Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
File: JxyaxSXAuEK79l0-xnaJcDzKMls.mft (raw, json)
Hash identifier: 0o3pIQzNeBPC85Re3qbL9V9Y/rJRGx1RqBl4qwRCnbc=
Subject key identifier: ED:D9:F2:E7:B5:82:FE:59:4B:D9:C5:13:0C:AA:33:41:1E:9F:42:23
Authority key identifier: 27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B
Certificate issuer: /CN=271c9ac525c0b842bbf65d3ec67689703cca325b
Certificate serial: 0196534A04B2E30EA238CAC8019E676BC57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
Manifest number: 10E1
Signing time: Sun 20 Apr 2025 13:01:21 +0000
Manifest this update: Sun 20 Apr 2025 13:01:21 +0000
Manifest next update: Mon 21 Apr 2025 13:01:21 +0000
Files and hashes: 1: JxyaxSXAuEK79l0-xnaJcDzKMls.crl (hash: XiIQ+PTKRWfiwGCtZQVcZX14WC/g7JRhJS+nJrYMJeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:04:b2:e3:0e:a2:38:ca:c8:01:9e:67:6b:c5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271c9ac525c0b842bbf65d3ec67689703cca325b
Validity
Not Before: Apr 20 13:01:21 2025 GMT
Not After : Apr 21 13:01:21 2025 GMT
Subject: CN=edd9f2e7b582fe594bd9c5130caa33411e9f4223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:a2:40:87:d8:62:71:f1:1e:95:c6:1c:b8:
87:66:0d:87:52:62:57:5c:1e:84:d0:65:8f:35:d8:
7a:8b:6b:e4:19:ee:f3:11:77:c8:27:f2:06:d7:7a:
a5:03:dc:02:b1:18:6d:41:77:a3:7a:0c:c0:79:4f:
c8:81:94:1d:4b:17:da:b8:91:77:74:85:e4:41:c2:
f3:b5:4f:85:8e:82:b7:64:e1:ee:6d:b6:b9:a3:59:
6b:5d:78:f8:d5:c0:a6:f1:d3:87:26:7d:e8:eb:22:
0e:1b:b9:bd:5f:cd:f1:19:c6:1b:cd:0d:7a:27:30:
2d:eb:59:52:8a:7d:47:e1:06:f7:a9:56:a1:5c:52:
e0:0b:d8:94:9a:0a:9f:e8:d0:7e:6c:c0:f0:cc:0d:
7e:23:9f:c8:50:3a:3e:55:82:cc:85:2d:5c:31:59:
6f:06:d0:c2:71:19:27:95:20:8c:e7:0e:f4:c5:7a:
7f:a1:92:d1:74:ab:51:37:c9:e2:93:87:4f:be:ec:
e5:46:fe:e7:c9:78:0a:5a:24:12:71:af:ff:b0:45:
fe:64:57:58:5d:cc:b8:3a:89:f8:4c:b2:cd:8f:d8:
18:71:73:ce:e5:34:65:9e:c1:8b:38:80:f5:7d:4e:
cf:bd:08:83:b4:ff:e7:ef:f2:42:cc:28:52:d3:35:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:F2:E7:B5:82:FE:59:4B:D9:C5:13:0C:AA:33:41:1E:9F:42:23
X509v3 Authority Key Identifier:
keyid:27:1C:9A:C5:25:C0:B8:42:BB:F6:5D:3E:C6:76:89:70:3C:CA:32:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxyaxSXAuEK79l0-xnaJcDzKMls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ccc48f-552e-4b32-9360-3a507f5d3aa1/1/JxyaxSXAuEK79l0-xnaJcDzKMls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:28:36:32:7f:db:93:7c:96:6f:98:62:65:95:a1:10:92:c2:
