Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: nDqaMR6TB7wmtTdL7e9q/zCRzVeDLJzh4ih2VYio6pU=
Subject key identifier: 0F:E8:05:2D:85:D1:5C:65:A3:62:DB:6D:38:30:66:30:CB:A7:58:90
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 01964C6B89D1867448A528387E753C77F254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 05:00:38 +0000
Manifest this update: Sat 19 Apr 2025 05:00:38 +0000
Manifest next update: Sun 20 Apr 2025 05:00:38 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: hQHdKzrqEWR7pN2mSqF55ahQywDNXlLexKOTB1Nm+RA=)
2: y1lINwCoifyovhdAeAf2rHi3ZHU.roa (hash: wdFrAh4YUjbnThTYrymA+tW+SWC0S+T+ZCRyXfvs7nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:89:d1:86:74:48:a5:28:38:7e:75:3c:77:f2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Apr 19 05:00:38 2025 GMT
Not After : Apr 20 05:00:38 2025 GMT
Subject: CN=0fe8052d85d15c65a362db6d38306630cba75890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:30:59:b3:ae:52:1d:3d:a5:53:d3:cd:68:
7e:db:64:ef:09:0c:73:cd:9b:46:c6:af:ad:53:ae:
fb:5f:09:f6:0e:e0:d5:35:70:61:e5:6c:e7:d5:8f:
7f:92:64:33:e8:8e:ee:3e:c9:a0:8b:b5:cf:09:58:
ee:cf:c6:2c:c2:e7:ab:29:87:c8:d0:99:66:d3:a3:
f1:b5:6f:dd:4f:2d:b0:e1:bf:b7:99:74:ce:92:97:
49:96:7d:ae:71:b2:e8:19:b2:e5:e3:8d:01:3a:b2:
18:aa:4d:2f:3d:8e:ab:1a:2e:e8:99:e7:42:a9:44:
26:82:8d:00:c7:0a:74:8e:8e:91:e2:cb:24:eb:2c:
e7:6f:3d:b7:f9:d2:47:cc:ed:ea:39:74:1f:80:83:
19:21:30:b6:34:b7:8c:c2:43:40:be:64:37:93:56:
b0:11:32:1b:b9:47:36:aa:9b:bf:8a:52:81:54:9b:
4b:22:9e:fb:1b:43:1d:98:7f:93:8c:0f:9e:c1:03:
da:87:12:11:c9:74:b8:ed:16:01:17:b2:35:b3:2e:
ba:47:78:3f:df:45:ba:21:5d:72:a2:17:43:b8:a3:
77:1a:b5:12:89:41:76:98:ad:2a:70:b1:52:93:f9:
92:6e:95:9e:4c:37:af:c7:12:09:2a:ca:53:f8:05:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E8:05:2D:85:D1:5C:65:A3:62:DB:6D:38:30:66:30:CB:A7:58:90
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fd:83:3e:dd:44:48:ca:8c:f0:bb:40:ab:38:fe:7c:88:4a:
b9:9d:f0:6e:ef:a5:ba:5b:9a:8c:f4:5e:e1:ca:2e:d6:20:d5:
d4:9c:64:2b:a1:1f:2c:c8:ae:cd:38:48:32:7f:ce:cc:0b:c1:
71:da:bf:a7:1d:87:76:49:fe:ec:f2:c6:f0:b1:d7:7e:e3:9b:
df:85:ed:4d:aa:e8:74:6b:d2:42:c8:04:af:7a:c0:f0:a1:b3:
4c:ef:9d:dd:37:4b:98:14:8a:01:c7:21:c0:32:85:8b:f0:bc:
cc:0a:47:19:86:2e:e0:e2:91:6b:3c:ce:63:fc:ce:1f:70:30:
1a:fa:5e:82:9b:33:5e:c7:2c:a4:44:f2:da:35:63:1a:04:35:
58:bb:e8:e5:c1:66:7d:c8:4c:e8:d9:90:d4:51:f9:fa:9e:52:
f5:49:2f:dd:89:e0:cd:fa:0d:a9:27:3d:e3:6c:ef:93:b1:49:
b0:66:06:f2:ad:91:35:70:d6:1f:2f:4b:33:0d:05:f4:a0:b8:
0a:62:f6:55:7c:07:43:fd:67:63:0e:81:b0:0b:fe:34:85:4e:
85:31:c5:f7:d3:14:c7:18:f0:b6:c3:75:db:ea:1b:de:79:80:
a1:fb:05:03:ee:b1:6b:5e:e8:c8:77:10:a9:a1:77:75:b9:5d:
01:04:21:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:13 2025 by rpki-client