Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier: sYvbKY1XiSefG3xJzy0iNxAodujyFns8Y8R0ATwTEG8=
Subject key identifier: D3:BF:DE:13:E3:A8:C4:BF:4F:60:4E:35:B6:22:F9:5A:80:A9:32:DE
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 0196A654C122EC5CEB5183DB9E4774290C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number: 04D2
Signing time: Tue 06 May 2025 16:01:34 +0000
Manifest this update: Tue 06 May 2025 16:01:34 +0000
Manifest next update: Wed 07 May 2025 16:01:34 +0000
Files and hashes: 1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: 6fqvl1oBd1VnhPt7O+801lCgLlAYyiZUNGFb11C/Ok4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:c1:22:ec:5c:eb:51:83:db:9e:47:74:29:0c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: May 6 16:01:34 2025 GMT
Not After : May 7 16:01:34 2025 GMT
Subject: CN=d3bfde13e3a8c4bf4f604e35b622f95a80a932de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:2c:9b:90:8c:70:61:a4:bc:ab:32:fc:19:
19:6a:f3:86:4d:c1:19:27:89:0d:0c:ad:59:ca:dd:
82:6e:3a:6f:5e:ba:8a:19:96:63:45:f9:02:e8:e5:
a0:5c:6e:1d:1a:11:a9:b1:7f:70:cc:09:92:a2:70:
14:60:5d:77:f2:55:dd:18:22:4e:7c:80:e3:d6:d1:
02:a8:4f:9b:c6:e0:1f:ae:65:76:f3:9c:5e:c8:9c:
2e:30:f3:14:54:67:54:98:c7:ac:e0:44:14:56:44:
9e:27:a6:42:e4:29:8c:56:00:e6:09:1a:4c:09:d6:
f4:de:f4:75:5c:01:2a:68:d6:fe:0c:8a:fa:09:5f:
95:ec:43:ce:d8:1d:2e:77:ef:f2:0e:bc:8f:be:7e:
a0:6e:a5:6e:97:0a:fb:32:ee:61:43:cf:a8:eb:91:
53:a6:de:8a:09:1d:83:57:35:31:1b:d2:b3:a0:a3:
ac:65:31:2f:10:15:13:0f:b2:12:7e:0e:0c:05:5c:
8d:72:c4:04:1c:72:4b:8c:63:43:10:67:03:bd:32:
6b:8c:88:03:0f:c8:8f:8a:64:71:c8:56:8e:c1:d2:
6a:b0:ec:a7:2a:3b:af:f4:6e:6c:da:82:be:0b:39:
1d:b2:fc:04:6e:55:e2:3c:a5:ec:e3:98:16:13:49:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BF:DE:13:E3:A8:C4:BF:4F:60:4E:35:B6:22:F9:5A:80:A9:32:DE
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2a:00:da:d1:cb:69:ac:5d:d7:07:f4:52:92:43:67:e4:4f:
17:55:b1:c2:af:ad:8c:65:18:bc:c5:5d:c2:ee:e8:ad:0b:29:
62:43:b6:9c:6b:55:26:6a:db:d9:e2:6c:5c:b4:78:1a:8d:3f:
c2:5f:79:6e:68:a4:e5:90:72:46:5a:dc:73:8a:25:8a:31:a4:
0e:06:70:ef:a9:bb:bf:07:8d:82:9f:b5:3b:cf:52:1b:b1:c3:
e8:b8:37:81:16:e4:de:e2:8b:98:f7:49:00:b7:4e:5d:1a:14:
63:92:c6:b9:e8:15:63:97:b4:f9:18:80:c6:06:20:76:04:20:
d3:d6:71:20:dc:aa:26:d2:8e:b0:ec:09:3d:41:93:22:89:a2:
e1:e0:93:4f:bf:49:22:0e:8e:2f:3d:01:8e:53:b4:72:2c:b7:
f2:22:4f:22:53:e2:0c:d3:96:ae:4c:2f:ac:0c:96:79:94:93:
a2:2b:47:9a:29:a1:41:fb:c0:c4:1d:8f:ff:4b:47:9f:b1:af:
96:de:2e:67:de:2c:31:e5:bf:8b:16:62:08:8b:9c:a9:f9:08:
8a:17:f0:cd:4e:f1:09:2a:b6:8d:58:0b:af:99:df:5e:2c:9d:
46:04:f6:5f:36:ee:53:b0:8f:5e:d8:62:9c:c1:25:e7:14:99:
b8:d2:d5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:23:20 2025 by rpki-client