Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
File: RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft (raw, json)
Hash identifier: uvK0s3sJalh9HE1wFa9cxvtIRUeI3y+V4DMQR/9L4hI=
Subject key identifier: ED:AC:8A:82:AF:01:FB:F2:2A:9A:4B:25:F0:80:BD:3A:02:F6:45:F3
Authority key identifier: 46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
Certificate issuer: /CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Certificate serial: 0196BD8090039EAD1DF3270794A5DEDA7B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
Manifest number: 152F
Signing time: Sun 11 May 2025 04:00:41 +0000
Manifest this update: Sun 11 May 2025 04:00:41 +0000
Manifest next update: Mon 12 May 2025 04:00:41 +0000
Files and hashes: 1: RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl (hash: uNVoB8Iab5Ja/iMlELXltiBzuyRi7uO524WgNa8xBrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:90:03:9e:ad:1d:f3:27:07:94:a5:de:da:7b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Validity
Not Before: May 11 04:00:41 2025 GMT
Not After : May 12 04:00:41 2025 GMT
Subject: CN=edac8a82af01fbf22a9a4b25f080bd3a02f645f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:20:9e:b3:14:02:4c:73:a2:5e:10:fa:44:
75:7e:c9:62:a7:83:8f:64:4d:d3:68:07:cf:40:ab:
9e:c1:d1:c8:b2:95:41:96:2d:2c:04:42:19:d7:44:
c1:5e:6e:be:21:7b:8c:9c:8b:b5:3a:80:45:d7:9b:
5e:8c:2c:69:66:48:a8:12:a4:66:47:91:0b:ae:fa:
15:ad:10:8b:f8:22:3e:e2:66:fa:70:7f:f4:36:9a:
fd:49:32:d0:21:97:32:a6:1c:43:06:78:a3:39:cd:
f1:5f:e5:98:3d:8c:8e:c1:a2:79:1d:25:3a:7d:0e:
20:31:4b:9a:85:35:70:e6:7d:03:fc:48:96:0e:37:
9f:42:92:37:d7:6f:42:1b:4e:b1:47:47:23:18:e4:
40:d1:d4:f2:20:ff:f1:11:17:28:25:b4:2b:1d:93:
fd:6f:a3:41:92:27:5a:96:7a:7b:b2:f4:3d:c8:46:
a2:76:cf:de:e2:d6:cc:73:24:3f:07:48:76:20:57:
9f:90:66:a3:05:47:4b:af:ab:66:c3:64:3a:76:2d:
4b:36:73:17:43:83:4d:66:2e:5f:2a:5e:bb:87:27:
78:b0:19:7c:48:9f:8e:01:a2:dc:86:cd:2a:21:5f:
30:07:8f:cd:e7:97:a8:2b:a7:a8:3b:f0:7f:70:f8:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AC:8A:82:AF:01:FB:F2:2A:9A:4B:25:F0:80:BD:3A:02:F6:45:F3
X509v3 Authority Key Identifier:
keyid:46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cd:3b:22:4c:06:05:cb:6f:fc:18:65:63:ce:4a:fd:44:9c:
c2:70:ff:f7:56:02:fd:21:b5:15:b2:82:31:90:98:2d:ab:fb:
70:11:81:eb:3f:1a:06:fe:0c:c2:32:76:15:79:c7:0d:4d:a6:
70:7f:73:90:59:24:db:54:12:2e:04:d2:17:d7:2f:95:3f:33:
7c:e6:9d:64:eb:d9:2b:db:d7:22:09:9e:cc:fc:71:b4:57:4a:
d9:53:c9:35:4f:26:8a:c3:0a:fd:b0:70:f3:4a:82:53:14:a6:
58:ff:0f:32:4f:40:4a:2e:53:2f:1f:a2:32:90:7f:56:d0:d1:
83:c6:d9:15:d4:07:83:22:c2:15:04:03:47:6a:d7:cc:77:55:
83:dd:ab:1f:71:dd:48:40:49:b1:1d:c5:6d:c5:8f:a6:43:6e:
a7:9f:27:2c:46:ca:55:90:79:f2:30:db:48:e5:30:70:5f:24:
4c:77:42:34:0c:1d:50:12:ff:a6:45:c8:98:c1:c9:5a:6d:94:
75:d9:15:e7:7b:7e:15:88:df:de:31:51:b8:8d:55:29:cc:90:
52:52:93:56:f2:90:41:03:b9:96:1e:a5:8e:5c:af:91:74:c8:
f2:00:df:20:66:60:02:7c:86:da:17:16:9a:13:f5:c7:0c:fe:
74:96:e6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:14:06 2025 by rpki-client