Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier: oyNk/zuNAOoYKr4AbtfX7Q/+PHnwNLbCdJVi+DmvBnI=
Subject key identifier: 73:73:B1:9B:B3:E3:58:83:17:32:47:FC:C2:AA:04:F5:ED:9F:E0:6A
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial: 01964D7EA2AF09A5F8D76BDD996CCFDFEFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number: 136C
Signing time: Sat 19 Apr 2025 10:01:06 +0000
Manifest this update: Sat 19 Apr 2025 10:01:06 +0000
Manifest next update: Sun 20 Apr 2025 10:01:06 +0000
Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: J/D74DTjMwIDWjY6Kj2+JAkDa4iAYHZjsM0CwjsmHjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:a2:af:09:a5:f8:d7:6b:dd:99:6c:cf:df:ef:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Validity
Not Before: Apr 19 10:01:06 2025 GMT
Not After : Apr 20 10:01:06 2025 GMT
Subject: CN=7373b19bb3e35883173247fcc2aa04f5ed9fe06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:ea:63:8e:06:11:c9:77:bb:d4:50:33:ef:
90:39:0f:37:07:03:85:0c:d7:60:08:35:65:3d:6b:
56:1a:fd:f2:38:49:35:4b:52:a1:06:58:9c:d0:04:
10:00:7d:e8:62:ff:60:cb:c5:5c:a3:ae:b3:44:2b:
a2:b6:24:5d:61:34:74:d0:16:67:67:da:80:41:24:
45:8d:13:c3:a5:cc:f2:6e:54:c9:75:85:af:78:7b:
dc:2d:b9:6c:02:90:8b:a5:13:f0:8c:e9:1e:30:d5:
a0:e1:bc:6c:1e:9a:a6:37:0b:55:6e:71:44:2a:ae:
90:39:1d:b8:a4:dc:1f:e8:09:6a:6b:93:69:09:aa:
5b:6d:8b:d7:c2:fd:cc:b8:df:e5:45:22:9f:f3:4a:
cd:94:e2:f9:4f:bd:73:eb:62:ab:81:c1:c8:6e:94:
8e:b2:d0:00:4e:cb:47:d3:bf:6d:92:73:55:c7:48:
d0:79:46:c8:bf:d2:90:5e:9d:ab:1c:70:b8:f7:da:
7e:7d:50:5a:21:b3:1b:7a:31:33:73:86:bd:6f:9c:
6a:40:61:56:18:c8:c0:9d:04:13:5a:24:de:bf:03:
4d:ea:be:56:90:33:dd:0b:b9:89:8f:cc:7e:83:3f:
5f:c9:f3:e8:de:26:13:89:d8:3e:2f:c1:3f:97:a3:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:73:B1:9B:B3:E3:58:83:17:32:47:FC:C2:AA:04:F5:ED:9F:E0:6A
X509v3 Authority Key Identifier:
keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6a:52:7f:bd:7c:84:73:4c:c5:80:6f:34:62:6d:62:d8:07:
c3:1b:8e:10:8f:d5:a0:f5:64:3d:39:8a:6d:6d:c8:c9:ec:e5:
02:cf:a9:8b:52:db:84:ea:58:85:6d:ee:d0:be:d0:c5:74:5e:
1e:50:4e:d5:c0:a2:2c:3e:f3:da:51:4c:ba:4b:78:1e:b4:c8:
96:34:e6:a2:ae:fc:be:04:4d:97:b0:ba:14:db:60:81:da:18:
27:54:3a:9b:23:c3:33:96:ca:eb:5d:3e:b8:e7:c3:2d:6f:04:
f6:dd:d9:48:c0:22:e8:11:20:a6:09:70:75:4a:3c:90:bb:87:
5b:18:5a:d4:87:53:df:d0:68:af:3d:a0:a0:32:ac:48:80:f3:
18:19:86:6b:96:34:7d:96:c6:73:4d:2d:e4:09:ec:2e:9c:9a:
6b:15:7d:d9:2a:9a:aa:35:07:3d:d5:ed:9d:7c:f3:82:f2:d0:
77:0f:4c:db:77:5a:7a:65:c3:e0:1b:3e:ab:d2:ec:d1:db:0d:
87:bf:4e:e3:70:54:4e:43:36:f1:af:cd:dc:90:aa:50:18:80:
26:77:01:01:4d:c4:fd:4e:8a:34:4d:01:2b:46:73:27:49:7c:
91:ec:80:17:c3:c4:13:22:25:a2:9d:a8:fa:db:9c:10:22:e4:
94:b5:28:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:12:12 2025 by rpki-client