Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
File: JxyaxSXAuEK79l0-xnaJcDzKMls.mft (raw, json)
Hash identifier: PZnuXsabG1Thud9CKlx5cP2EYcybXbj967edBhqmMyM=
Subject key identifier: D6:62:59:36:13:17:30:1E:BC:0F:78:64:A7:7B:F0:4F:C3:61:E6:FE
Authority key identifier: 27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B
Certificate issuer: /CN=271c9ac525c0b842bbf65d3ec67689703cca325b
Certificate serial: 01975234404EE279F92409E51D43CA5B07F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
Manifest number: 1165
Signing time: Mon 09 Jun 2025 01:00:45 +0000
Manifest this update: Mon 09 Jun 2025 01:00:45 +0000
Manifest next update: Tue 10 Jun 2025 01:00:45 +0000
Files and hashes: 1: JxyaxSXAuEK79l0-xnaJcDzKMls.crl (hash: OG+P2wRojfXv3RMlL5smH7cM+cl5HPVbLE529ICAdUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:40:4e:e2:79:f9:24:09:e5:1d:43:ca:5b:07:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271c9ac525c0b842bbf65d3ec67689703cca325b
Validity
Not Before: Jun 9 01:00:45 2025 GMT
Not After : Jun 10 01:00:45 2025 GMT
Subject: CN=d66259361317301ebc0f7864a77bf04fc361e6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:f7:fe:f0:2d:e8:30:2a:4e:b4:d1:e6:35:
29:38:cd:d1:09:87:7c:e3:e2:ba:0b:f3:b1:51:48:
21:56:92:d7:cc:77:1a:d1:55:81:d4:cd:4d:d4:02:
7a:24:d8:7d:ed:aa:b8:5a:3b:73:1a:93:47:1b:3a:
e4:64:a2:31:4a:75:37:c5:c2:3b:f4:12:2a:8b:9f:
dd:f8:38:27:54:a7:f2:83:e1:97:ed:e1:83:d4:07:
be:d6:a9:73:6a:56:a6:31:3c:93:f0:45:86:91:c1:
0f:5e:cb:36:78:75:dd:5d:be:24:d6:48:17:21:8a:
7c:a8:12:05:02:fc:86:59:42:12:d5:83:03:c7:57:
2a:c7:7c:80:57:63:e7:7e:c3:4c:c0:18:61:c9:32:
c5:e0:2a:c8:16:8a:97:f5:cf:10:58:f3:99:55:59:
73:d9:87:92:27:83:6b:f7:dd:d2:7f:d3:0e:2a:24:
a5:6a:31:d1:00:8c:67:55:3b:6d:31:e4:9a:31:1a:
b7:97:e2:e2:62:a7:5e:a2:4a:73:2c:39:69:7a:c4:
32:4c:11:01:e9:fa:c8:be:7b:0a:e6:bb:88:64:08:
b5:d6:f0:b1:55:05:a0:27:90:c2:30:5f:c3:27:bd:
e4:03:b3:99:39:1c:5c:21:71:96:cd:b7:91:8f:5d:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:62:59:36:13:17:30:1E:BC:0F:78:64:A7:7B:F0:4F:C3:61:E6:FE
X509v3 Authority Key Identifier:
keyid:27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5f:43:03:78:62:a0:64:0f:84:88:e5:ee:52:e3:bf:12:3c:
39:35:48:05:e2:80:09:91:e6:b4:d1:00:d1:8e:d2:1e:f7:dc:
b7:dc:65:cf:73:ee:ce:ee:ac:85:14:35:84:40:a4:bc:73:63:
e1:19:00:3e:8f:f9:5c:ea:23:e3:23:cc:12:16:49:15:ad:2a:
c6:5a:8a:34:23:0f:ef:1f:ec:5e:5d:b9:13:dc:8d:d0:46:ce:
81:d3:fb:f7:e2:df:7b:3f:da:99:7e:55:3d:1b:dc:2c:0d:4d:
6a:ec:12:91:02:95:cf:90:31:f8:b2:7e:58:72:85:ea:47:66:
01:5e:92:82:14:d0:0b:01:15:db:84:11:9c:30:ca:23:0d:58:
6e:42:b5:ce:61:26:7e:8a:f7:bd:78:db:0b:e1:40:b1:77:90:
9c:b0:0f:75:fc:da:c5:2e:50:cc:0c:88:e1:50:7e:e0:0e:ac:
56:a7:23:ac:7a:81:3e:d2:b2:c0:4a:6b:a9:74:3f:40:6d:2d:
5e:2b:54:10:33:dd:bb:dd:3d:1c:bf:f9:ee:e6:86:f5:3f:12:
44:c2:d2:f0:dd:39:6d:7d:5a:6e:cd:98:6c:18:35:99:19:4a:
4a:36:53:b0:fb:65:e8:24:a7:69:fd:f0:dc:7e:0d:64:2d:32:
79:f8:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:00 2025 by rpki-client