08:ea:c2:43:1c:e1:b1:db:58:2d:95:7b:81:d8:d4:9d:fa:98:
d1:10:33:81:2d:7b:de:9d:aa:dd:c7:3e:fa:d3:8f:f8:1f:c0:
58:56:48:cd:da:6b:3f:f8:e8:fd:6f:f3:0a:43:d5:ef:b3:ee:
26:16:eb:f8:97:8b:df:bb:c4:31:3a:44:d0:74:7b:cb:14:83:
9c:ed:ad:08:78:44:ba:7a:2e:bd:48:2e:96:15:08:d6:cf:80:
41:b3:4b:64:77:5a:f6:5e:d8:7c:ba:e0:92:63:e3:6c:85:fe:
00:c3:b0:f6:7f:ad:ed:99:e9:f9:e5:ca:97:21:6a:48:de:81:
bd:18:f5:2f:7c:2c:dc:f1:75:f0:ab:ca:4b:c4:ea:8e:32:d6:
f5:5e:ca:16:ca:9f:07:ba:be:ad:8a:17:88:94:2d:98:25:f8:
ea:48:db:ac:19:57:d4:6a:b9:a0:7f:2e:82:b4:74:54:92:e2:
42:c4:cc:30:bb:f0:b6:cb:ff:27:53:63:b1:e4:eb:33:aa:e8:
45:06:b4:5a:cb:b3:59:76:64:dc:aa:98:b2:6f:d9:b8:d2:83:
8b:cf:b4:76:35:88:45:04:0c:50:b4:0f:64:8f:b0:75:f5:1e:
92:41:09:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSgSy4w6iOMrIAZ5na8V/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MWM5YWM1MjVjMGI4NDJiYmY2NWQzZWM2NzY4OTcwM2Nj
YTMyNWIwHhcNMjUwNDIwMTMwMTIxWhcNMjUwNDIxMTMwMTIxWjAzMTEwLwYDVQQD
EyhlZGQ5ZjJlN2I1ODJmZTU5NGJkOWM1MTMwY2FhMzM0MTFlOWY0MjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVmiQIfYYnHxHpXGHLiHZg2HUmJX
XB6E0GWPNdh6i2vkGe7zEXfIJ/IG13qlA9wCsRhtQXejegzAeU/IgZQdSxfauJF3
dIXkQcLztU+FjoK3ZOHubba5o1lrXXj41cCm8dOHJn3o6yIOG7m9X83xGcYbzQ16
JzAt61lSin1H4Qb3qVahXFLgC9iUmgqf6NB+bMDwzA1+I5/IUDo+VYLMhS1cMVlv
BtDCcRknlSCM5w70xXp/oZLRdKtRN8nik4dPvuzlRv7nyXgKWiQSca//sEX+ZFdY
Xcy4Oon4TLLNj9gYcXPO5TRlnsGLOID1fU7PvQiDtP/n7/JCzChS0zUTYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3Z8ue1gv5ZS9nFEwyqM0Een0IjMB8GA1UdIwQY
MBaAFCccmsUlwLhCu/ZdPsZ2iXA8yjJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnh5YXhTWEF1RUs3OWwwLXhuYUpjRHpLTWxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jY2M0OGYtNTUyZS00YjMyLTkzNjAt
M2E1MDdmNWQzYWExLzEvSnh5YXhTWEF1RUs3OWwwLXhuYUpjRHpLTWxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jY2M0OGYtNTUyZS00YjMyLTkzNjAtM2E1MDdmNWQzYWEx
LzEvSnh5YXhTWEF1RUs3OWwwLXhuYUpjRHpLTWxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSg2Mn/b
k3yWb5hiZZWhEJLCCOrCQxzhsdtYLZV7gdjUnfqY0RAzgS173p2q3cc++tOP+B/A
WFZIzdprP/jo/W/zCkPV77PuJhbr+JeL37vEMTpE0HR7yxSDnO2tCHhEunouvUgu
lhUI1s+AQbNLZHda9l7YfLrgkmPjbIX+AMOw9n+t7Znp+eXKlyFqSN6BvRj1L3ws
3PF18KvKS8TqjjLW9V7KFsqfB7q+rYoXiJQtmCX46kjbrBlX1Gq5oH8ugrR0VJLi
QsTMMLvwtsv/J1NjseTrM6roRQa0WsuzWXZk3KqYsm/ZuNKDi8+0djWIRQQMULQP
ZI+wdfUekkEJtw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:45:33 2025 by rpki-client