Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
File: SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft (raw, json)
Hash identifier: 1z5EaKZ59Y0wQLbKpOc0MBgP2r5sSqSG2aYknAX9IyI=
Subject key identifier: D8:3D:1B:C6:3C:1C:4C:07:ED:2E:2F:C9:18:1C:29:71:35:D7:0C:11
Authority key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
Certificate issuer: /CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Certificate serial: 01975A9255434F5A378EC5FA4B24323247EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
Manifest number: 0B63
Signing time: Tue 10 Jun 2025 16:00:28 +0000
Manifest this update: Tue 10 Jun 2025 16:00:28 +0000
Manifest next update: Wed 11 Jun 2025 16:00:28 +0000
Files and hashes: 1: SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl (hash: tSZ+CR/zeVgLn5IgRw346RRFhJnpqEHsakq6t4mM334=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:92:55:43:4f:5a:37:8e:c5:fa:4b:24:32:32:47:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Validity
Not Before: Jun 10 16:00:28 2025 GMT
Not After : Jun 11 16:00:28 2025 GMT
Subject: CN=d83d1bc63c1c4c07ed2e2fc9181c297135d70c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:9c:e6:ac:33:fe:f7:68:d8:e0:fb:35:41:
18:2a:cd:b3:71:c8:d5:2b:d4:28:01:cd:5d:fc:ca:
40:3f:1e:af:a0:cc:94:f3:a1:5a:e9:87:18:f6:aa:
af:09:c7:38:e8:06:22:cc:ea:f2:41:b2:96:cf:b7:
fd:4b:f9:2f:79:ff:1c:a1:21:b8:1c:b9:0b:35:b0:
d5:1b:80:f4:78:3c:44:ad:e9:68:71:c1:a0:45:e5:
c1:f9:7c:bd:8d:c6:ea:a5:ea:7d:38:d2:cf:78:3d:
61:d2:bd:84:8f:ae:26:bf:fe:36:c8:2a:4c:c0:51:
c7:5c:05:20:12:b8:12:88:b5:51:bc:74:18:95:6d:
3e:b9:e9:93:69:3e:ff:b6:d9:dd:d6:ef:f6:0e:bb:
1d:0f:6c:33:05:2d:fc:44:1b:f1:12:97:61:b0:6b:
56:74:59:0c:f9:b9:2f:e7:5c:31:6b:8c:f9:33:86:
b1:67:77:43:cc:5f:b5:97:47:e5:a7:86:99:57:c8:
ed:18:c5:2e:b8:3d:c1:e5:31:74:f0:ad:ad:ea:a3:
e5:a6:b5:d1:df:a2:46:f3:72:81:8d:96:12:00:f6:
fa:aa:71:3a:b7:bb:c0:9b:f3:7c:9e:68:23:6b:44:
af:8f:9d:fa:31:1f:59:7c:1f:52:bb:cd:23:0e:e9:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3D:1B:C6:3C:1C:4C:07:ED:2E:2F:C9:18:1C:29:71:35:D7:0C:11
X509v3 Authority Key Identifier:
keyid:4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cd:e8:7d:c9:82:7d:59:ff:da:47:e0:3d:ac:d8:ce:a0:47:
d0:5f:ea:93:a4:2f:b0:ae:16:19:cf:32:17:5a:f7:10:c5:07:
6c:69:20:a6:ad:90:52:93:1b:03:13:14:d3:55:94:16:3b:db:
98:d8:47:7f:74:d5:90:78:7a:e9:61:11:46:0f:dd:6d:1c:7f:
2e:65:b2:17:22:22:74:30:bf:0a:64:a4:06:44:8b:43:31:60:
be:15:9a:cc:19:15:b5:ed:c9:e4:c1:9a:4a:33:9d:66:4d:32:
5f:99:75:54:c6:95:e8:68:69:ba:2a:85:35:9a:4c:4f:81:87:
d4:14:7e:01:42:00:47:88:57:ff:15:5a:20:2d:1d:c9:27:53:
10:3c:b9:3f:4d:dc:5a:b0:5c:57:c3:a4:f0:95:06:f6:9d:74:
4f:db:cd:2f:2c:8e:ab:63:53:f3:f0:a1:29:e6:e7:2d:1f:d5:
a4:14:eb:31:e8:d8:d8:0a:50:eb:f5:e3:a7:38:a7:25:5e:c1:
1f:a8:b3:68:07:f2:0a:09:80:e8:3c:49:0a:81:3c:7b:f4:6c:
f1:00:a9:9d:e5:97:f9:09:c6:dc:a7:d1:7e:95:46:d8:04:ae:
19:c8:f9:ef:ec:7e:ca:ef:21:79:f7:46:4c:20:09:64:8e:13:
6f:38:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:30:53 2025 by rpki-client