Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: w/KWe3Gq+88Eop5o5MH9FznVChrzH6jOfDAplYD47M0=
Subject key identifier: 3D:95:36:41:1A:6A:F9:A1:8C:32:AB:F0:16:46:4B:16:7A:33:6B:CC
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 0197477A2873E0FA5060183BD0BC1B4FA7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 23:01:17 +0000
Manifest this update: Fri 06 Jun 2025 23:01:17 +0000
Manifest next update: Sat 07 Jun 2025 23:01:17 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: mQTdyaHEVuoWIuJOJfcYoRDNdwk0vH8QXGO76Si+ld4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:28:73:e0:fa:50:60:18:3b:d0:bc:1b:4f:a7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Jun 6 23:01:17 2025 GMT
Not After : Jun 7 23:01:17 2025 GMT
Subject: CN=3d9536411a6af9a18c32abf016464b167a336bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:28:9c:08:36:7c:5d:1b:4d:44:7a:2d:e5:
a5:e0:e2:b2:4c:5d:a4:aa:e5:ac:d8:bb:2b:b9:17:
01:b9:f3:4e:89:03:44:55:ca:54:71:33:b9:2b:27:
ba:87:84:57:c9:8c:d5:06:21:37:fb:8e:ea:01:de:
2c:b1:a3:9c:ba:23:fc:7a:cf:aa:1f:2c:70:4f:7c:
59:95:30:b1:78:24:41:83:9a:a5:9b:26:72:92:f1:
ce:53:2d:f3:5c:3e:d2:7e:88:d7:d2:f1:8c:74:97:
47:9c:24:2b:78:c0:37:ad:4d:87:c0:7c:b9:ca:0b:
9d:b0:d1:f8:3d:b4:7c:95:77:d7:9d:f2:f8:8f:7d:
96:af:08:0d:e0:9c:92:aa:45:c2:0a:dd:b7:5e:43:
1d:24:05:49:b9:67:de:ee:fb:61:46:76:8b:b7:7c:
30:05:53:3e:4d:72:2c:15:dc:36:6a:14:a7:73:2e:
32:00:ed:1c:68:ab:3e:55:06:d3:15:32:54:e5:24:
83:12:8e:31:1e:dc:b4:19:e8:4b:b8:60:a2:c6:37:
60:91:c6:be:5b:5f:39:04:60:f7:ac:6e:c4:11:ac:
84:c3:eb:63:0c:3e:d7:e0:57:29:4f:c6:bd:c2:4a:
f8:50:bf:c7:a9:6a:c4:e4:1e:4f:56:a9:23:0d:f4:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:95:36:41:1A:6A:F9:A1:8C:32:AB:F0:16:46:4B:16:7A:33:6B:CC
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5d:c2:d1:b4:c8:7a:72:01:02:11:44:4c:b0:15:a5:99:f9:
91:3c:81:62:08:21:db:ca:9c:50:71:ad:e4:f1:56:b3:c1:11:
d0:e2:78:a7:9c:b6:a2:52:31:4e:f9:1e:45:04:5b:42:e8:3a:
d8:0e:38:cb:81:f4:b5:b7:ed:73:39:03:3d:04:c6:48:7a:34:
99:9c:93:ea:f6:8c:ec:4f:87:5d:a9:6d:90:8f:e3:35:be:c3:
0f:ad:7c:37:c2:61:02:25:0c:e2:2d:5b:9d:3f:91:85:76:3f:
24:e4:45:a4:b4:48:df:a8:c8:23:96:e7:35:b9:08:ad:40:ab:
72:35:4c:91:ea:6d:9a:ba:da:af:ce:56:08:aa:68:f6:18:9b:
26:76:c1:ab:82:30:53:76:90:31:94:fa:75:95:f6:aa:55:e1:
fb:18:e4:17:47:75:f8:c2:27:93:18:91:93:aa:79:46:ba:dd:
4b:91:a1:a8:6f:da:53:f2:05:5c:56:1e:0b:5c:5b:67:75:50:
42:55:d7:31:9b:61:7d:fc:46:28:2b:a1:f6:a9:70:28:08:37:
86:a1:83:b7:eb:48:c2:ce:58:e8:86:dd:fb:d0:e4:d8:63:13:
58:fe:b8:f5:2a:07:88:ce:c0:cf:d4:09:f6:50:07:aa:b8:6f:
77:89:98:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:28 2025 by rpki-client