Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: Yj42qXLi11hJALhwH5SG3crcTTEG2mFgp9a1lfVch2s=
Subject key identifier: CB:21:DE:29:A9:25:57:E0:76:05:63:E8:F4:E5:55:E4:67:8B:1F:74
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 019642557DD25CC1F2CB3C75D43E8551D42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 12D0
Signing time: Thu 17 Apr 2025 06:00:21 +0000
Manifest this update: Thu 17 Apr 2025 06:00:21 +0000
Manifest next update: Fri 18 Apr 2025 06:00:21 +0000
Files and hashes: 1: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: WXU6IciLxjFBfynocIF8eU0Vb9mSSdXa9eRufEoCqKc=)
2: WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa (hash: LWTe3RG5x6p18VhZoks9MnTE5mxlsn7m+dciM17vR7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:55:7d:d2:5c:c1:f2:cb:3c:75:d4:3e:85:51:d4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Apr 17 06:00:21 2025 GMT
Not After : Apr 18 06:00:21 2025 GMT
Subject: CN=cb21de29a92557e0760563e8f4e555e4678b1f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:b1:47:6d:bd:05:7d:c6:81:aa:34:2b:c3:
18:d3:cb:93:da:66:63:f3:ab:27:35:bd:ac:38:59:
d9:77:d3:d1:49:b1:93:93:d0:61:be:22:21:2b:60:
b8:f3:87:76:05:0d:36:e8:fe:9c:ef:29:05:a1:5d:
0e:27:9c:0c:ed:83:11:84:13:15:24:4f:81:3d:14:
a9:8d:29:0b:17:6d:f8:80:6e:13:49:dd:f0:23:2f:
d9:c2:57:6d:31:6f:a4:23:d5:35:40:06:ce:9f:53:
6e:f1:43:3d:fb:47:f4:f9:8c:69:b7:ed:f2:cd:64:
70:b2:2c:30:c2:42:ba:27:27:31:c6:b0:e7:67:f0:
2b:da:3c:6e:b7:06:2b:e1:7a:1d:5e:f0:b8:c9:39:
0c:0a:50:db:a3:16:d7:4c:d6:54:41:1b:fc:d2:d7:
4d:ba:fa:12:da:8d:d2:18:38:83:cf:99:7d:c3:97:
1b:c3:8f:21:ec:fe:ce:d0:33:e0:89:c7:ba:21:a7:
61:7b:b6:7a:75:6e:ca:05:d2:41:0e:1a:b1:7c:a8:
46:d1:b3:4b:09:a1:43:c5:7e:21:09:b9:bc:5f:d7:
92:c6:4c:59:09:1d:b6:68:14:cd:68:1e:d4:64:4f:
7a:74:7a:aa:cf:ce:bf:c0:8a:0f:c9:96:d6:15:8c:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:21:DE:29:A9:25:57:E0:76:05:63:E8:F4:E5:55:E4:67:8B:1F:74
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:11:c2:9a:83:38:0e:ba:02:35:cd:54:71:72:f4:7f:f3:1e:
ff:10:d9:99:97:ef:09:fc:8e:5c:cc:cf:4a:05:c8:95:c6:72:
90:6a:f2:e0:47:78:b3:2f:06:fc:03:80:45:73:c0:e7:1a:64:
ee:d9:63:78:b0:a0:32:89:03:45:73:53:9b:74:d4:eb:5a:5c:
d2:a1:24:8e:9e:9a:71:67:26:f8:6b:1b:fc:39:e3:69:05:85:
eb:71:59:c0:2e:b5:fd:e3:b1:1b:a7:ef:28:ac:e8:83:41:5b:
34:8e:1b:90:78:bc:18:c2:6e:3a:b5:92:09:77:5f:40:2e:5b:
ad:e0:76:f9:2b:ff:59:a4:78:13:5d:92:09:3b:e0:e0:ba:2d:
61:35:48:61:bc:23:db:1d:41:1a:50:40:5f:cc:49:fd:d5:fd:
ab:f6:19:b2:36:1c:ad:8c:43:c8:cc:8c:61:19:f9:da:6f:e2:
58:03:4b:1f:8a:51:a7:1b:c0:60:54:a4:1d:2e:7a:f6:2f:4a:
24:5c:22:20:dd:9c:4c:c4:6a:70:22:92:7e:07:f7:8f:cb:b8:
40:a2:35:83:59:9d:ac:2b:5a:af:ea:33:ad:b0:52:2a:db:d7:
99:ad:05:42:71:76:50:50:39:d8:d2:ba:50:e0:24:15:5f:c8:
7d:cf:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:34:49 2025 by rpki-client