Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
File: JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json)
Hash identifier: yRuq9G42tdptplWaHXLVXTxk70ym/kf08Yf6dMz2tMQ=
Subject key identifier: 2E:36:B3:F3:3B:FC:A4:EE:05:33:44:13:FA:B4:62:57:1C:B1:41:1D
Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
Certificate issuer: /CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Certificate serial: 0196534984F65D454A76EC3BCF2E7EA922F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
Manifest number: 0A53
Signing time: Sun 20 Apr 2025 13:00:49 +0000
Manifest this update: Sun 20 Apr 2025 13:00:49 +0000
Manifest next update: Mon 21 Apr 2025 13:00:49 +0000
Files and hashes: 1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: aqm988Ll6/JIWcY/p9XTAyfGpR231f9lqKnZJCjBnsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:84:f6:5d:45:4a:76:ec:3b:cf:2e:7e:a9:22:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Validity
Not Before: Apr 20 13:00:49 2025 GMT
Not After : Apr 21 13:00:49 2025 GMT
Subject: CN=2e36b3f33bfca4ee05334413fab462571cb1411d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:00:3d:31:76:23:11:96:a5:e4:c2:d4:07:
ad:44:33:ad:47:5a:f9:6d:71:98:11:cc:50:67:0a:
f6:be:2c:ab:f7:f0:02:5a:2e:5d:b4:0b:23:9b:74:
58:85:ca:c8:8e:a7:bb:be:9a:8e:ef:a4:92:98:e5:
ac:3c:74:0e:0a:89:af:a6:f9:13:53:61:54:d5:05:
5a:f6:77:61:35:17:3a:d1:47:6f:fa:03:f1:b3:0b:
70:be:7b:ec:e9:83:0a:7d:79:41:1c:79:b8:97:f0:
55:ea:03:b7:ec:ca:3d:15:af:9b:4e:a4:bc:c6:f5:
20:9a:1f:59:15:ef:d0:eb:b2:d4:03:11:7e:2f:61:
bc:f9:ae:5a:85:03:6f:cb:cc:2a:ca:da:5c:bf:2d:
c2:c2:62:10:d7:2a:b7:75:62:d3:d6:68:6b:27:dc:
ff:4a:9e:2f:d0:76:48:f3:21:13:c5:6a:97:f9:9f:
24:48:e2:f5:11:0d:3f:29:dc:9f:11:18:6e:4b:62:
50:83:48:86:10:67:dc:13:10:47:6e:ce:ec:dd:5d:
2c:0a:8f:4d:ab:03:6e:5d:02:ea:42:fc:b3:90:c0:
01:16:34:d9:bf:f8:58:fa:b3:37:cb:d9:ff:ca:73:
26:00:f9:6f:b6:64:a0:a1:89:e1:1a:c1:e5:70:d6:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:36:B3:F3:3B:FC:A4:EE:05:33:44:13:FA:B4:62:57:1C:B1:41:1D
X509v3 Authority Key Identifier:
keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:63:34:c4:36:e5:49:78:92:f7:6f:35:59:a5:01:0d:77:94:
54:86:71:92:f5:cf:e0:74:39:f1:d4:f0:38:2d:83:e2:26:91:
8e:e5:64:cc:c0:51:fd:66:12:27:d3:91:10:72:15:bc:eb:09:
47:61:fb:d9:c0:05:da:19:77:59:76:c9:e9:1e:25:e8:b4:1b:
6b:b3:10:0f:ff:7a:83:08:91:95:bd:86:95:9c:d0:ff:dd:6e:
03:d9:8c:6a:d7:87:af:1a:c8:f8:fe:05:a8:8c:5a:87:ba:87:
67:44:24:3c:1f:86:bd:91:f3:18:56:d4:32:7d:89:32:75:4b:
47:c5:87:1f:bd:96:89:67:4a:02:a8:b0:08:eb:0a:15:3c:5a:
e1:6a:38:c9:2a:c1:e8:47:cd:84:d4:40:3f:3c:a5:d3:11:0e:
5f:03:7f:b4:b7:fc:8c:17:39:5c:b6:73:0f:21:14:de:51:c1:
10:63:00:dc:a3:fd:bb:ef:1b:93:0c:d7:2c:5d:82:e8:38:9e:
9f:f1:f4:bf:ef:fd:e4:ab:43:a0:22:19:64:50:e2:61:9b:06:
45:4d:34:e7:8b:a8:41:77:52:b8:0b:d6:cb:a3:77:26:3a:45:
e6:0d:ec:fa:32:4f:b5:72:a2:85:1a:d1:06:d9:49:43:10:fb:
ef:1f:ee:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:22:59 2025 by rpki-client