Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
File: jAmWt03P0bu4ZvLrrU4W_cyStjs.mft (raw, json)
Hash identifier: 2amFuY+EuhRTbKzfQ8yJcjzxtxH2Ln+HU711fngTwUc=
Subject key identifier: 0B:28:52:B4:CA:2B:84:84:74:8B:80:C7:DA:16:E6:32:2E:8B:18:15
Authority key identifier: 8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
Certificate issuer: /CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Certificate serial: 019651FFF1B8E3955F4D22D511A93B4E9DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
Manifest number: 05E4
Signing time: Sun 20 Apr 2025 07:00:50 +0000
Manifest this update: Sun 20 Apr 2025 07:00:50 +0000
Manifest next update: Mon 21 Apr 2025 07:00:50 +0000
Files and hashes: 1: jAmWt03P0bu4ZvLrrU4W_cyStjs.crl (hash: qGoIbS2FFvIK3HWd4Dri+VaRvEMzRAZZAgK+UsW1xuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:f1:b8:e3:95:5f:4d:22:d5:11:a9:3b:4e:9d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Validity
Not Before: Apr 20 07:00:50 2025 GMT
Not After : Apr 21 07:00:50 2025 GMT
Subject: CN=0b2852b4ca2b8484748b80c7da16e6322e8b1815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:51:ac:7e:e0:2f:1c:92:ce:4f:27:cc:a4:
34:ed:c9:60:55:ad:0e:32:5d:a2:58:bf:23:33:a0:
0b:c4:11:5e:9f:28:1f:08:5f:88:05:aa:e5:d9:6b:
c3:01:00:d5:e3:7f:c9:27:ff:f1:98:da:03:22:92:
d3:99:a3:c4:e7:2e:9a:c1:63:d0:56:c8:1e:da:dc:
f8:33:f5:1d:3e:8b:9a:3f:f2:de:59:cc:3c:b8:0c:
7a:3c:29:c7:9b:37:a4:b6:a1:11:e7:2f:86:d0:a4:
cd:d9:6e:ee:61:7c:8f:fe:15:71:a3:c6:a1:3e:34:
1e:6d:f3:17:33:44:c8:28:1d:ad:97:e0:61:04:d0:
cc:7c:33:2a:78:66:49:38:29:90:86:b5:03:29:fb:
9c:ab:bb:5c:4c:9c:4f:18:14:bf:14:5c:4b:13:a3:
ad:d7:61:e9:30:ab:e4:e8:d7:bd:ae:b2:cf:67:a0:
1f:ad:ea:cc:b7:2d:d2:9a:1f:8e:11:49:71:b1:c7:
cc:57:8f:b7:5c:02:45:81:d3:b0:3e:d0:ca:c5:46:
3f:83:45:c2:2f:ab:e2:a4:89:d7:f2:25:98:b5:80:
05:73:2f:56:a6:81:63:a6:f0:6d:97:a7:52:e2:6f:
3b:fe:55:c5:a1:be:cd:23:fb:33:50:64:c9:f7:59:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:28:52:B4:CA:2B:84:84:74:8B:80:C7:DA:16:E6:32:2E:8B:18:15
X509v3 Authority Key Identifier:
keyid:8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9e:98:59:63:ce:3e:91:1c:75:1b:b2:e1:7d:ec:11:91:56:
e8:95:bc:81:52:a0:9a:e3:fc:13:dd:7f:de:90:01:5b:8b:3c:
4a:e5:a6:ea:e4:da:4b:58:76:1e:33:b4:7a:60:48:58:18:cd:
49:cc:cc:ee:3e:60:67:1f:3d:bf:73:41:fb:8a:79:b2:47:29:
5c:2b:42:15:23:d3:e2:bf:cc:aa:0e:36:6d:19:26:1e:b1:57:
02:d0:1e:1d:80:f9:0d:c9:4d:60:ec:a7:08:e8:22:2a:ab:9d:
15:6e:04:0d:00:4a:2d:8f:69:f5:76:63:03:6b:b9:ae:79:34:
32:1b:01:f2:9f:09:f5:a6:48:96:38:7a:d7:50:28:62:ea:73:
9e:18:fd:0b:89:51:e9:f3:58:01:de:6b:91:af:19:c0:26:57:
d7:e9:09:09:a4:fc:1a:2e:bf:61:e0:42:7e:d1:a8:38:1a:08:
85:0f:34:a1:f2:24:2d:d4:c8:4a:eb:39:eb:48:cf:31:23:fe:
21:de:05:3b:36:e7:16:29:49:26:bb:4e:fb:f0:7d:09:4f:c3:
35:57:34:ad:4c:aa:31:ef:ed:24:64:b3:cf:23:5f:b2:bf:2e:
70:2c:68:33:82:8a:16:b2:53:a3:2d:37:de:c0:f9:76:40:13:
d1:c9:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:38 2025 by rpki-client