Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: eJXQ1SaHJOYuu0n436p4HtWoXDraepPnYjltpusVBUs=
Subject key identifier: 31:FA:6E:B8:17:1F:CE:4C:8C:64:46:D7:2A:38:99:A2:9D:B4:3B:20
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 019652A49D3F87E32B141048AA0DCD782EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 0C48
Signing time: Sun 20 Apr 2025 10:00:41 +0000
Manifest this update: Sun 20 Apr 2025 10:00:41 +0000
Manifest next update: Mon 21 Apr 2025 10:00:41 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: 8I7ZmIvUDMc56vZQTDyOINHBpnEkgtZxte7eWCTIBBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:9d:3f:87:e3:2b:14:10:48:aa:0d:cd:78:2e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Apr 20 10:00:41 2025 GMT
Not After : Apr 21 10:00:41 2025 GMT
Subject: CN=31fa6eb8171fce4c8c6446d72a3899a29db43b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:a5:e8:e7:ce:a5:a8:dc:a0:5f:b5:f2:ae:
9e:b9:ea:a1:4b:ef:86:36:42:33:63:4d:75:e8:69:
75:d5:49:22:d9:f0:6d:66:de:38:a8:30:8f:0e:ea:
9d:fe:51:82:57:ea:31:e8:fc:7f:38:6e:4a:e9:fe:
01:24:ad:3e:e7:13:6e:03:0d:e0:c0:c7:15:68:af:
43:43:5f:67:9d:d8:4a:a8:4d:e9:3d:07:74:f1:e5:
aa:5f:15:b5:7b:aa:c3:b8:3d:25:48:7a:37:40:96:
f4:fd:ac:10:1d:da:29:b0:d6:65:b1:59:37:62:08:
d5:75:7d:d1:7e:11:03:20:f2:c9:75:9e:69:10:2d:
59:aa:3a:4b:4e:d3:81:7a:f6:fa:4c:c1:d9:83:e7:
ae:0d:26:32:16:db:07:00:e9:fe:75:78:bf:29:b0:
69:48:fc:b2:dd:ea:6c:c4:34:07:44:5f:33:b2:ff:
bb:58:27:8c:f6:2b:f5:4a:d2:b6:f2:c5:0b:e6:a5:
04:b5:7f:c6:3d:f9:d3:c4:72:c7:b0:e9:d2:f1:e6:
94:ce:9d:a9:ae:a2:c8:71:aa:a5:9d:09:37:47:c6:
42:61:a5:42:f1:75:16:71:f3:c6:22:55:ae:d4:2c:
37:33:fd:4b:a4:13:f5:7a:a0:8f:bd:b9:e0:19:5c:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:6E:B8:17:1F:CE:4C:8C:64:46:D7:2A:38:99:A2:9D:B4:3B:20
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4a:46:72:d3:31:7d:e7:97:51:95:e9:e7:4b:25:29:40:1b:
a2:28:ca:7d:6d:95:dc:2a:3a:70:d1:0c:2f:ac:b6:1d:9c:fd:
e1:2d:13:6f:7e:85:e7:d2:9a:a1:bd:b2:e3:c7:4f:48:81:fa:
b5:8d:5e:ee:f1:4c:c4:96:c2:24:e1:92:34:4c:13:9f:b3:df:
40:06:ce:bb:74:f1:60:07:76:63:62:10:1d:5c:bf:69:86:cc:
3f:17:16:5f:2b:a4:78:ff:bc:00:26:40:6c:e6:2c:ba:af:78:
29:8b:9a:d2:b6:f0:79:31:51:b8:e0:8e:3f:13:d2:cb:1c:19:
77:a1:bc:08:ae:a0:d5:7b:58:bf:3f:9e:9f:96:48:31:74:28:
cd:79:27:e1:b2:e8:10:bf:62:2f:00:6f:05:b8:3a:1c:1a:3d:
63:4d:04:af:f4:e5:0a:dc:ae:bb:00:1d:f0:b6:1d:eb:2e:5e:
1b:ff:44:2d:5d:53:82:57:f4:68:33:cb:67:b3:67:f5:57:5c:
38:c7:bb:a9:ad:08:4c:42:9c:a9:f1:73:fa:7b:f0:c6:1d:c0:
11:1b:2b:e5:48:ea:8f:5c:c2:79:27:c3:14:f8:41:33:00:84:
5f:e3:f5:92:fa:f5:b8:02:be:82:56:16:11:a1:c6:a4:ac:61:
a7:4d:d4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:00 2025 by rpki-client