Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File: jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier: f8a4hWdgvah4dE9V9NVZRUzRNGZZP1VxuA9syKk9gqk=
Subject key identifier: B8:09:0C:BA:8B:09:B1:DD:C6:9D:76:A8:37:DF:EC:24:D1:5F:5C:8E
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer: /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial: 01965B02AF1B0D26D6CA55B5090FA71547D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number: 0AA9
Signing time: Tue 22 Apr 2025 01:00:24 +0000
Manifest this update: Tue 22 Apr 2025 01:00:24 +0000
Manifest next update: Wed 23 Apr 2025 01:00:24 +0000
Files and hashes: 1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: PwuLamplabIMgzFN6okSVbHHkKf8gkF0IxGmg7mlJj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:af:1b:0d:26:d6:ca:55:b5:09:0f:a7:15:47:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Validity
Not Before: Apr 22 01:00:24 2025 GMT
Not After : Apr 23 01:00:24 2025 GMT
Subject: CN=b8090cba8b09b1ddc69d76a837dfec24d15f5c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:a4:fe:ef:14:f3:67:fe:c3:4e:c2:1c:67:
cb:ee:6c:e9:b0:c6:c2:fe:fb:6c:43:4e:fe:4b:cb:
9d:a2:04:5d:28:2c:52:c1:8f:b5:6d:f6:77:66:90:
0c:1f:16:d5:32:c2:05:82:9a:f0:79:ce:0f:fc:31:
f3:bd:e1:e6:38:e5:6c:be:d8:d2:76:5b:98:70:0c:
47:cb:1b:41:a5:4e:f9:e1:07:71:66:16:1d:00:21:
e6:75:9a:38:e8:c7:d9:3c:4a:7f:74:13:59:cb:14:
9b:71:1c:ae:3a:36:af:ed:03:ff:46:e9:d0:20:83:
b4:4d:2e:e6:5d:ff:91:26:4c:09:08:b4:3b:3f:ec:
6c:09:7a:42:12:a5:15:5f:5c:a7:6b:b3:63:3c:ed:
9c:6c:e3:e0:e5:63:3e:87:b9:1e:a3:6e:8d:01:58:
44:ea:bc:a0:e6:5f:88:7d:ef:20:3a:cc:7f:84:97:
36:19:f9:e5:24:a2:b5:1d:bf:1a:16:07:2e:20:3e:
7c:45:af:43:d9:c2:0e:83:11:55:c0:b6:94:77:48:
79:05:9d:f5:54:26:4a:96:8f:fc:69:00:bc:30:52:
0e:97:ea:62:4f:ec:c3:09:85:cb:5f:6e:4a:cd:be:
a0:33:c9:8d:66:57:c2:4c:f9:33:4f:22:10:29:95:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:09:0C:BA:8B:09:B1:DD:C6:9D:76:A8:37:DF:EC:24:D1:5F:5C:8E
X509v3 Authority Key Identifier:
keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e3:61:b4:91:0f:a0:33:d9:a4:91:9a:fa:14:c3:ed:00:83:
77:47:2c:65:8e:ac:33:32:87:b9:12:ab:14:f8:d6:83:31:31:
86:93:f2:c0:a8:e2:25:0c:24:dd:fa:9f:1c:69:a6:9b:0e:5c:
a5:8e:f4:44:b6:21:2d:38:9a:2b:16:fb:f4:fe:16:b0:e6:4c:
da:8d:a6:c7:c5:4a:3e:a3:b0:d2:2c:76:54:4a:e7:9a:2e:95:
56:e9:a2:d0:d2:2e:c6:3f:d3:54:4f:fc:4d:91:1c:b3:d2:47:
9e:ed:37:e5:c5:8e:e6:91:25:36:1a:fd:07:a9:aa:a3:db:7a:
8c:26:26:05:36:8d:71:21:d1:72:45:e5:62:a9:c3:07:0d:23:
4c:94:f5:f9:b9:ee:be:f5:3c:a8:a1:95:8e:8e:0d:ff:38:1f:
68:9c:7c:d9:04:41:c8:ac:10:15:20:4b:a9:18:db:93:31:e0:
d2:8d:4b:2d:ee:21:69:94:92:a4:08:38:9c:d2:ef:89:d0:b8:
56:5f:e8:26:78:67:f1:8a:e1:be:58:1d:14:4c:a4:96:9a:07:
9b:35:f4:99:d7:bc:a1:f2:ee:84:10:10:f9:9b:78:c7:81:ec:
49:a2:01:2f:83:cf:c6:82:68:f5:d5:56:32:c4:85:d0:1e:09:
b3:85:c2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:28 2025 by rpki-client