Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
File: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json)
Hash identifier: HVTGTNjgORNYsHJfqDHaxirtnfZc3oyLZhSmNIa//AE=
Subject key identifier: FE:EB:27:5D:1F:9B:D5:DF:69:44:BC:8A:89:DF:22:66:47:F1:81:3C
Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
Certificate issuer: /CN=254351a867b9dae9db6764306bd732059f6d999e
Certificate serial: 019652A4F6BD4AD82CF08F510CFED19B8BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
Manifest number: 0829
Signing time: Sun 20 Apr 2025 10:01:04 +0000
Manifest this update: Sun 20 Apr 2025 10:01:04 +0000
Manifest next update: Mon 21 Apr 2025 10:01:04 +0000
Files and hashes: 1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: dtAlDPtTg8/cecl9KQUc6F96gO4oWMnfrDPFqqJbdUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:f6:bd:4a:d8:2c:f0:8f:51:0c:fe:d1:9b:8b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e
Validity
Not Before: Apr 20 10:01:04 2025 GMT
Not After : Apr 21 10:01:04 2025 GMT
Subject: CN=feeb275d1f9bd5df6944bc8a89df226647f1813c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:0a:56:a5:55:a7:38:86:1d:7d:d9:f2:ff:
bd:92:0d:78:60:91:aa:51:61:e4:ef:11:f0:3c:a1:
15:38:da:74:74:fc:19:f0:bd:d1:3d:e1:c6:ce:8b:
36:f8:40:3d:54:70:69:e4:e2:7a:56:96:9a:50:68:
19:86:55:e5:b3:26:53:f6:3a:35:4f:3c:ff:56:c9:
98:50:cf:b1:00:b3:81:a6:cf:be:3f:47:a7:7c:cb:
42:bb:6e:83:d5:52:48:c3:80:20:b0:86:27:58:f2:
d8:f5:57:20:95:a6:84:9d:dc:36:99:f5:ba:48:7b:
f9:49:70:a7:d6:7f:d3:47:0b:5e:03:e2:5e:8b:6a:
a8:91:c9:2b:36:df:e8:07:72:c1:a1:dc:6f:8c:20:
0f:16:a8:9b:d4:b6:55:59:70:3b:fa:45:79:0e:27:
13:3d:b4:14:bb:05:31:ee:bf:d0:20:b2:81:84:b3:
72:10:51:e7:e5:66:bf:73:54:71:27:c1:8a:41:10:
38:c8:53:51:f3:3f:7c:ba:6d:16:95:db:38:02:64:
5d:1a:b7:51:13:af:19:6f:9a:3a:2e:27:21:e1:b3:
9a:b9:90:6b:08:5b:96:c4:6e:50:e3:21:f6:28:42:
45:8a:6b:5d:c5:41:86:af:cb:38:e0:79:3f:78:17:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EB:27:5D:1F:9B:D5:DF:69:44:BC:8A:89:DF:22:66:47:F1:81:3C
X509v3 Authority Key Identifier:
keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b2:66:9c:17:27:b3:47:05:44:dd:ce:59:a0:1b:4f:c3:27:
f8:3e:24:d7:8f:5f:8f:d8:41:37:e2:04:e8:93:65:3e:e3:08:
aa:aa:4b:38:97:c4:26:8f:93:5a:9c:16:ec:00:34:26:fe:36:
23:fb:3e:6d:0b:ad:d1:6a:48:96:58:85:16:12:b8:b9:0b:cf:
cd:84:74:12:27:d9:01:c1:3c:cc:05:a0:79:16:65:3e:02:a8:
fc:56:bd:99:1e:39:5e:02:89:9f:a1:cd:f4:b7:8e:d5:57:c7:
0d:fb:dc:d1:ac:c2:e3:44:28:da:29:a3:f6:f3:9e:d6:4c:3d:
1a:78:25:35:4e:7d:be:80:09:56:4e:9f:92:d5:f8:97:2e:6d:
0d:d9:9d:04:0c:5c:21:b7:7c:b7:2b:9b:0e:57:b0:a4:ef:a7:
f3:37:db:52:a5:88:e0:86:f6:31:fc:19:69:74:f9:4a:62:07:
47:26:e4:1f:c3:43:07:ef:4f:bc:f4:d1:e0:93:a3:42:09:7c:
9c:fb:f5:c4:8c:4b:18:53:e3:9b:94:36:ed:80:fb:fd:8d:7a:
b3:56:d0:15:83:cb:58:8d:53:4b:fa:95:19:87:50:ba:60:92:
6b:09:72:63:3c:af:4c:08:15:d8:3d:28:a8:bd:bb:6e:7f:69:
6c:81:79:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpPa9Stgs8I9RDP7Rm4v1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDM1MWE4NjdiOWRhZTlkYjY3NjQzMDZiZDczMjA1OWY2
ZDk5OWUwHhcNMjUwNDIwMTAwMTA0WhcNMjUwNDIxMTAwMTA0WjAzMTEwLwYDVQQD
EyhmZWViMjc1ZDFmOWJkNWRmNjk0NGJjOGE4OWRmMjI2NjQ3ZjE4MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0AKVqVVpziGHX3Z8v+9kg14YJGq
UWHk7xHwPKEVONp0dPwZ8L3RPeHGzos2+EA9VHBp5OJ6VpaaUGgZhlXlsyZT9jo1
Tzz/VsmYUM+xALOBps++P0enfMtCu26D1VJIw4AgsIYnWPLY9VcglaaEndw2mfW6
SHv5SXCn1n/TRwteA+Jei2qokckrNt/oB3LBodxvjCAPFqib1LZVWXA7+kV5DicT
PbQUuwUx7r/QILKBhLNyEFHn5Wa/c1RxJ8GKQRA4yFNR8z98um0Wlds4AmRdGrdR
E68Zb5o6Lich4bOauZBrCFuWxG5Q4yH2KEJFimtdxUGGr8s44Hk/eBenhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7rJ10fm9XfaUS8ionfImZH8YE8MB8GA1UdIwQY
MBaAFCVDUahnudrp22dkMGvXMgWfbZmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNzYxMjEtNzZkNC00YTk4LTkxZTgt
MjA1Y2E2Njg4NTY0LzEvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jNzYxMjEtNzZkNC00YTk4LTkxZTgtMjA1Y2E2Njg4NTY0
LzEvSlVOUnFHZTUydW5iWjJRd2E5Y3lCWjl0bVo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrJmnBcn
s0cFRN3OWaAbT8Mn+D4k149fj9hBN+IE6JNlPuMIqqpLOJfEJo+TWpwW7AA0Jv42
I/s+bQut0WpIlliFFhK4uQvPzYR0EifZAcE8zAWgeRZlPgKo/Fa9mR45XgKJn6HN
9LeO1VfHDfvc0azC40Qo2imj9vOe1kw9GnglNU59voAJVk6fktX4ly5tDdmdBAxc
Ibd8tyubDlewpO+n8zfbUqWI4Ib2MfwZaXT5SmIHRybkH8NDB+9PvPTR4JOjQgl8
nPv1xIxLGFPjm5Q27YD7/Y16s1bQFYPLWI1TS/qVGYdQumCSawlyYzyvTAgV2D0o
qL27bn9pbIF52Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:30:20 2025 by rpki-client