Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
File: JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json)
Hash identifier: TEKqe4PAfICxZsOvGiemuf+9WQIBEjCkwziPGa9N2wk=
Subject key identifier: 2A:C2:CF:09:CF:0B:FB:C7:CA:DE:7E:19:64:20:5C:D4:74:4C:EC:38
Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
Certificate issuer: /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Certificate serial: 01958C60283C2DAAD54FAA9CF603C831D30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 22:01:06 +0000
Manifest this update: Wed 12 Mar 2025 22:01:06 +0000
Manifest next update: Thu 13 Mar 2025 22:01:06 +0000
Files and hashes: 1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: iZp5E40r3CDpieiWpdZVqX54FDbqq4rEbWVOdEMlLGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:28:3c:2d:aa:d5:4f:aa:9c:f6:03:c8:31:d3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Validity
Not Before: Mar 12 22:01:06 2025 GMT
Not After : Mar 13 22:01:06 2025 GMT
Subject: CN=2ac2cf09cf0bfbc7cade7e1964205cd4744cec38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bb:29:70:1b:74:f9:e1:d2:7b:ad:76:fd:7c:
3f:ed:e5:66:60:09:0c:0e:d0:d8:2a:0d:11:98:6c:
1d:cd:f2:0b:83:4a:76:79:e5:1e:1b:5d:ce:b9:5a:
34:24:c8:5c:96:ba:55:1b:ec:89:59:03:ee:5d:3c:
27:e4:13:67:dc:29:00:8c:c3:4d:7e:a3:e9:55:6f:
bd:47:b3:bb:c5:5a:fe:18:46:b8:07:14:f8:06:25:
16:23:de:dd:3a:85:64:92:be:fc:c1:fb:0c:a4:a7:
d5:69:ec:51:5e:9f:d2:b0:86:0e:7b:81:ca:84:98:
1c:cd:f8:59:81:bc:4c:0b:bf:30:33:ee:c0:72:5e:
ce:a1:ee:26:af:6e:52:9d:32:ab:36:6d:a3:03:22:
a3:ae:07:54:2e:68:fa:60:17:3c:11:a0:db:cc:b1:
b6:cf:22:c5:53:8f:23:49:8f:69:27:e5:07:88:30:
e2:88:bb:10:70:7b:bd:52:c2:3e:d0:bb:3a:da:42:
2d:da:89:2b:23:26:b0:1a:29:36:56:5c:69:38:b4:
f6:dc:0e:85:d7:87:10:7d:73:ef:9e:8e:ac:fe:64:
43:50:35:1d:35:8c:e3:78:36:5f:03:88:e4:59:b1:
d9:11:81:d3:c1:36:14:e3:fe:b4:d5:bb:5f:3e:e3:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C2:CF:09:CF:0B:FB:C7:CA:DE:7E:19:64:20:5C:D4:74:4C:EC:38
X509v3 Authority Key Identifier:
keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:08:c1:bb:de:12:4d:4b:ff:62:9f:9a:61:03:33:2a:08:f7:
5c:7d:61:85:3d:0a:9e:d4:9c:74:79:bb:77:6c:df:aa:b8:c6:
01:62:28:01:11:6d:18:ff:11:b6:b8:5a:47:86:f3:ba:77:f4:
9d:57:c7:71:b2:e8:86:0f:ba:8a:bd:d5:84:6b:44:5d:08:ba:
e7:26:e4:0c:72:e9:24:41:5c:1f:33:a0:b8:87:8a:eb:9c:1b:
20:91:9e:dd:cd:55:dc:da:d5:1f:fa:fb:1d:b9:b8:1c:7b:12:
33:69:ca:b9:6b:ad:81:7d:f1:79:a6:c2:8f:87:46:ec:56:bb:
92:e5:a2:63:52:bd:2f:26:b5:ea:1b:9e:86:c9:6e:b7:eb:58:
ec:f3:05:2a:e3:53:25:ff:77:33:25:ea:c0:f6:84:67:aa:bb:
9c:5a:9f:f1:77:d2:ee:30:46:43:97:79:cf:9a:8b:5f:96:1a:
be:54:c2:42:75:9a:f8:14:4d:44:af:aa:26:8d:f2:d9:89:10:
9a:1f:83:58:81:fb:72:2e:26:72:20:1d:b2:ad:d0:d7:0b:50:
4e:62:3b:1b:95:13:7f:57:a0:73:ee:ac:cd:bc:89:3a:4a:f6:
b2:29:20:74:a3:46:cd:8f:81:9c:03:04:c6:9d:09:18:62:f6:
b0:c2:b3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:47 2025 by rpki-client