Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json)
Hash identifier: 3AKfkYRlGkFGRYUhbKIBfWKV+68BVHzeldJfSiENBEM=
Subject key identifier: 47:69:FA:AB:CB:34:53:56:68:31:F1:DE:25:0B:00:40:C7:78:39:35
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial: 01965537AF53B8E9AB10DFF47953BEFF30CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
Manifest number: 05AA
Signing time: Sun 20 Apr 2025 22:00:34 +0000
Manifest this update: Sun 20 Apr 2025 22:00:34 +0000
Manifest next update: Mon 21 Apr 2025 22:00:34 +0000
Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: FjQfb5s2w7XgCNdWzUFXqhv+S2Zp73gFK40wUI5Z1Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:af:53:b8:e9:ab:10:df:f4:79:53:be:ff:30:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Validity
Not Before: Apr 20 22:00:34 2025 GMT
Not After : Apr 21 22:00:34 2025 GMT
Subject: CN=4769faabcb3453566831f1de250b0040c7783935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:0a:97:2f:6f:8c:ae:29:8a:61:a9:f3:2d:
07:4f:e6:32:8d:71:64:2d:22:66:da:1a:38:80:0a:
99:ea:4f:f0:69:5b:5e:a9:6c:a7:11:15:fc:20:da:
a6:ba:7c:11:6e:f4:69:0b:ca:99:e3:6c:22:08:f8:
0a:ea:3e:c5:18:eb:84:4c:24:d1:14:8f:a5:71:f7:
ae:29:07:fa:78:42:be:59:a0:64:bf:f5:41:98:d3:
5e:17:2c:72:6c:e9:aa:2f:6a:b3:3c:11:70:d0:4c:
eb:c1:d0:0c:3a:10:76:d0:8c:19:8c:6b:e3:d5:ba:
cd:9a:6b:04:36:da:cb:f2:54:a9:ed:32:9d:69:d7:
0c:0f:f9:ac:b5:e8:bc:e4:7a:e6:e9:e5:f9:da:11:
60:6c:37:ac:b1:d2:0d:75:46:9a:a1:2e:7e:ce:7b:
58:04:ac:a6:ee:bd:f7:1a:7e:d8:5d:d7:fb:ab:20:
1a:c2:d2:d7:66:c1:b9:b9:4a:e8:bd:4a:47:24:10:
f9:a5:a1:52:88:2d:34:c5:16:f2:c1:02:fe:8e:25:
b4:00:ef:e7:ea:53:42:2c:1e:00:ba:0e:19:c0:bf:
7a:f2:3e:87:6d:c7:6e:6f:36:ee:17:8e:a7:72:0e:
3d:91:52:e5:23:b5:9d:45:25:b5:d3:d6:82:37:a8:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:69:FA:AB:CB:34:53:56:68:31:F1:DE:25:0B:00:40:C7:78:39:35
X509v3 Authority Key Identifier:
keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:78:a8:b5:4d:24:9a:51:40:15:36:14:fe:03:29:96:eb:47:
0d:85:f9:a2:f7:8d:b3:67:42:cb:c4:43:a6:f0:1f:3e:01:37:
9a:86:b0:50:23:3e:2a:d2:63:e1:0f:3f:7e:d9:44:60:ab:96:
c2:7c:b5:5b:87:65:c8:6c:1f:46:df:81:ea:fc:a9:ab:7d:11:
1a:eb:61:18:f2:1a:5e:4b:54:3f:82:11:f9:74:3d:99:2d:b2:
a7:db:2b:45:37:8f:9a:4d:2b:60:4a:d0:f0:93:db:97:0e:af:
a9:ae:f0:a4:19:f2:e8:b1:6b:52:fd:e2:0c:d2:4c:e2:ec:d2:
e4:8d:6a:eb:19:94:ec:39:5e:5d:4f:9a:d8:64:74:1c:97:46:
28:13:c1:07:41:a0:74:9c:dc:b9:0d:39:18:19:28:6c:4c:d6:
2f:f5:51:a4:c9:08:c8:5b:42:43:2d:f9:db:bf:bf:f2:8c:84:
ea:84:a2:e7:7f:b6:0f:25:a0:a3:f9:dd:88:39:69:c1:c3:a9:
60:83:0a:18:94:40:25:28:b2:c1:76:60:48:ec:25:dd:19:9d:
8a:e9:94:b3:91:dc:3d:f5:83:a1:2c:21:23:78:65:d9:58:32:
6a:2f:ac:20:56:7c:21:09:5e:4c:98:2c:a7:3d:04:d6:a3:98:
f8:a9:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:37:25 2025 by rpki-client