Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File: sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier: m4Uv7CDoopFCSbot9A4Zc30zGF9++HzOabqePFQcjUE=
Subject key identifier: B5:B9:5C:4B:96:6F:2B:4E:ED:52:DA:29:8E:71:88:1A:01:B9:28:58
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 01958BF27DE9A2555957A72C0D24AA4725A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 20:01:19 +0000
Manifest this update: Wed 12 Mar 2025 20:01:19 +0000
Manifest next update: Thu 13 Mar 2025 20:01:19 +0000
Files and hashes: 1: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: 4m5Sfmngze+DrQAflA2acm3ZY5lLdr9ewBb9Tv1zE+w=)
2: v0rFapiuVgAPd3myx6BzGGJPu3Q.roa (hash: xPkjdAicyKc46/gVu1t411DskLBNUbMsE7SCd3XdA1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:7d:e9:a2:55:59:57:a7:2c:0d:24:aa:47:25:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: Mar 12 20:01:19 2025 GMT
Not After : Mar 13 20:01:19 2025 GMT
Subject: CN=b5b95c4b966f2b4eed52da298e71881a01b92858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:37:68:4c:6f:8c:43:49:69:42:c3:e1:02:
6e:e7:36:d8:25:ac:a7:91:ca:e1:fe:80:0d:8c:b1:
56:d3:ee:14:06:60:de:91:ba:45:cb:21:8e:4d:9c:
7e:6c:f1:06:b3:f3:ab:0a:fc:e5:03:1c:f0:76:1a:
7d:dc:dc:e9:b3:ec:16:16:8b:c5:b2:07:6b:38:99:
4d:71:7b:aa:17:bb:ff:f3:9f:7b:e9:ca:21:93:a3:
33:00:d2:83:eb:3b:99:cd:c7:80:72:89:ef:b2:f2:
ac:e8:dd:5c:b0:09:0c:4d:d7:cb:13:67:ea:79:e3:
27:6b:87:53:26:a5:86:df:a1:84:ee:8b:3a:6f:96:
d6:f3:cf:cf:3f:17:fe:ee:50:4f:f0:b9:f6:57:8d:
7f:d4:c9:a6:9a:66:4d:38:af:3d:4c:7a:94:0c:3a:
13:84:8a:5d:86:c7:2a:c8:8c:db:78:63:27:8d:c7:
ec:da:97:9f:9e:12:9e:6f:b2:7c:1f:db:5b:27:ec:
26:42:24:d0:88:71:8d:e3:92:6a:4a:fb:ec:c0:52:
73:75:af:57:a3:29:fe:21:f2:43:25:b9:bf:16:c0:
05:d9:d7:37:08:e6:cc:6c:77:86:2e:42:aa:fc:d9:
e6:b4:3d:8e:96:58:3e:43:69:40:20:cc:e4:c6:9d:
42:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B9:5C:4B:96:6F:2B:4E:ED:52:DA:29:8E:71:88:1A:01:B9:28:58
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ed:d2:de:78:b5:23:ac:4d:07:c0:45:af:bd:19:33:09:70:
2e:57:cf:30:34:e9:00:8b:12:ab:5f:b4:d0:dd:e1:1d:87:7a:
f2:1d:7d:46:7d:87:63:84:6d:85:d3:bc:45:9c:1b:b2:33:82:
e2:70:43:ab:a0:39:5e:24:9e:b6:71:8d:61:cc:ce:27:ba:71:
7e:7f:9b:71:fa:84:ab:84:16:08:eb:5c:ae:28:22:6f:3a:63:
6a:c4:1f:81:35:63:e6:8a:96:4b:e0:da:a9:91:19:69:84:7f:
e5:3c:b7:f0:ca:80:69:45:4a:1b:e8:bc:99:3e:eb:b7:74:f9:
2b:7b:b9:3a:e8:92:79:06:e7:36:86:e6:2e:19:10:5f:8d:85:
d9:66:6c:db:b0:cf:da:98:00:f6:71:fe:3d:ef:db:29:95:54:
ff:bb:ad:88:68:5f:0e:cf:ed:eb:7d:9a:c0:29:72:00:60:49:
5c:43:a8:7d:95:af:bb:a5:b9:69:d5:3b:1f:2d:34:85:33:57:
95:cf:ba:77:ff:a0:19:81:b4:31:5f:a1:40:dc:31:22:fb:65:
5d:3e:77:60:f8:1b:8b:6d:5e:f6:bc:59:cf:a1:37:aa:11:a0:
d8:98:f0:ce:dc:5f:ed:1e:84:0b:99:80:da:97:f5:1e:22:a9:
69:cc:62:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:28 2025 by rpki-client