Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier: +ScwurRM46f4TmDfPi10bIbAkM9OOAGUwYNlUSyWG3Y=
Subject key identifier: DD:76:11:4E:D5:FB:3A:E7:8E:5A:99:41:1C:66:69:05:BC:AF:C6:A1
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 019655381C379DE434F5A2F96CE48D4364AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number: 1319
Signing time: Sun 20 Apr 2025 22:01:02 +0000
Manifest this update: Sun 20 Apr 2025 22:01:02 +0000
Manifest next update: Mon 21 Apr 2025 22:01:02 +0000
Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: bfu87MpLm4Zc/1w7xMWqiQD9igJEhKMHTyjXA/wVFmk=)
2: ShfkVecVvyoW3_YQq7LwcMaYmQs.roa (hash: BoQNVikNhGTcu9edVXF4u7v7ipMyHbA4n2LulfglPKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:1c:37:9d:e4:34:f5:a2:f9:6c:e4:8d:43:64:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: Apr 20 22:01:02 2025 GMT
Not After : Apr 21 22:01:02 2025 GMT
Subject: CN=dd76114ed5fb3ae78e5a99411c666905bcafc6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:ba:ee:04:8b:d5:da:35:41:12:8d:ca:02:
c9:bd:27:b3:b0:b9:44:b7:21:5d:bf:ea:7e:e2:d7:
07:1b:6a:14:38:c6:ef:86:5b:a2:79:b3:d8:14:2f:
d1:d7:cb:3b:d9:07:48:be:40:b9:ba:58:14:d7:d3:
d2:40:16:a1:99:de:b4:80:93:a9:4c:4d:67:e1:95:
d1:3d:95:46:c9:cb:8e:0c:cc:b9:c5:4d:f1:a8:e5:
7d:c8:cd:82:30:b6:ad:48:5a:0e:b1:88:f6:c5:d4:
76:19:3c:32:7a:e1:64:3a:8d:82:92:22:64:92:0d:
5a:26:05:c8:0d:ac:06:87:ba:f0:b8:c1:8e:48:1d:
21:63:a3:af:09:dd:59:17:63:b9:35:ff:45:19:7a:
be:47:91:6b:53:bb:12:e3:18:0e:3f:5f:f7:e4:af:
98:b1:a9:e4:f8:e4:8b:4a:3b:1e:1e:12:41:88:b1:
e6:ed:b6:06:e1:71:33:fc:09:6f:01:3f:7b:3a:3d:
d2:bd:64:75:cf:a6:bc:b3:40:d1:7c:65:8b:73:04:
50:bf:9d:8a:3a:7d:b3:ab:5f:4d:c7:20:2b:6d:e6:
ba:61:3f:fd:06:84:5f:15:6d:0a:b0:d8:05:51:10:
ca:ea:30:0b:dd:74:14:88:2e:e6:b4:25:dd:4c:d5:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:76:11:4E:D5:FB:3A:E7:8E:5A:99:41:1C:66:69:05:BC:AF:C6:A1
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:08:86:41:82:75:b1:57:dc:11:ae:06:db:3e:f5:a5:26:82:
a4:ae:8f:04:45:b0:f5:4d:a7:5d:ae:46:e0:30:d6:7e:1c:31:
14:92:7c:7d:2e:55:48:d6:db:08:78:ef:2e:13:36:e5:38:e6:
86:72:2b:15:a8:81:b4:96:3b:8a:35:13:38:ab:d9:b2:06:b5:
c9:0f:23:34:78:fa:34:71:80:49:bb:be:c8:d2:e7:f5:98:41:
42:f9:ec:d9:e4:1f:f0:50:a1:c5:31:98:49:5c:e5:87:d1:45:
e5:5a:bd:39:27:b1:20:cd:07:b8:02:bd:27:03:83:92:b9:14:
36:38:c0:db:11:4f:36:bb:c1:2e:5c:da:65:b3:d8:98:af:84:
95:29:ec:de:40:56:9b:4b:da:01:2a:4d:4e:6e:e1:30:24:f9:
58:f4:19:94:a8:e5:ca:4f:2a:46:a7:72:98:1b:ea:c4:a0:fe:
06:48:26:ff:d7:a5:f6:d8:c8:9f:5d:7a:88:7a:ac:43:0b:3e:
3e:de:10:32:e2:c7:d5:3d:d0:0f:ed:d2:bb:98:df:33:f3:36:
32:7b:18:11:a1:af:f6:e2:dd:55:d4:8d:34:28:3c:35:7b:e6:
7d:0f:ca:90:9e:58:79:35:91:ba:31:4f:a6:4c:bc:9a:aa:94:
30:55:03:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:25 2025 by rpki-client