Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
File: jAmWt03P0bu4ZvLrrU4W_cyStjs.mft (raw, json)
Hash identifier: l1iqWzh5DQMS5OWGoYa9HrNrPsmQ6g6sMUWN+84dX5w=
Subject key identifier: FD:35:03:ED:A5:D7:E4:09:9B:66:64:E7:D5:51:14:4C:C4:20:F6:7B
Authority key identifier: 8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
Certificate issuer: /CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Certificate serial: 01974B1FB12A350561451E3A0C01B2FD6FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
Manifest number: 0665
Signing time: Sat 07 Jun 2025 16:00:57 +0000
Manifest this update: Sat 07 Jun 2025 16:00:57 +0000
Manifest next update: Sun 08 Jun 2025 16:00:57 +0000
Files and hashes: 1: jAmWt03P0bu4ZvLrrU4W_cyStjs.crl (hash: EPz+M82ujFlMHeSR1suy6A9ZGMuC5Hfokac0WpM2YmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:b1:2a:35:05:61:45:1e:3a:0c:01:b2:fd:6f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Validity
Not Before: Jun 7 16:00:57 2025 GMT
Not After : Jun 8 16:00:57 2025 GMT
Subject: CN=fd3503eda5d7e4099b6664e7d551144cc420f67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:fb:e4:2c:0a:b6:a3:73:34:4b:3a:5d:81:
e8:d0:2e:9e:d6:6b:5d:51:10:e0:0d:d1:38:64:9d:
d5:68:5d:88:e3:9b:7c:02:da:00:a6:2c:b8:88:f3:
22:1b:67:b3:52:23:98:87:b3:36:c6:6f:01:d0:a5:
88:7d:76:43:26:c0:8d:9c:d1:f9:2d:54:ce:bd:3b:
cd:92:b6:1c:1d:0d:dc:09:7c:8b:e5:89:f1:3e:6b:
9d:9e:06:2c:f4:9f:a1:e2:53:d3:85:a2:be:5a:f4:
94:3d:19:a7:52:bc:78:bf:b1:62:0a:5c:89:6e:52:
e9:31:40:60:96:c2:34:fd:0d:df:05:7a:72:99:56:
e3:cd:b7:2a:9d:82:c8:50:58:a8:e2:b9:b6:ca:45:
f9:cc:05:8e:1a:76:94:e4:bb:f4:8f:ea:95:6f:99:
1c:94:72:1d:37:b3:ce:95:9f:cb:aa:96:6e:6a:34:
51:df:92:a6:60:87:6d:d2:65:6b:bc:51:89:0b:5a:
4a:7b:56:c6:4a:86:4a:0e:44:b6:81:02:0a:7e:50:
73:9f:81:7c:7c:64:a3:93:72:e5:89:08:c0:18:ed:
e2:12:35:60:8e:1b:1b:87:0f:0c:5e:26:37:32:cf:
17:27:40:00:50:11:51:c4:6c:19:8e:21:91:4b:98:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:35:03:ED:A5:D7:E4:09:9B:66:64:E7:D5:51:14:4C:C4:20:F6:7B
X509v3 Authority Key Identifier:
keyid:8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5a:80:b9:2b:7b:cd:41:7d:c6:e4:45:00:bd:fa:b6:52:12:
ab:52:6c:70:80:60:c8:f2:43:25:7d:33:91:ff:44:92:91:ee:
a0:5a:9d:16:8b:1d:6d:56:0d:ec:a6:f3:ea:fd:eb:09:49:01:
84:60:aa:1b:a3:08:64:8e:1c:2d:fc:0e:bf:06:4b:83:12:1c:
30:15:cc:56:64:d8:d2:d7:eb:7e:b7:a5:33:52:15:b5:cc:4b:
69:96:45:b9:f8:07:80:51:92:ef:61:72:f8:1b:d1:dd:39:d3:
c6:8e:23:d9:e3:75:93:6c:8e:a3:4e:1b:bb:ee:f1:ed:c2:5c:
f0:66:12:df:9c:98:a8:eb:23:64:3f:c0:f9:db:e6:da:31:18:
ba:8c:b7:84:ed:0f:e2:c8:7b:78:ef:71:01:d7:c5:10:6d:b0:
a0:a4:fc:65:25:0b:6a:d3:d9:7d:7e:24:ae:6c:80:2c:7c:e6:
c9:45:3e:93:27:26:b0:4b:fd:52:87:40:c6:89:fe:17:5d:06:
7e:15:63:e8:4f:a4:f8:90:5a:d7:22:ee:b1:c6:13:70:be:73:
9f:f7:de:8e:69:c2:ed:00:0b:b1:95:80:20:1c:62:3f:fa:5d:
24:9a:3c:7e:b7:ad:d5:18:78:9a:ee:5e:ec:dc:e7:16:d5:e6:
fd:6b:ec:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:06:45 2025 by rpki-client