Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
File: J2zuYEMhsPEryjZ7VMBzmqil8To.mft (raw, json)
Hash identifier: LDNqqJVz2gE3rWejTv4ki/dLvNbzFNFxmS7zyy7kd8c=
Subject key identifier: 87:46:69:91:7C:E4:73:E4:3E:7D:0D:40:E4:B4:DE:7A:88:2E:DF:91
Authority key identifier: 27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
Certificate issuer: /CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Certificate serial: 01974A7BA4D077CC45B83389AC3B94EC0930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
Manifest number: 0ECF
Signing time: Sat 07 Jun 2025 13:01:46 +0000
Manifest this update: Sat 07 Jun 2025 13:01:46 +0000
Manifest next update: Sun 08 Jun 2025 13:01:46 +0000
Files and hashes: 1: J2zuYEMhsPEryjZ7VMBzmqil8To.crl (hash: eQav5aO2g2Pz2U4AgAvvNKYz171wFlDo3U6/ZDqNiS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:a4:d0:77:cc:45:b8:33:89:ac:3b:94:ec:09:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Validity
Not Before: Jun 7 13:01:46 2025 GMT
Not After : Jun 8 13:01:46 2025 GMT
Subject: CN=874669917ce473e43e7d0d40e4b4de7a882edf91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:d7:47:bb:aa:30:41:fd:89:ba:e6:3c:ca:
89:b1:79:04:6d:66:24:85:c9:a8:c2:97:a6:55:c6:
c0:bb:6c:fd:0f:25:77:8d:0d:6e:a5:97:e3:84:56:
bf:c1:ff:f6:a5:17:49:39:25:d3:61:05:74:10:d0:
4b:7f:79:d4:ea:db:a0:f1:96:b9:4b:bb:e6:b0:ac:
30:db:d7:33:e6:4b:f0:8f:ba:54:2c:35:8c:d0:dc:
91:03:17:14:64:32:22:57:d9:34:fe:8f:21:35:c0:
63:14:26:68:2e:8c:2a:f8:76:8d:08:14:9b:06:db:
bd:cc:e4:ff:c0:c6:7c:3d:b0:67:11:aa:29:7b:bb:
16:e7:7a:a4:8f:48:18:19:28:da:4d:68:a8:66:b5:
6d:c3:ad:b0:96:d7:ef:55:2b:a2:30:58:c6:fe:ae:
7b:18:c5:77:38:d2:9e:46:00:19:fb:4b:43:a8:3d:
01:cc:ee:37:33:68:f1:fc:14:ae:e1:ca:fc:ec:46:
16:69:ff:49:54:a4:f8:42:74:f2:da:91:d4:d8:99:
60:1c:ed:92:82:70:63:19:b7:4b:d0:9b:ca:30:1b:
20:b4:4a:3c:b7:d7:65:51:b4:d0:0c:0c:3b:f5:e7:
f1:aa:84:d7:dd:eb:1c:61:23:0c:bb:23:68:3b:66:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:46:69:91:7C:E4:73:E4:3E:7D:0D:40:E4:B4:DE:7A:88:2E:DF:91
X509v3 Authority Key Identifier:
keyid:27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1e:1f:70:20:ca:d9:13:d4:65:1a:1b:15:0d:31:87:e8:ec:
51:e9:a6:d8:3c:65:7e:e2:20:11:b9:db:e2:f7:fa:6d:ce:4e:
13:59:5d:12:6b:18:58:97:fc:cb:8a:e0:ca:2c:91:48:78:ea:
be:c8:76:b4:c7:6d:42:87:8a:cc:c4:36:56:dd:d3:a1:6f:04:
72:49:5d:73:39:a1:9d:54:8a:3d:05:e3:18:88:c3:57:16:ed:
9c:6d:33:d9:63:71:5e:ef:65:87:3c:7a:9a:7b:f6:57:30:59:
a8:c1:7c:20:a7:22:dd:71:14:7f:54:82:03:91:f1:62:0e:c6:
ba:34:6e:f5:40:dc:36:5b:89:d2:dd:9f:5e:94:25:a3:43:44:
64:30:c9:24:a6:de:bf:67:e1:62:02:91:58:e6:f5:66:47:3f:
0a:f7:e4:24:1d:11:17:71:b7:d2:69:f2:55:1a:e9:cc:d2:dc:
9f:61:2c:c1:0e:e3:67:24:d2:50:b4:8e:15:50:f7:a7:10:93:
8d:39:d5:4d:15:9f:8f:4f:20:6d:0e:65:af:58:4b:d2:79:f4:
22:61:d5:a4:2a:ae:6f:64:35:42:7f:20:07:7f:14:e4:aa:03:
9c:e8:60:08:23:e8:cf:b5:db:6e:b4:e8:a9:4d:e4:eb:15:30:
8f:89:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:54 2025 by rpki-client