Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
File: JkQpgYmVnJWm1KdLdU9JlqWltlw.mft (raw, json)
Hash identifier: p+coiEYh4+vXW/zl4ZQ2pJeBeaDJLpeuFLoB46dFwqc=
Subject key identifier: C3:CD:10:96:ED:3D:C2:98:C2:1D:96:D8:0B:34:2D:6D:48:F1:1D:A2
Authority key identifier: 26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
Certificate issuer: /CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Certificate serial: 01964D7EF4760039FA8B78FAD8086B102586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 10:01:27 +0000
Manifest this update: Sat 19 Apr 2025 10:01:27 +0000
Manifest next update: Sun 20 Apr 2025 10:01:27 +0000
Files and hashes: 1: JkQpgYmVnJWm1KdLdU9JlqWltlw.crl (hash: 13VETN2CMkBV/zXwMGgzjIDFjWs6UMI7kL+qOA2nyCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:f4:76:00:39:fa:8b:78:fa:d8:08:6b:10:25:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Validity
Not Before: Apr 19 10:01:27 2025 GMT
Not After : Apr 20 10:01:27 2025 GMT
Subject: CN=c3cd1096ed3dc298c21d96d80b342d6d48f11da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:5b:59:88:02:62:de:0e:0f:f1:85:66:92:
a4:0b:51:33:f2:1a:da:22:83:1c:4f:70:ac:47:8a:
79:73:b8:ee:9e:c0:23:e8:cb:a3:e0:91:22:fe:7f:
a9:7b:c3:40:6e:da:65:41:50:e0:60:59:74:14:5c:
ba:90:36:01:63:0a:73:36:22:f6:b4:31:95:01:3f:
50:54:29:bc:ac:57:b2:80:a2:84:67:42:3f:ce:9d:
dc:df:cc:6d:17:c4:ac:47:12:c9:89:75:89:27:73:
4f:3b:bf:52:5f:ff:48:eb:e3:5d:13:5a:d9:1a:78:
4b:78:b9:2f:4c:56:cf:c9:eb:77:e1:dc:34:cb:6e:
77:46:21:16:2a:84:47:80:ba:d5:10:c7:6c:f0:49:
d2:db:f7:c2:ff:6e:d1:c8:7c:fb:da:e6:05:c0:5c:
6b:2a:17:00:0e:f2:62:7f:f1:ae:05:99:3b:4b:f4:
b1:a4:4f:e4:9c:21:39:bf:e8:f5:76:d7:66:47:1c:
e4:7c:8a:19:05:ec:66:93:cb:06:73:1c:a9:1e:7f:
33:7d:90:24:f5:5d:be:40:7c:0b:cd:49:c9:8d:a7:
90:a1:a0:b2:39:0c:53:76:be:aa:2c:28:90:d0:96:
87:b3:bf:25:61:ed:da:44:36:03:ad:53:b4:2b:d9:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CD:10:96:ED:3D:C2:98:C2:1D:96:D8:0B:34:2D:6D:48:F1:1D:A2
X509v3 Authority Key Identifier:
keyid:26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:60:95:d7:7b:ab:fb:59:1b:d3:45:81:3d:d1:a8:29:ca:b1:
08:01:b4:e5:23:be:3c:eb:c8:32:8b:cb:de:30:72:e8:e9:76:
67:7c:5c:cc:0c:3e:71:03:43:3f:c7:ec:d3:34:8c:08:1a:ed:
97:fd:c9:e4:2f:27:86:8b:7c:d6:04:93:41:83:d7:da:b8:2f:
34:e2:c3:50:17:30:b9:e3:a4:12:c3:34:4c:6a:92:12:7e:45:
a9:e6:47:81:5c:4f:3c:db:62:29:34:66:dd:1e:39:fe:a2:a8:
9b:96:ea:b2:f9:cd:70:7b:c2:c1:9e:9c:b5:82:d8:17:b4:f0:
52:e3:89:d9:c8:9b:d2:6c:0d:97:7c:80:87:35:6a:b4:8a:e8:
d8:6a:3a:b2:67:43:e1:2b:99:e6:34:31:0b:d8:31:f3:a9:1b:
06:f1:6d:3f:33:c9:78:d8:24:c3:25:74:c1:74:8c:99:49:3e:
b5:ee:52:2c:ed:a9:91:bc:59:54:32:97:82:0a:19:df:3f:17:
46:b1:8d:89:79:a7:5d:27:11:2f:40:db:13:72:da:03:3d:dc:
85:c5:c7:54:79:fe:0f:f9:40:2c:e7:2c:69:67:6d:e7:4d:b1:
57:3b:a9:70:3e:48:fa:70:9f:9e:33:08:ae:b6:a4:94:c2:18:
c5:26:53:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfvR2ADn6i3j62AhrECWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDQyOTgxODk5NTljOTVhNmQ0YTc0Yjc1NGY0OTk2YTVh
NWI2NWMwHhcNMjUwNDE5MTAwMTI3WhcNMjUwNDIwMTAwMTI3WjAzMTEwLwYDVQQD
EyhjM2NkMTA5NmVkM2RjMjk4YzIxZDk2ZDgwYjM0MmQ2ZDQ4ZjExZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0pbWYgCYt4OD/GFZpKkC1Ez8hra
IoMcT3CsR4p5c7junsAj6Muj4JEi/n+pe8NAbtplQVDgYFl0FFy6kDYBYwpzNiL2
tDGVAT9QVCm8rFeygKKEZ0I/zp3c38xtF8SsRxLJiXWJJ3NPO79SX/9I6+NdE1rZ
GnhLeLkvTFbPyet34dw0y253RiEWKoRHgLrVEMds8EnS2/fC/27RyHz72uYFwFxr
KhcADvJif/GuBZk7S/SxpE/knCE5v+j1dtdmRxzkfIoZBexmk8sGcxypHn8zfZAk
9V2+QHwLzUnJjaeQoaCyOQxTdr6qLCiQ0JaHs78lYe3aRDYDrVO0K9kMLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPNEJbtPcKYwh2W2As0LW1I8R2iMB8GA1UdIwQY
MBaAFCZEKYGJlZyVptSnS3VPSZalpbZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtRcGdZbVZuSldtMUtkTGRVOUpscVdsdGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZDE0ZDAtYmU4Yi00MTcwLTlmZDgt
MDdjZDRhMDYxYzgwLzEvSmtRcGdZbVZuSldtMUtkTGRVOUpscVdsdGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZDE0ZDAtYmU4Yi00MTcwLTlmZDgtMDdjZDRhMDYxYzgw
LzEvSmtRcGdZbVZuSldtMUtkTGRVOUpscVdsdGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2CV13ur
+1kb00WBPdGoKcqxCAG05SO+POvIMovL3jBy6Ol2Z3xczAw+cQNDP8fs0zSMCBrt
l/3J5C8nhot81gSTQYPX2rgvNOLDUBcwueOkEsM0TGqSEn5FqeZHgVxPPNtiKTRm
3R45/qKom5bqsvnNcHvCwZ6ctYLYF7TwUuOJ2cib0mwNl3yAhzVqtIro2Go6smdD
4SuZ5jQxC9gx86kbBvFtPzPJeNgkwyV0wXSMmUk+te5SLO2pkbxZVDKXggoZ3z8X
RrGNiXmnXScRL0DbE3LaAz3chcXHVHn+D/lALOcsaWdt502xVzupcD5I+nCfnjMI
rraklMIYxSZTPg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:35:00 2025 by rpki-client