:
24:dc:0d:ae:97:c4:81:89:27:6d:53:5a:4f:87:41:
a1:c5:1e:a6:73:b6:2d:02:83:ea:5b:07:61:eb:ca:
37:40:3e:d0:39:8b:8a:89:b6:c4:a7:2b:77:9e:77:
12:65:42:d8:ce:93:b8:e3:dc:3c:4e:d2:26:2f:3a:
28:0c:df:8a:3c:04:16:08:40:df:29:35:16:48:3c:
4e:fb:24:64:48:e9:7f:23:46:4e:41:1d:13:cb:f5:
61:d4:27:33:d2:cb:b1:46:64:5d:4f:f1:e2:5a:ed:
dd:98:7f:79:f2:5e:09:4f:42:b6:cb:2b:3a:1c:d1:
4c:5f:69:4b:62:3d:05:6c:1f:f4:ad:11:fc:88:84:
03:11:a6:5b:5f:21:4d:ca:63:3b:9b:0f:53:bd:ac:
28:6d:3d:e1:4d:ec:a9:bc:a6:9f:73:e5:58:9b:e6:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BB:26:5D:46:B4:DE:20:C9:63:7B:E2:77:E8:F9:87:74:06:99:55
X509v3 Authority Key Identifier:
keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5c:ca:95:51:bf:a7:93:08:d5:d5:d7:60:69:3f:13:a7:d2:
1f:8f:67:ce:85:f7:1e:c8:90:69:6b:df:6a:49:97:25:03:92:
b5:3d:58:63:6a:9e:c8:92:5a:a3:5b:a7:4e:2f:52:24:e9:9f:
33:de:9e:56:b5:c9:93:85:60:92:2e:f7:02:2f:5b:d4:08:cb:
6c:d3:93:52:cc:0d:44:23:74:1b:cd:c2:63:1e:37:fd:f0:48:
92:4c:3d:50:21:d7:c9:16:aa:42:06:da:57:bb:21:77:50:1a:
21:fe:3a:bb:c1:19:dc:a9:45:93:31:b5:60:0b:aa:05:2a:f8:
21:04:c3:44:d9:1a:43:46:05:82:25:42:51:9e:35:11:6a:16:
ef:3c:33:eb:51:7c:cb:ac:32:10:bb:e2:7e:dd:66:95:0f:53:
41:07:e1:56:66:4b:5e:29:0a:4e:8a:da:63:f0:d4:55:8f:42:
8f:8b:36:94:75:83:80:ef:21:c0:bf:ea:b1:67:72:db:27:7d:
fd:e1:03:86:84:01:d5:13:7e:0e:db:09:f2:18:97:bc:31:d8:
77:ca:09:82:98:5a:77:1a:90:4c:ff:3b:3d:79:0c:61:ea:dc:
9a:66:79:6f:c7:cd:e9:11:bc:24:fa:73:aa:7e:36:a0:8d:22:
6e:0b:12:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:47:19 2025 by rpki-client