Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
File: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft (raw, json)
Hash identifier: l+Wgu0uhTEygCI3EgsN68j03U3cqyU1kjR2rH9HzjZ8=
Subject key identifier: AD:89:1F:A1:31:A9:D0:06:78:48:9E:C6:AD:F2:79:4D:74:E1:96:2A
Authority key identifier: 25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
Certificate issuer: /CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Certificate serial: 0196526D756ECEA9C616FE667F115A1BE91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
Manifest number: 0BB5
Signing time: Sun 20 Apr 2025 09:00:27 +0000
Manifest this update: Sun 20 Apr 2025 09:00:27 +0000
Manifest next update: Mon 21 Apr 2025 09:00:27 +0000
Files and hashes: 1: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl (hash: 3UQJhGeb0b8+4fVcucS44oVp1n4bqO6gAcLl2+pL0Fc=)
2: onIKXkQooL-gKM4FNa_iPOCUh28.roa (hash: p9VhepPylQixNxjdmUg1Yw/ZjccT3GaAzNYioyvMSo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:75:6e:ce:a9:c6:16:fe:66:7f:11:5a:1b:e9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Validity
Not Before: Apr 20 09:00:27 2025 GMT
Not After : Apr 21 09:00:27 2025 GMT
Subject: CN=ad891fa131a9d00678489ec6adf2794d74e1962a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:3e:e9:ba:3a:4c:97:79:06:ad:95:43:b5:
55:3e:27:fe:39:22:d1:b8:59:d3:95:71:2b:e9:30:
6e:97:04:da:77:ca:de:7d:4b:fc:c3:eb:db:2b:37:
6a:08:b0:30:5b:f8:8c:54:b7:d0:f0:e0:c5:d8:04:
cb:b8:86:52:f0:19:21:1a:54:b5:a2:fe:6a:cd:e6:
19:f5:b0:62:f6:6a:a5:49:cf:32:c6:86:b4:9d:8d:
1d:c3:24:8e:51:f6:36:d8:c4:fa:8f:dd:aa:2c:60:
7a:ab:7f:44:97:d5:b2:ad:4c:d1:fd:5d:2a:f7:6d:
c0:86:71:3d:a3:23:b4:94:86:f0:9c:1f:52:75:71:
a3:f4:d1:c0:76:08:51:fa:2d:af:73:db:24:1b:8c:
1b:e8:92:de:91:8b:50:5f:8c:ca:0a:d7:29:56:1a:
1f:ed:4d:2b:90:11:a2:b2:e6:f9:a5:e2:21:e1:c2:
04:43:2c:fd:02:04:9d:5c:8a:2a:00:da:89:81:0e:
ed:7f:29:d1:01:59:82:89:5c:7f:1c:fb:32:f9:63:
80:13:c3:81:fb:7e:de:13:6e:6c:0c:7b:f1:47:0a:
4d:fb:ab:dd:90:9c:7b:d5:f1:08:06:ee:4e:79:c1:
39:f5:53:11:a7:44:3d:0b:8a:4c:1f:ff:85:e3:45:
29:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:89:1F:A1:31:A9:D0:06:78:48:9E:C6:AD:F2:79:4D:74:E1:96:2A
X509v3 Authority Key Identifier:
keyid:25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4a:d5:59:4e:2b:25:d5:20:3a:d2:c8:8f:2a:c6:14:64:ba:
63:b4:f2:03:19:09:f8:9d:49:a2:a4:97:f5:7f:a1:4d:e3:68:
40:4b:54:7f:c5:d3:ef:3e:31:9d:87:fc:de:ea:56:de:a6:0e:
73:08:e0:bc:d9:1d:d9:c9:b3:50:b3:c2:80:35:cf:f4:d4:7a:
81:b4:4d:22:d8:fd:ef:25:09:02:98:60:74:7b:97:75:3c:70:
ed:2d:fb:c2:e7:11:b9:2c:8c:3b:db:94:37:59:b9:31:70:73:
53:ec:47:9a:3b:fd:cc:a5:51:56:68:20:5c:9f:76:5d:7f:d8:
63:3f:cf:d9:66:0b:b8:e0:59:7f:41:9e:a1:36:6b:97:fa:47:
57:7a:a9:04:70:41:c2:2e:f4:95:08:e7:65:cf:f4:3a:fe:68:
d1:f5:d2:9b:a8:e8:64:2d:d3:f3:7b:1d:0b:a4:03:6b:63:71:
97:c6:30:ea:52:7d:d2:b1:20:44:be:8f:76:5d:e8:1f:34:d3:
6d:90:0f:55:ae:9a:4b:aa:4d:0d:49:ab:52:1e:14:a5:f1:d6:
5c:84:5e:e6:28:5f:4a:52:a6:14:c2:d8:a2:c6:86:81:00:b6:
09:a0:55:a9:7b:b7:c5:c0:bf:90:38:74:c9:cd:30:2a:04:08:
0e:6f:c9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:01:01 2025 by rpki-client