Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
File: jHVawZtqHD41NGRn_nDrVR_S7n0.mft (raw, json)
Hash identifier: CMVNMMdZdcK3xA/BaoZh/fxqG1J58sZvANC6hFK1YQU=
Subject key identifier: 5D:64:14:00:09:DE:9C:D5:3C:2F:D5:8E:09:C9:8C:35:46:39:EC:36
Authority key identifier: 8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
Certificate issuer: /CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Certificate serial: 0196556E4B091DAD1AE124C6BFEB7F1BF76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
Manifest number: 0D9F
Signing time: Sun 20 Apr 2025 23:00:13 +0000
Manifest this update: Sun 20 Apr 2025 23:00:13 +0000
Manifest next update: Mon 21 Apr 2025 23:00:13 +0000
Files and hashes: 1: jHVawZtqHD41NGRn_nDrVR_S7n0.crl (hash: gQRLr/1+7xDrJkCFEQWa7sB8KuVGJM6OwjgGn/SAO34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:4b:09:1d:ad:1a:e1:24:c6:bf:eb:7f:1b:f7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Validity
Not Before: Apr 20 23:00:13 2025 GMT
Not After : Apr 21 23:00:13 2025 GMT
Subject: CN=5d64140009de9cd53c2fd58e09c98c354639ec36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:8a:7a:2b:d0:6a:d5:89:ff:ae:e6:65:51:
51:ea:bd:b5:60:c7:77:da:c2:9d:d6:c2:55:cc:6d:
60:2f:9b:8e:47:ad:75:5d:c9:cc:54:d3:21:65:d2:
27:7f:0c:79:af:0b:c1:25:40:25:ed:9d:3f:bd:50:
57:bc:11:0d:4a:74:73:8f:63:30:51:f9:80:c3:d5:
9b:9a:84:af:93:6d:75:3a:65:c8:26:c4:16:a8:ef:
bf:6e:ae:8f:4f:2b:83:11:fd:2a:1d:13:2e:11:5d:
bf:97:4a:ba:10:40:e2:a1:bf:ef:f1:d3:56:a3:77:
e4:1e:d0:dd:1d:d2:81:b3:95:76:fa:20:9c:5b:4d:
b9:37:a7:5e:6d:37:e7:13:b1:c2:fe:9c:aa:46:f6:
50:72:13:02:3a:0d:d3:05:d5:be:03:59:f7:f0:89:
a5:ff:cd:13:30:1b:78:59:c3:5c:16:9c:be:5a:20:
9a:46:7f:16:3e:05:73:38:83:40:17:ca:6d:38:71:
41:41:da:2a:d3:34:97:b8:b4:bc:90:e8:5e:38:87:
97:f6:a8:9e:04:eb:3a:26:ba:94:8b:bf:e2:34:ed:
eb:ae:24:e6:b6:56:3a:33:0c:34:9e:3f:3a:6f:d7:
79:92:0c:c5:77:62:86:c4:e9:9a:04:ac:ef:20:f8:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:64:14:00:09:DE:9C:D5:3C:2F:D5:8E:09:C9:8C:35:46:39:EC:36
X509v3 Authority Key Identifier:
keyid:8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:be:ce:87:e7:08:67:4e:49:b6:d0:63:15:7a:22:36:77:53:
88:c1:54:35:c8:65:6d:4b:dc:b5:12:cc:ff:56:f5:56:55:7b:
ef:98:e2:32:65:41:e9:4b:0e:07:9e:fc:d9:32:dc:8a:18:c7:
70:07:d9:0b:ea:a2:9b:31:ea:e6:b3:51:1f:fd:62:49:fd:75:
dc:4f:fb:ed:ad:a1:13:13:3e:57:4f:69:21:67:ee:c6:9b:5c:
31:20:4e:2c:90:b6:3e:fa:5a:47:c6:02:37:41:58:f5:1a:d0:
1d:17:6b:27:76:8a:cc:c1:eb:9f:1d:1d:da:ae:01:c7:e2:58:
49:64:07:ec:9e:3e:9f:36:f4:eb:de:a5:44:8a:9d:00:9b:a7:
00:6a:c1:31:4e:8c:02:75:25:f0:76:6b:1e:ea:42:5b:8c:20:
c2:9f:f2:2c:e2:0c:c9:0a:df:f9:b3:98:ea:40:a1:78:78:77:
4f:23:6b:49:bd:20:e1:d2:c7:ee:e0:a6:1f:27:4e:ef:17:15:
b1:c5:a9:de:c3:c0:82:12:6c:ff:95:ed:b2:8e:38:c5:65:3b:
d4:9d:b4:08:78:e0:f2:36:7b:11:7a:63:4d:b7:e2:2e:0d:37:
42:39:76:5d:f5:27:7f:f9:8a:ed:c1:68:33:28:5d:d5:e8:ce:
00:04:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:18 2025 by rpki-client