Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File: J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier: UrnM0/isI9XvarldjISbYX8H0hQnP1dw6ftK9ScoL74=
Subject key identifier: A7:A3:57:15:15:8D:36:C3:37:26:63:AD:63:DA:56:D1:F9:CF:3F:F3
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer: /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial: 01964C6BB1C86C69CCE9E9D6E1F7E304CE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number: 10CA
Signing time: Sat 19 Apr 2025 05:00:48 +0000
Manifest this update: Sat 19 Apr 2025 05:00:48 +0000
Manifest next update: Sun 20 Apr 2025 05:00:48 +0000
Files and hashes: 1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: fUMKXJceQr7Bj6S1g0zYPRQEpURJvWIscM+0eBkG/O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:b1:c8:6c:69:cc:e9:e9:d6:e1:f7:e3:04:ce:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Validity
Not Before: Apr 19 05:00:48 2025 GMT
Not After : Apr 20 05:00:48 2025 GMT
Subject: CN=a7a35715158d36c3372663ad63da56d1f9cf3ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:a7:b8:81:34:7b:cd:6c:4b:57:29:59:6c:
04:41:76:1d:fc:f4:d4:93:85:83:e6:80:df:5f:c1:
0d:0e:57:17:db:15:83:d6:1b:e0:2e:1d:fd:02:60:
37:fc:e8:8a:60:a6:20:74:64:20:1a:6a:92:7f:1b:
cb:3f:f8:87:6e:73:a4:1e:87:5c:fc:33:95:f3:a3:
44:ae:12:0c:54:13:bc:fc:9d:39:06:7f:9d:c0:0f:
e6:c7:67:3f:c9:8f:5e:e2:cc:66:2e:3f:bd:06:64:
40:f7:cf:44:b3:70:47:7d:71:f9:e4:2a:ee:2f:6f:
cf:38:f4:25:83:63:d0:a4:e9:af:20:d0:92:51:1e:
d8:f2:23:10:d3:92:8e:82:de:64:08:78:00:7b:43:
81:86:bd:04:3d:bf:60:4e:77:ac:77:29:32:f9:8b:
0c:1e:d4:f5:1f:73:04:e4:87:c7:26:e7:b5:4e:b4:
da:02:cc:35:b3:c4:d5:dd:9e:c1:6f:fb:95:3c:cb:
a3:e3:a4:17:5d:5d:79:7e:35:7d:e1:ba:04:86:c1:
f8:c1:ba:5e:33:09:9c:73:fb:a3:2c:d9:54:b5:e1:
12:15:3e:0e:53:ec:36:d3:5a:39:17:5b:dc:40:23:
ca:ed:19:c4:4a:87:7b:3b:cb:a9:32:a8:06:7d:c7:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A3:57:15:15:8D:36:C3:37:26:63:AD:63:DA:56:D1:F9:CF:3F:F3
X509v3 Authority Key Identifier:
keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:59:8e:b5:2f:b8:54:f7:1e:09:ee:0f:60:1a:cf:8b:a5:38:
36:d8:f7:fb:6d:6e:3f:ff:39:fc:61:1c:55:5c:94:22:a7:03:
c3:2f:72:ed:dc:9d:82:19:90:4f:af:23:47:ef:04:0c:99:2b:
67:39:5f:d9:2a:39:9f:a1:ba:15:3b:b8:71:1c:c8:10:99:0b:
e6:be:5d:3b:b1:92:d8:10:b6:0f:95:d7:e6:85:15:c1:e9:1e:
fc:ff:15:69:db:c9:c6:95:94:ab:a8:ef:e5:86:11:33:3c:7a:
af:27:a8:03:eb:9c:c8:16:af:d0:58:5a:0f:bb:64:bb:1a:8e:
91:fd:7c:66:86:10:d7:c5:f3:47:cc:6f:7f:ae:76:44:d8:47:
16:48:f6:c1:54:6a:38:4b:72:c7:d6:20:5c:16:00:c8:8d:52:
63:d8:d6:9b:c5:e7:90:47:00:3e:fa:b2:64:93:a5:f2:3a:93:
9c:c0:0c:96:35:d1:06:7f:89:b7:d1:50:c0:ab:4d:7a:d0:22:
4c:40:dc:64:49:6d:86:7e:c0:36:f8:ed:8c:6e:62:fd:c4:8a:
61:d6:14:c4:00:4f:ff:b1:fb:f6:cf:f8:a4:4c:44:b1:a5:e5:
d5:3b:34:fd:b4:7d:a2:33:3e:fc:fd:f9:1b:3a:4a:54:d3:11:
af:07:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:29 2025 by rpki-client